Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/568EC0B8362D11EC96016F6AC4F9AE02.roa
File: 568EC0B8362D11EC96016F6AC4F9AE02.roa (raw, json)
Hash identifier: cU1W0xPs5cqUzvymltGha5HSrr8ZKJF71VRghgto5T4=
Subject key identifier: E9:B0:BD:F3:95:00:34:FF:EE:0F:BB:65:5D:B6:CD:DC:E2:0A:9F:FD
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 73A9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/568EC0B8362D11EC96016F6AC4F9AE02.roa
Signing time: Fri 09 Jun 2023 07:12:07 +0000
ROA not before: Fri 09 Jun 2023 07:12:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 138311
IP address blocks: 43.252.24.0/22 maxlen: 24
45.252.180.0/22 maxlen: 24
103.96.40.0/24 maxlen: 24
103.96.41.0/24 maxlen: 24
103.96.42.0/24 maxlen: 24
103.132.244.0/23 maxlen: 24
103.133.158.0/23 maxlen: 24
103.157.122.0/23 maxlen: 24
103.163.90.0/24 maxlen: 24
103.163.91.0/24 maxlen: 24
103.169.240.0/23 maxlen: 24
103.171.132.0/24 maxlen: 24
103.171.133.0/24 maxlen: 24
103.175.170.0/23 maxlen: 24
103.176.186.0/24 maxlen: 24
103.176.187.0/24 maxlen: 24
103.195.82.0/23 maxlen: 24
103.196.184.0/23 maxlen: 24
103.207.11.0/24 maxlen: 24
103.212.152.0/23 maxlen: 24
103.212.154.0/23 maxlen: 24
210.16.92.0/24 maxlen: 24
210.16.93.0/24 maxlen: 24
2405:3440::/32 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29609 (0x73a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jun 9 07:12:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6482d0c7-cb95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8a:a5:72:a5:41:4b:8f:e6:72:2c:80:dc:1e:
4c:fb:36:71:b5:df:ae:08:5d:ed:0a:98:6d:e7:8b:
d2:a4:75:b7:5a:bc:7f:95:16:02:e7:01:0b:06:06:
cc:d3:7a:8e:1b:3f:ac:df:54:ca:89:b6:41:66:0d:
a4:aa:8d:19:c3:ec:af:1a:62:4a:d4:09:e2:bc:77:
47:90:c9:e4:fd:0e:f8:e7:fc:4a:b6:75:d1:4f:f8:
68:80:63:e2:46:45:4a:0d:6b:1a:3a:28:c5:42:5c:
4a:ae:5d:40:89:ba:5e:ba:61:a7:7c:4b:f1:e2:4d:
3b:f0:cd:43:d0:ea:2d:d5:27:a1:c2:44:3d:63:24:
fb:f4:c8:f2:08:10:89:fd:b4:57:8f:85:0f:51:23:
e2:9b:9b:9a:3d:7a:02:d8:e1:06:7f:ed:be:e2:1e:
66:d6:57:75:8e:41:04:ff:04:f4:89:ea:b8:33:17:
29:eb:7f:5b:f9:a2:d3:93:22:64:0d:1e:1b:be:2b:
2a:3f:47:d5:f4:fd:a6:53:72:10:59:ba:cf:df:2b:
7f:22:c8:24:a6:18:22:bf:57:a0:72:73:6f:5f:01:
71:89:2a:28:5b:83:92:db:89:56:7d:46:10:6a:bb:
89:20:b0:92:0d:29:6d:27:c5:ac:77:38:0c:59:e9:
c3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B0:BD:F3:95:00:34:FF:EE:0F:BB:65:5D:B6:CD:DC:E2:0A:9F:FD
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/568EC0B8362D11EC96016F6AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.252.24.0/22
45.252.180.0/22
103.96.40.0-103.96.42.255
103.132.244.0/23
103.133.158.0/23
103.157.122.0/23
103.163.90.0/23
103.169.240.0/23
103.171.132.0/23
103.175.170.0/23
103.176.186.0/23
103.195.82.0/23
103.196.184.0/23
103.207.11.0/24
103.212.152.0/22
210.16.92.0/23
IPv6:
2405:3440::/32
Signature Algorithm: sha256WithRSAEncryption
78:b6:ce:7f:4e:84:d4:f9:bf:05:4d:02:1b:4d:85:a3:6a:74:
3a:1b:6f:f7:06:7c:a2:ac:92:b1:23:b2:fc:af:9a:7a:1b:63:
70:59:ca:a6:4e:75:e1:9a:6e:89:48:86:fa:e4:2f:03:77:39:
d6:25:6c:37:c1:59:48:6a:c5:5e:8b:30:c2:65:0d:40:28:6e:
a9:4f:c9:f7:8a:1d:7c:a0:fe:eb:94:f8:5f:2f:77:31:fa:c7:
d3:70:82:c2:54:2a:c4:27:e7:64:6f:f1:01:42:de:7d:11:ad:
31:91:a8:98:de:d6:cc:16:7a:dd:f0:a9:7e:46:30:9a:e0:61:
61:fe:be:17:e2:5e:cf:68:4c:49:ea:0d:8e:fe:e4:7d:b2:df:
88:ec:37:0d:b6:54:05:57:c0:67:64:fc:03:5b:5e:35:32:29:
23:de:bb:b5:09:13:cb:ea:ba:dc:d3:d8:9d:7f:49:80:ae:c2:
38:2d:c5:01:74:1d:0a:79:e8:3d:b0:70:89:59:58:d6:6a:57:
53:8d:c8:d7:b2:91:c6:1f:11:c3:1c:ef:03:a3:4a:fa:34:98:
51:75:27:a9:63:8a:80:9a:1d:9a:55:d6:83:89:20:c3:00:3f:
14:a6:f4:69:6c:93:2d:07:53:b3:06:50:d7:f9:60:a5:9a:03:
4f:de:2a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:52 2025 by rpki-client