Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/56AC04DAE81911ED8BEBA14DC4F9AE02.roa
File: 56AC04DAE81911ED8BEBA14DC4F9AE02.roa (raw, json)
Hash identifier: J3DLyxaGantNMNxLjzWh7O0++x47Ge9ndj08oeK5M+0=
Subject key identifier: 59:13:76:D2:D9:D8:FF:AB:2E:CC:6E:60:F6:63:BB:C1:10:BD:D5:C0
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6960
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/56AC04DAE81911ED8BEBA14DC4F9AE02.roa
Signing time: Mon 01 May 2023 12:11:45 +0000
ROA not before: Mon 01 May 2023 12:11:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 132752
IP address blocks: 103.77.20.0/24 maxlen: 24
103.77.21.0/24 maxlen: 24
103.77.22.0/24 maxlen: 24
103.77.23.0/24 maxlen: 24
103.114.67.0/24 maxlen: 24
103.121.4.0/24 maxlen: 24
103.121.5.0/24 maxlen: 24
103.163.14.0/23 maxlen: 24
103.168.60.0/24 maxlen: 24
103.171.108.0/24 maxlen: 24
103.179.121.0/24 maxlen: 24
103.180.177.0/24 maxlen: 24
103.229.209.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26976 (0x6960)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 1 12:11:45 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=644fac80-de1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bd:37:f7:76:41:78:0d:34:d2:fd:24:a5:2d:
3b:56:93:45:fd:34:b4:5b:92:25:46:a3:79:d2:11:
29:e0:ab:f2:0a:2a:29:15:86:04:f7:00:ee:05:13:
b3:a7:c4:c7:68:64:a4:db:c9:f7:69:90:ce:8d:e9:
0a:6b:1b:8a:70:66:94:6a:20:e9:db:a2:f6:7f:30:
fd:a0:87:39:3e:9e:13:4f:6b:62:70:33:82:e4:8a:
1f:82:b3:16:82:77:09:d4:33:da:49:27:0e:d5:1f:
9a:e0:ba:b2:2e:80:8e:2f:13:45:e5:23:54:2f:48:
e7:33:e8:02:18:36:91:16:52:62:65:92:4d:fc:6e:
70:07:25:27:5b:9b:32:80:f5:6a:d4:66:e1:cf:65:
92:8a:a9:db:59:95:99:2b:c9:25:85:23:83:af:a8:
66:8e:ec:dd:84:06:1c:5b:d9:82:8e:8a:9b:59:01:
11:52:5a:11:32:cc:38:3a:f4:c6:28:83:d2:c4:e9:
4b:18:86:a1:46:8f:ca:46:f5:1c:ac:83:27:f3:8f:
ee:2d:50:06:4a:bd:f7:e4:07:5f:ee:b4:4a:57:73:
31:c9:c0:26:77:d1:7e:23:f9:82:68:0f:9b:ed:30:
0d:45:d4:f3:e5:f0:0e:5a:a9:00:3d:ee:2d:d2:67:
c7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:13:76:D2:D9:D8:FF:AB:2E:CC:6E:60:F6:63:BB:C1:10:BD:D5:C0
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/56AC04DAE81911ED8BEBA14DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.77.20.0/22
103.114.67.0/24
103.121.4.0/23
103.163.14.0/23
103.168.60.0/24
103.171.108.0/24
103.179.121.0/24
103.180.177.0/24
103.229.209.0/24
Signature Algorithm: sha256WithRSAEncryption
03:fd:4a:80:31:72:d3:68:68:5b:40:3f:b0:88:ab:d8:fa:b7:
de:bc:5e:4e:db:4f:55:dc:89:9c:78:af:fe:a3:6a:aa:06:2c:
8f:f5:49:bb:83:5f:44:1a:c3:03:d7:c0:f1:d8:7d:48:31:d0:
fb:84:62:5f:9e:da:a5:2b:37:d2:9a:71:e5:43:26:76:5f:ff:
61:c5:59:ed:9b:1a:aa:98:7c:0b:75:76:7f:85:db:7e:13:ac:
ca:f6:e5:95:d5:e0:2f:51:aa:51:b0:b3:d1:ed:56:ed:78:45:
69:af:8b:95:0b:c3:e4:62:10:e8:95:c4:fe:72:77:66:22:f8:
e7:b9:40:25:c7:f4:b5:06:01:4d:ba:d8:94:c2:5a:1d:e9:f9:
db:a6:40:c2:2f:ca:68:5d:76:2a:3c:e5:d5:29:30:c4:7e:81:
ed:d0:d6:28:6e:dc:43:07:e5:8d:63:50:8d:47:70:65:c5:93:
02:cb:32:02:1a:5f:b0:9e:10:22:61:87:00:3a:66:d7:a4:a1:
c9:e3:06:5b:48:eb:07:da:93:5f:0e:7e:a4:8d:fd:75:91:a5:
f7:13:a1:b8:79:d1:61:56:f1:cc:1d:0b:2f:00:ab:b4:62:04:
2d:d0:ad:7e:5a:78:5c:39:ba:b0:89:88:e0:90:c7:4e:51:1b:
22:16:26:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:55:39 2025 by rpki-client