Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4AB76BBCE30A11EB942A3983C4F9AE02.roa
File: 4AB76BBCE30A11EB942A3983C4F9AE02.roa (raw, json)
Hash identifier: qLbi5rxK8benonRPNzg1xoF0vdNfcxBgUczQL6jEDRk=
Subject key identifier: F5:67:E0:62:05:03:E6:7F:64:6B:FA:CD:75:EE:13:D8:59:0C:11:16
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 45B3
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4AB76BBCE30A11EB942A3983C4F9AE02.roa
Signing time: Tue 11 Jan 2022 04:51:25 +0000
ROA not before: Tue 11 Jan 2022 04:51:25 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 137166
IP address blocks: 103.87.164.0/22 maxlen: 22
103.87.164.0/24 maxlen: 24
103.87.165.0/24 maxlen: 24
103.87.166.0/24 maxlen: 24
103.87.167.0/24 maxlen: 24
103.120.238.0/24 maxlen: 24
103.120.252.0/24 maxlen: 24
103.120.253.0/24 maxlen: 24
103.120.254.0/24 maxlen: 24
103.120.255.0/24 maxlen: 24
103.135.61.0/24 maxlen: 24
103.135.62.0/24 maxlen: 24
103.135.63.0/24 maxlen: 24
103.170.194.0/24 maxlen: 24
103.172.94.0/23 maxlen: 24
103.198.96.0/22 maxlen: 22
103.198.96.0/24 maxlen: 24
103.198.97.0/24 maxlen: 24
103.198.98.0/24 maxlen: 24
103.198.99.0/24 maxlen: 24
150.242.204.0/22 maxlen: 24
2001:df7:6a80::/48 maxlen: 48
2402:7f40::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17843 (0x45b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jan 11 04:51:25 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=61dd0ccd-e8d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:67:b0:73:2a:06:47:51:8d:71:ee:4f:5a:65:
69:c0:5d:09:71:b2:84:8b:97:9a:72:52:b5:28:01:
6d:93:e7:33:39:5c:5b:54:bc:ad:f1:bb:ed:98:22:
e0:38:f5:55:3b:37:21:5a:3e:8b:56:ac:82:6d:70:
96:a1:b7:ee:a7:27:8f:cf:50:97:e1:09:c7:19:88:
53:44:f8:43:4e:0b:c8:fb:ae:d5:ec:6b:80:d3:61:
87:bf:18:05:3f:a8:71:d7:7a:45:72:40:a0:b3:16:
20:b3:81:80:c4:4e:f7:c9:e4:15:79:a6:9c:90:a9:
5c:bf:4d:c6:71:46:80:7a:34:32:3b:2a:82:98:40:
ef:bc:b0:e6:4c:a2:23:f4:b8:24:73:5f:a1:23:09:
fe:92:bb:1b:49:3c:8d:33:00:e9:9f:e6:5f:36:f2:
53:c4:2d:47:8a:be:0e:4f:13:aa:b9:c5:8f:6f:6a:
94:80:42:2f:b0:0a:9b:b4:04:11:88:76:3f:ff:13:
55:16:07:14:ab:26:83:b8:64:d1:88:07:a1:e0:62:
be:21:bb:8d:ad:9a:af:b2:82:2b:72:cb:b8:af:e2:
c0:0d:75:e0:41:1b:d5:7b:42:0f:f0:b8:f8:b0:c2:
ad:d4:17:60:69:1c:11:9e:dd:40:5b:46:00:02:fa:
db:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:67:E0:62:05:03:E6:7F:64:6B:FA:CD:75:EE:13:D8:59:0C:11:16
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4AB76BBCE30A11EB942A3983C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.87.164.0/22
103.120.238.0/24
103.120.252.0/22
103.135.61.0-103.135.63.255
103.170.194.0/24
103.172.94.0/23
103.198.96.0/22
150.242.204.0/22
IPv6:
2001:df7:6a80::/48
2402:7f40::/32
Signature Algorithm: sha256WithRSAEncryption
89:c3:ab:52:cf:ed:8f:cb:78:7d:b8:96:96:f8:90:08:c0:00:
f1:8f:74:d8:fc:ec:ef:e4:d8:d6:74:6d:e4:cd:fe:ed:05:80:
f9:88:44:98:fb:7d:f7:13:80:59:90:6f:38:58:41:58:d1:60:
e4:76:11:c3:05:ac:d8:5c:46:12:6c:70:b5:64:be:6a:d4:66:
7c:e2:c3:25:44:8a:65:a9:82:e0:31:ff:42:68:44:ff:0e:f6:
b4:63:7c:6c:29:29:7d:ed:5e:d5:88:93:78:aa:e7:46:5c:a3:
54:eb:06:2e:84:1c:a7:57:72:ae:d4:2f:36:55:4c:de:52:68:
1c:ec:83:c7:20:5e:d9:01:cf:d3:1e:7f:61:38:e1:e7:58:24:
ca:ba:94:98:a6:f0:87:83:94:de:9d:b0:5f:45:64:4c:a3:67:
2a:29:9c:cb:99:d8:ff:36:4f:59:99:bb:d5:df:1c:60:f1:92:
38:91:b6:5e:31:b7:d6:9d:3f:53:15:b9:81:86:6a:c5:33:40:
72:3e:eb:3c:ff:65:3e:b6:c0:5d:f3:2e:ea:26:a9:01:03:08:
ea:c5:6a:a5:32:35:c0:2e:d3:36:77:0a:55:22:d4:df:03:a8:
ba:27:b1:6a:5a:db:59:c0:11:f2:47:01:6c:17:37:29:8a:a7:
26:ce:1e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:53:55 2025 by rpki-client