Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/6BE0EA4629CE11EDBFEBD486C4F9AE02.roa
File: 6BE0EA4629CE11EDBFEBD486C4F9AE02.roa (raw, json)
Hash identifier: MlWKKLqiLZ4Bhpn+vvx1x0s4s31S1O4KcjiFN9MTqBA=
Subject key identifier: EA:D9:1A:6E:1B:18:67:F9:16:BF:38:6D:F4:53:44:CF:C8:29:9E:C6
Certificate issuer: /CN=A916B0EA/serialNumber=15DF79A00739BC39B7178925958DFEE99BE00D42
Certificate serial: 0616
Authority key identifier: 15:DF:79:A0:07:39:BC:39:B7:17:89:25:95:8D:FE:E9:9B:E0:0D:42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/6BE0EA4629CE11EDBFEBD486C4F9AE02.roa
Signing time: Thu 06 Oct 2022 20:26:48 +0000
ROA not before: Thu 06 Oct 2022 20:26:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59332
IP address blocks: 45.116.248.0/22 maxlen: 23
45.116.248.0/24 maxlen: 24
45.116.249.0/24 maxlen: 24
45.116.250.0/24 maxlen: 24
45.116.251.0/24 maxlen: 24
103.228.0.0/22 maxlen: 22
103.228.0.0/23 maxlen: 24
103.228.2.0/24 maxlen: 24
103.228.3.0/24 maxlen: 24
2400:dc80::/32 maxlen: 32
2400:dc80::/36 maxlen: 36
2400:dc80:1000::/36 maxlen: 36
2400:dc80:2000::/36 maxlen: 36
2400:dc80:3000::/36 maxlen: 36
2400:dc80:4000::/36 maxlen: 36
2400:dc80:5000::/36 maxlen: 36
2400:dc80:6000::/36 maxlen: 36
2400:dc80:7000::/36 maxlen: 36
2400:dc80:8000::/36 maxlen: 36
2400:dc80:9000::/36 maxlen: 36
2400:dc80:a000::/36 maxlen: 36
2400:dc80:b000::/36 maxlen: 36
2400:dc80:c000::/36 maxlen: 36
2400:dc80:d000::/36 maxlen: 36
2400:dc80:e000::/36 maxlen: 36
2400:dc80:f000::/36 maxlen: 36
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1558 (0x616)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B0EA/serialNumber=15DF79A00739BC39B7178925958DFEE99BE00D42
Validity
Not Before: Oct 6 20:26:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=633f3a08-89dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:71:52:17:9a:a0:49:39:b6:84:b2:ac:d2:19:
81:66:08:b2:81:e0:d6:cf:33:68:42:70:e6:cc:db:
26:d6:79:cc:27:c2:e0:e8:1b:d1:e2:9c:6a:fd:59:
fe:df:d5:77:3b:d0:4c:39:f0:d5:15:e9:42:f9:33:
40:16:fe:34:6d:26:de:3a:a5:95:f7:03:3f:80:1e:
df:e5:4b:4d:bc:4b:05:dd:84:34:ff:24:ef:15:37:
7b:a9:e0:44:3a:06:46:29:8b:b5:d1:93:81:fe:ba:
3e:ff:fd:d0:28:9d:86:48:59:cd:99:5e:b7:77:d3:
58:d0:1b:88:11:8f:21:f9:1d:53:fe:a7:0a:d2:0d:
88:cd:47:1a:ad:f6:16:d5:e6:d5:a9:18:47:cf:35:
dd:9b:d1:59:d7:c3:3d:9c:98:aa:2d:a4:e8:1a:48:
ae:5e:46:87:67:20:20:57:c9:e0:61:7f:28:74:9f:
5b:30:c3:b2:ea:78:7c:69:1c:7a:bc:29:a2:ed:c7:
9c:38:12:ae:c3:cd:ae:a9:40:6a:8a:3f:89:4e:99:
d8:00:8b:04:b2:4e:72:8f:4f:fd:e6:05:fe:29:eb:
87:cb:ae:75:f8:53:41:86:74:2f:f9:df:f0:d3:49:
ff:2b:a8:6a:9f:3d:6b:b9:80:7d:ff:d9:0a:d2:2b:
26:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D9:1A:6E:1B:18:67:F9:16:BF:38:6D:F4:53:44:CF:C8:29:9E:C6
X509v3 Authority Key Identifier:
