Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0DA93D9ECA7111EE9F7E034FC4F9AE02.roa
File: 0DA93D9ECA7111EE9F7E034FC4F9AE02.roa (raw, json)
Hash identifier: ojkSKQTnErXeu+0nJBGRrt8T08/N/RJ7MFdM28q5N3o=
Subject key identifier: 34:88:A3:73:52:68:19:8B:45:C8:00:EB:08:18:6D:4D:CF:45:44:DB
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 885A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0DA93D9ECA7111EE9F7E034FC4F9AE02.roa
Signing time: Thu 30 May 2024 15:54:11 +0000
ROA not before: Thu 30 May 2024 15:54:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 132335
IP address blocks: 43.230.200.0/24 maxlen: 24
43.230.201.0/24 maxlen: 24
43.230.202.0/24 maxlen: 24
45.64.104.0/22 maxlen: 24
45.120.136.0/22 maxlen: 24
103.12.211.0/24 maxlen: 24
103.13.112.0/22 maxlen: 24
103.26.204.0/22 maxlen: 24
103.87.172.0/24 maxlen: 24
103.152.79.0/24 maxlen: 24
103.165.119.0/24 maxlen: 24
103.172.92.0/24 maxlen: 24
103.173.68.0/24 maxlen: 24
103.180.163.0/24 maxlen: 24
103.182.163.0/24 maxlen: 24
103.187.238.0/24 maxlen: 24
103.250.184.0/23 maxlen: 24
103.250.186.0/24 maxlen: 24
2001:df0:c1c0::/48 maxlen: 48
2001:df2:1000::/48 maxlen: 48
2001:df2:1001::/48 maxlen: 48
2001:df7:6880::/47 maxlen: 48
2405:7140::/48 maxlen: 48
2405:7140:1::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34906 (0x885a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 15:54:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a122-7afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5f:04:78:88:09:57:1d:e9:a9:ea:ce:e8:d8:
0b:8f:bc:06:ee:c3:d3:fd:d3:da:be:56:dd:ff:19:
66:88:1b:4f:f0:23:dd:40:3a:6d:bd:20:f1:e4:88:
26:4e:2f:43:a2:d4:ec:6f:ec:c9:63:fe:ef:c7:0f:
30:21:90:29:72:c4:e3:3a:51:25:30:f7:76:2d:45:
4a:fe:51:af:af:91:98:8f:80:d2:3d:0f:84:50:fa:
da:02:28:1a:4e:45:20:60:fd:e8:84:d8:21:2e:11:
ca:47:a6:d7:9c:61:7c:80:3f:67:98:53:fe:0c:48:
a5:34:ab:81:fc:6c:f4:a2:ce:9d:30:75:e9:f9:60:
92:11:f5:65:4c:2a:d4:80:ac:c8:52:3c:51:46:5b:
8b:cc:8b:c2:24:89:c4:42:bc:7c:4d:b3:a3:b5:f4:
e1:d6:aa:a0:25:85:8e:05:0f:fe:81:27:36:24:25:
0c:06:85:e6:c4:e1:11:f1:b7:7f:41:34:bc:c4:d3:
70:bf:b4:46:78:37:9d:e9:60:b7:72:39:9e:39:ab:
22:e4:f0:65:0a:ab:70:28:3d:fe:b7:3a:12:e7:ab:
1b:6a:24:23:ea:17:7f:21:2b:1d:76:8d:7a:a2:3e:
e7:3c:d8:0b:b3:a8:08:50:86:bb:4e:88:ba:5e:fd:
bb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:88:A3:73:52:68:19:8B:45:C8:00:EB:08:18:6D:4D:CF:45:44:DB
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0DA93D9ECA7111EE9F7E034FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.230.200.0-43.230.202.255
45.64.104.0/22
45.120.136.0/22
103.12.211.0/24
103.13.112.0/22
103.26.204.0/22
103.87.172.0/24
103.152.79.0/24
103.165.119.0/24
103.172.92.0/24
103.173.68.0/24
103.180.163.0/24
103.182.163.0/24
103.187.238.0/24
103.250.184.0-103.250.186.255
IPv6:
2001:df0:c1c0::/48
2001:df2:1000::/47
2001:df7:6880::/47
2405:7140::/47
Signature Algorithm: sha256WithRSAEncryption
8c:05:b3:05:02:4b:c7:37:3c:e1:f9:f2:39:57:57:72:fe:3e:
52:7b:4c:1d:da:4a:42:b4:93:6f:1a:37:cb:f3:29:28:cf:40:
d6:9c:da:bb:9e:53:9b:42:8c:e1:40:d2:16:77:5f:c3:04:d9:
fc:26:b3:84:bc:76:c3:54:df:0e:2d:0f:a1:bc:6c:1e:cd:36:
1c:c0:0e:6b:f5:0a:dc:98:cb:25:88:3d:b1:f9:63:28:0c:24:
7b:fa:7a:ac:d6:8f:69:66:67:d2:9d:5b:87:d3:b4:12:f6:8d:
22:06:76:ac:fd:25:a6:b7:ba:a3:ff:3d:ac:22:9a:26:a9:b5:
1c:5c:f2:ef:b1:29:09:39:70:23:7b:c3:63:f2:2a:45:17:d6:
bd:81:27:90:6a:88:75:eb:9e:6d:49:93:e5:03:cf:03:a0:b0:
45:28:41:7a:2a:9e:90:27:a4:ac:ee:56:71:e1:6c:08:e4:e8:
57:da:a8:ad:dd:f2:ea:a0:de:49:d4:04:e0:21:df:18:da:70:
13:99:ed:00:55:c0:b4:30:9b:c2:01:bb:92:a5:9b:cf:2b:c2:
26:36:79:8e:32:5b:1d:c0:64:8e:56:29:8a:55:a9:79:be:a5:
fe:77:a7:3b:18:98:6c:30:06:18:7c:6d:c6:90:6c:d7:2b:5a:
6a:61:fb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:45 2025 by rpki-client