Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/300DE23C093F11EBA023E10CC4F9AE02.roa
File: 300DE23C093F11EBA023E10CC4F9AE02.roa (raw, json)
Hash identifier: WTx5LrvM/f6btxaQGM/w94NSixJUJf+9IASn9ZYtRKc=
Subject key identifier: 20:CB:A2:0E:17:17:1A:80:43:08:D2:4A:3D:2F:2F:13:C2:B2:B8:66
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6CCC
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/300DE23C093F11EBA023E10CC4F9AE02.roa
Signing time: Wed 10 May 2023 16:26:18 +0000
ROA not before: Wed 10 May 2023 16:26:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137093
IP address blocks: 103.107.112.0/22 maxlen: 24
103.192.204.0/22 maxlen: 24
202.53.134.0/23 maxlen: 24
202.155.186.0/24 maxlen: 24
202.155.187.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27852 (0x6ccc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 10 16:26:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bc5a9-b402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:81:46:ae:c9:8a:61:23:77:85:66:1e:42:82:
92:0f:64:ba:cb:a0:d2:58:c1:d9:f4:34:16:20:91:
5e:8a:45:ec:26:74:c0:67:b8:e5:22:f5:03:7c:e2:
58:b9:77:81:ca:2a:cf:17:e9:19:f8:21:4c:3c:ac:
42:86:14:a9:a5:2e:74:93:89:4c:62:9c:17:49:0e:
d8:95:60:20:6c:62:e3:e5:6a:b7:d0:23:f8:5b:0b:
49:89:c3:4f:cb:67:ad:68:e6:1e:4b:4e:c8:39:7d:
06:7b:51:aa:92:14:a6:6f:23:94:e2:5a:c4:6a:99:
8c:51:1d:0f:9e:48:ab:b4:78:bb:cb:b9:7e:2f:f3:
70:8f:a3:7e:16:f3:63:2c:c5:87:df:5f:a0:44:95:
32:00:bc:f9:b1:83:83:27:b0:55:6d:6a:50:da:87:
dc:d0:a5:8f:36:75:17:46:ea:b1:bf:ba:b7:f7:fc:
2b:37:b4:b6:f4:26:63:d9:54:72:16:9b:8d:f7:ac:
d7:69:a1:ff:71:2b:b4:4a:d5:46:6b:16:6e:4a:58:
20:3e:8e:1c:f8:20:b6:df:d0:f2:90:d9:9e:df:10:
35:cb:6b:02:6f:bf:2f:c8:0a:8f:50:22:ef:27:7f:
66:bb:8f:22:e4:2c:ce:51:70:65:fa:5a:03:04:6a:
32:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CB:A2:0E:17:17:1A:80:43:08:D2:4A:3D:2F:2F:13:C2:B2:B8:66
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/300DE23C093F11EBA023E10CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.107.112.0/22
103.192.204.0/22
202.53.134.0/23
202.155.186.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:b2:e7:00:78:ac:3a:eb:f6:6b:db:a6:6b:d1:c6:0b:b4:c2:
64:50:5f:fe:af:f4:c1:4b:a8:ca:60:6f:2c:41:fa:e1:51:eb:
3f:a4:82:c1:e0:70:99:74:91:76:f7:d2:3a:2d:01:a8:20:48:
c1:b9:41:87:46:a3:af:34:a6:71:00:2f:55:3a:84:13:34:3e:
d7:72:87:aa:a4:eb:4a:6e:31:72:71:c1:45:51:08:d3:93:59:
6c:f7:84:5e:7f:54:f2:d1:12:5f:fc:af:7b:b5:76:e0:1a:08:
a4:48:18:b1:e3:70:d4:34:90:94:14:a5:e9:79:dd:55:57:08:
61:b6:94:11:cc:6f:74:ea:40:d9:68:c0:37:a8:bf:5b:cd:cf:
73:c6:54:59:14:c4:6e:c9:08:3f:c0:7d:37:8f:20:e6:3f:c2:
76:4e:7b:51:b0:cd:17:aa:b0:bf:3d:1e:c8:27:4e:e5:46:bf:
55:40:8a:6a:0e:ea:a2:b9:4f:bb:59:ad:21:0d:58:72:7f:38:
44:3e:5b:17:05:73:f1:bf:f0:ac:42:66:8d:ff:51:65:c7:88:
55:83:29:22:ff:c0:1f:70:5f:c4:97:2b:50:50:53:02:ec:da:
93:4c:62:96:ba:95:c5:8c:d7:de:81:b3:0a:d3:1f:5e:d7:ad:
1c:01:7f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:17:46 2025 by rpki-client