Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4CB9CC5CEFDD11ED81AE706DC4F9AE02.roa
File: 4CB9CC5CEFDD11ED81AE706DC4F9AE02.roa (raw, json)
Hash identifier: ZmQPEIoWIDTXdR4ZS/Jp/Q69EW0GDxLCZn7NnV6szDQ=
Subject key identifier: 64:CF:BB:59:7F:D3:65:F1:4B:10:83:03:59:10:FE:70:4F:E3:0C:9F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 71ED
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4CB9CC5CEFDD11ED81AE706DC4F9AE02.roa
Signing time: Thu 11 May 2023 09:22:08 +0000
ROA not before: Thu 11 May 2023 09:22:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137678
IP address blocks: 103.112.21.0/24 maxlen: 24
103.112.22.0/23 maxlen: 24
103.117.202.0/23 maxlen: 24
103.136.82.0/23 maxlen: 24
103.146.222.0/24 maxlen: 24
103.195.253.0/24 maxlen: 24
192.140.230.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29165 (0x71ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 11 09:22:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645cb3bf-0bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:54:f7:f7:36:86:34:64:57:9e:4b:1d:ed:3f:
59:68:49:c5:77:56:05:45:26:36:e5:bc:12:5c:18:
99:02:4f:0a:ad:5d:bd:d0:c8:3c:86:44:d3:8d:77:
a4:18:8d:8e:fb:93:58:cc:41:5e:7b:06:a9:c2:05:
66:ec:99:82:48:44:b7:e1:24:09:3d:5f:6c:58:de:
e9:5f:07:5f:a7:0b:f1:8b:d3:c3:fa:0e:15:ae:ec:
c0:31:83:af:b5:96:81:b4:46:d8:84:3c:d0:03:fa:
ef:a0:c0:91:93:43:40:2f:f2:91:09:0c:45:e3:cd:
b4:e9:6c:3f:39:5a:db:e1:ee:13:46:e9:8b:25:ee:
78:c8:b0:de:c4:31:36:39:12:ec:a5:f2:b3:47:cc:
d7:75:32:e8:c6:df:10:43:77:86:19:c0:eb:fe:92:
71:2e:6c:87:62:f9:12:f4:75:80:32:2d:02:f0:98:
aa:72:24:6d:80:c4:4a:e0:10:ea:2d:88:3c:82:b0:
ff:cd:08:2a:6a:de:2d:81:ec:ff:4d:54:13:7e:52:
9e:9a:1c:79:9e:38:41:e8:5d:0f:bb:55:b8:f2:27:
06:8f:c5:fd:63:75:a2:56:09:f5:d9:08:bc:5e:1c:
26:1c:ab:11:5a:1e:af:cb:00:e2:49:ab:22:66:8b:
b7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CF:BB:59:7F:D3:65:F1:4B:10:83:03:59:10:FE:70:4F:E3:0C:9F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4CB9CC5CEFDD11ED81AE706DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.112.21.0-103.112.23.255
103.117.202.0/23
103.136.82.0/23
103.146.222.0/24
103.195.253.0/24
192.140.230.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:67:53:11:8f:26:e5:fc:f3:b4:16:5a:d1:74:42:d2:95:75:
be:10:b9:92:c0:97:d4:93:87:9d:5b:fc:ec:26:bd:d7:95:9f:
66:68:a9:c3:5b:81:74:2a:b6:b7:c1:33:fc:50:3a:ad:20:32:
7a:71:12:56:af:df:0b:28:f4:02:9b:b7:32:fd:4a:c5:ba:68:
90:9a:f7:2a:40:aa:94:a4:61:d0:c1:1f:33:1b:d5:46:2d:4d:
95:f5:2a:0e:9c:4e:4b:ad:1e:78:0a:fe:41:41:36:49:42:69:
45:e3:de:98:08:f7:bc:3d:0a:0b:40:5e:ca:a7:78:63:36:e7:
39:2d:f4:ef:fd:2b:12:13:6c:4a:af:b6:d2:ff:f4:60:c4:23:
dc:43:23:10:e3:91:c2:8f:6b:06:12:7d:7a:be:19:96:45:bd:
74:df:df:b9:06:e4:cd:52:b2:4a:e1:6f:54:58:a6:1a:8d:a8:
f1:7d:35:33:70:c2:05:6f:07:f1:0a:23:0f:66:fa:0b:5e:f3:
8e:61:52:bc:29:54:ee:9a:56:64:b6:88:34:b6:e9:3f:65:e8:
f0:aa:ed:47:81:2b:71:48:19:5f:41:05:f2:ae:5b:7a:49:9e:
e8:7b:fd:b5:ce:94:b8:90:57:e2:46:36:44:b5:33:09:36:cb:
a0:4c:9d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 01:51:20 2025 by rpki-client