Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53B2025C643811EE8602DF26C4F9AE02.roa
File: 53B2025C643811EE8602DF26C4F9AE02.roa (raw, json)
Hash identifier: kmGkpGX4CfDX2Fow2QjkppwwOgvYZZXV6Kyw7YXbp+U=
Subject key identifier: A4:94:C2:A8:15:67:9D:BD:7A:14:BD:AD:A5:45:6F:94:81:ED:FB:96
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 90C0
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53B2025C643811EE8602DF26C4F9AE02.roa
Signing time: Thu 30 May 2024 16:29:17 +0000
ROA not before: Thu 30 May 2024 16:29:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24029
IP address blocks: 45.114.60.0/22 maxlen: 24
103.54.16.0/22 maxlen: 24
103.97.92.0/22 maxlen: 24
203.119.49.0/24 maxlen: 24
203.119.50.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37056 (0x90c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:29:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a95d-bbc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:45:a0:1d:c1:4f:ba:f7:48:8e:f3:24:55:83:
c5:01:3c:0c:96:8e:b9:79:d0:35:e4:6a:45:c8:d2:
c1:b9:8d:1e:41:4f:3d:e5:ed:93:c7:20:3a:51:0d:
d1:74:7a:fe:9f:a9:97:ca:15:17:4d:e5:27:1c:f0:
e9:06:63:9d:4c:c9:21:87:14:64:4d:0b:57:cf:8d:
a1:86:8b:94:11:fb:bf:8c:ee:2d:9f:07:66:3c:b2:
58:a6:1e:79:7f:d3:17:44:8e:46:9a:af:c8:59:f4:
f5:f7:f2:bc:4e:bd:de:ca:16:0b:c7:70:34:99:c2:
f7:bf:27:b1:ea:3c:25:b3:00:b7:6e:e7:87:66:16:
ee:6d:61:21:4a:21:ef:94:14:05:45:e3:08:b5:2c:
c5:22:35:8e:d7:0e:93:07:6a:3e:4d:07:56:d6:5e:
a1:01:20:db:34:04:0a:9f:35:62:72:53:b0:3a:e5:
4b:81:4a:3b:0d:e4:e9:36:d3:04:0d:1d:e7:8a:58:
c7:b3:1a:c9:d9:e0:e4:7b:b4:59:93:36:99:2b:22:
26:13:4c:b7:ef:b8:69:80:d6:75:e6:03:d2:a9:7d:
4c:5a:e6:4f:69:18:b8:6e:78:a3:d7:45:32:45:58:
ea:74:86:eb:6f:cc:0c:f9:a0:09:6e:ad:65:67:44:
8c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:94:C2:A8:15:67:9D:BD:7A:14:BD:AD:A5:45:6F:94:81:ED:FB:96
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53B2025C643811EE8602DF26C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.114.60.0/22
103.54.16.0/22
103.97.92.0/22
203.119.49.0-203.119.50.255
Signature Algorithm: sha256WithRSAEncryption
9a:f8:10:2f:77:94:81:b4:75:ef:17:23:55:9a:75:e7:95:c0:
e5:68:44:de:35:92:53:95:70:07:ce:01:b0:23:30:16:02:55:
7a:cf:a0:ef:d4:06:f3:c5:af:0d:e4:8b:ed:b6:f1:06:96:fa:
b5:09:a1:4c:61:a5:30:42:4d:6a:18:6f:86:a1:ee:18:06:28:
c1:9d:8b:57:7e:5e:9a:81:a1:56:d5:97:1f:1b:c7:83:37:c9:
d3:c0:7d:27:36:b0:1c:fd:c0:43:88:d5:04:80:16:f2:c0:6e:
1d:08:1b:e7:11:67:8c:81:53:97:45:24:86:da:e9:a4:34:22:
c0:3b:24:9e:14:61:1d:f8:0a:95:77:2d:e5:3f:69:31:d5:a9:
f8:df:0e:09:e0:0b:cf:b9:41:7a:a7:3d:ba:12:91:1c:55:17:
2f:49:95:46:0c:bd:ef:43:92:07:79:7e:2e:14:40:0a:b6:4b:
3e:0c:d8:4a:d9:c6:5c:2a:dc:e3:64:b1:f2:0c:bd:42:a4:59:
55:87:ee:c2:f6:fe:19:83:22:bb:89:fc:70:a2:6d:a0:1b:a4:
49:3b:0c:be:c3:ca:c8:14:11:2f:37:f6:b9:79:7c:5f:3d:d1:
3b:37:c9:c4:c8:79:c1:d8:7d:5f:46:42:bf:14:46:0b:55:b3:
76:d3:7a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:58:30 2025 by rpki-client