keyid:15:DF:79:A0:07:39:BC:39:B7:17:89:25:95:8D:FE:E9:9B:E0:0D:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/6BE0EA4629CE11EDBFEBD486C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.116.248.0/22
103.228.0.0/22
IPv6:
2400:dc80::/32
Signature Algorithm: sha256WithRSAEncryption
c4:5b:74:c4:ff:59:35:5e:c8:0a:18:ba:e0:1a:68:86:94:f2:
f7:58:59:9e:ee:9f:30:6f:3f:02:a9:55:f6:8e:95:61:10:3f:
16:2d:3f:92:fd:1d:73:14:4d:73:0d:71:34:9d:66:39:bd:d3:
7d:10:91:84:ce:c0:6a:c6:02:87:d2:ed:85:ca:49:8a:ee:88:
49:97:17:38:a0:0e:d1:cd:e5:e6:0c:e9:17:71:9d:c7:52:27:
2c:60:3e:91:b6:de:48:d6:13:9b:96:fe:38:03:38:93:62:97:
66:75:48:f1:49:05:e0:74:ae:1b:8e:df:03:3f:3f:4c:79:5e:
4f:e3:11:d6:57:35:95:86:1c:58:8a:ce:ef:d3:b2:5a:49:aa:
1d:4e:9b:bf:66:35:8d:47:ff:9d:55:c1:ae:22:2a:f0:c0:72:
b1:3e:51:09:e8:b8:c9:55:92:b5:61:39:d0:90:d0:d1:83:00:
5f:ef:52:2a:eb:5f:48:55:ab:d0:3b:f3:61:85:43:23:8b:5c:
64:12:f5:52:ad:44:6e:46:03:12:72:b0:b4:f7:be:20:97:9c:
78:f3:98:5f:87:d4:4f:06:96:24:b3:31:a9:2d:8c:09:f6:27:
9f:9c:75:19:7f:d2:2b:63:de:06:b2:54:e9:b1:a3:f4:2f:9c:
9c:b5:1c:23
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICBhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkIwRUExMTAvBgNVBAUTKDE1REY3OUEwMDczOUJDMzlCNzE3ODkyNTk1OERGRUU5
OUJFMDBENDIwHhcNMjIxMDA2MjAyNjQ4WhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzNmM2EwOC04OWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA13FSF5qgSTm2hLKs0hmBZgiygeDWzzNoQnDmzNsm1nnMJ8Lg6BvR4pxq/Vn+
39V3O9BMOfDVFelC+TNAFv40bSbeOqWV9wM/gB7f5UtNvEsF3YQ0/yTvFTd7qeBE
OgZGKYu10ZOB/ro+//3QKJ2GSFnNmV63d9NY0BuIEY8h+R1T/qcK0g2IzUcarfYW
1ebVqRhHzzXdm9FZ18M9nJiqLaToGkiuXkaHZyAgV8ngYX8odJ9bMMOy6nh8aRx6
vCmi7cecOBKuw82uqUBqij+JTpnYAIsEsk5yj0/95gX+KeuHy651+FNBhnQv+d/w
00n/K6hqnz1ruYB9/9kK0ismGQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFOrZGm4b
GGf5Fr84bfRTRM/IKZ7GMB8GA1UdIwQYMBaAFBXfeaAHObw5txeJJZWN/umb4A1C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjBFQS80RDhFNDlCMDBC
NzQxMUVBQTU4NDAwMUNDNEY5QUUwMi9GZDk1b0FjNXZEbTNGNGtsbFkzLTZadmdE
VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZkOTVvQWM1dkRtM0Y0a2xsWTMtNlp2Z0RVSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkIwRUEvNEQ4RTQ5QjAwQjc0MTFFQUE1ODQwMDFDQzRGOUFFMDIvNkJFMEVBNDYy
OUNFMTFFREJGRUJENDg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E
JTAjMBIEAgABMAwDBAItdPgDBAJn5AAwDQQCAAIwBwMFACQA3IAwDQYJKoZIhvcN
AQELBQADggEBAMRbdMT/WTVeyAoYuuAaaIaU8vdYWZ7unzBvPwKpVfaOlWEQPxYt
P5L9HXMUTXMNcTSdZjm9030QkYTOwGrGAofS7YXKSYruiEmXFzigDtHN5eYM6Rdx
ncdSJyxgPpG23kjWE5uW/jgDOJNil2Z1SPFJBeB0rhuO3wM/P0x5Xk/jEdZXNZWG
HFiKzu/TslpJqh1Om79mNY1H/51Vwa4iKvDAcrE+UQnouMlVkrVhOdCQ0NGDAF/v
UirrX0hVq9A782GFQyOLXGQS9VKtRG5GAxJysLT3viCXnHjzmF+H1E8GliSzMakt
jAn2J5+cdRl/0itj3gayVOmxo/QvnJy1HCM=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:45 2023 by rpki-client on console-fra.rpki-client.org