Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5B227EEE26EE11EF81B1E029C4F9AE02.roa
File: 5B227EEE26EE11EF81B1E029C4F9AE02.roa (raw, json)
Hash identifier: ylH813Bwfas2xTBRubK3eRklJhf12uRGcGp6hn4Ut9o=
Subject key identifier: DF:87:F6:F6:47:55:74:99:84:CA:2B:B6:D1:71:AD:AB:7F:56:61:44
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 91BF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5B227EEE26EE11EF81B1E029C4F9AE02.roa
Signing time: Mon 10 Jun 2024 05:57:44 +0000
ROA not before: Mon 10 Jun 2024 05:57:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135772
IP address blocks: 14.192.52.0/22 maxlen: 24
45.127.232.0/22 maxlen: 24
103.68.216.0/22 maxlen: 24
103.126.32.0/22 maxlen: 24
103.139.60.0/23 maxlen: 24
103.176.126.0/23 maxlen: 24
103.177.178.0/23 maxlen: 24
103.196.220.0/22 maxlen: 24
2001:df6:6b00::/48 maxlen: 48
2403:67c0::/32 maxlen: 36
2407:a8c0::/32 maxlen: 40
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37311 (0x91bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jun 10 05:57:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=666695d8-18fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:41:9c:ec:d6:a0:c5:87:9d:94:74:a3:17:7c:
59:ab:b1:a6:b1:db:b3:25:4c:39:c1:d0:d1:71:ab:
7d:20:7f:89:14:0c:9d:05:33:71:ba:4c:87:3a:93:
01:3d:88:e3:70:1c:0e:d1:8a:3b:14:8e:4d:d1:8f:
4e:ed:e7:be:d3:ae:e5:89:42:34:2b:67:e4:19:59:
e3:ad:54:41:db:c7:c5:77:93:0b:f6:fe:d9:0b:19:
db:2e:32:4d:ca:7f:80:20:37:f1:5e:c6:5c:0f:9f:
c4:9c:bb:4d:91:3e:5d:27:59:09:bc:e0:8e:42:79:
98:70:c7:e5:25:26:97:89:1f:63:95:ac:59:63:59:
77:51:b0:56:68:28:e7:f7:09:6e:32:d8:c4:32:46:
d5:e1:35:d5:5d:53:23:cb:3b:1b:c2:fa:2f:fb:c7:
25:6b:6d:c3:2d:c5:84:90:60:0a:c7:9e:4f:f3:9a:
c1:70:8a:f6:65:c7:56:3f:2d:68:74:eb:f5:46:65:
f2:ce:5a:5d:62:28:eb:92:00:28:d5:2d:8a:d0:94:
53:b1:09:c2:b4:de:e3:94:68:85:34:e1:ab:c8:32:
62:2e:d2:23:42:ea:4b:eb:1e:62:b0:87:8f:9d:33:
58:78:1a:9a:ca:f3:3f:82:b0:bd:ed:21:ef:2e:00:
d6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:87:F6:F6:47:55:74:99:84:CA:2B:B6:D1:71:AD:AB:7F:56:61:44
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5B227EEE26EE11EF81B1E029C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.52.0/22
45.127.232.0/22
103.68.216.0/22
103.126.32.0/22
103.139.60.0/23
103.176.126.0/23
103.177.178.0/23
103.196.220.0/22
IPv6:
2001:df6:6b00::/48
2403:67c0::/32
2407:a8c0::/32
Signature Algorithm: sha256WithRSAEncryption
90:1e:90:dc:26:6b:df:b9:93:ce:7b:76:b1:d5:69:9b:47:98:
11:ed:f8:06:f7:f9:24:67:13:bd:6c:fd:a4:59:75:b9:9a:d9:
7f:da:bc:bb:09:f1:d4:94:c0:4f:99:d0:7b:f1:b4:27:85:16:
38:68:0f:29:b2:f4:ff:fd:b1:0d:d1:80:07:c1:07:68:b8:d6:
a9:fe:9d:3e:9c:0a:18:cf:ea:37:76:18:d6:ac:98:a2:46:86:
6c:06:e8:66:6f:24:d9:68:82:c9:57:61:ad:a3:13:d2:4b:71:
26:4e:de:9f:d7:97:14:34:8f:58:ea:90:17:e4:f8:25:85:f7:
02:44:c7:c7:bf:9a:f6:a3:e9:f3:89:86:6e:01:16:aa:b1:25:
dd:77:b6:2e:08:e0:d3:ed:a1:7a:97:63:f0:b0:60:cf:1a:58:
8d:c2:2d:71:23:51:13:5e:a4:5e:7b:57:3e:06:8b:79:c7:c1:
d6:ab:cc:9c:81:1c:aa:77:04:6f:49:eb:58:41:45:1b:8a:ab:
94:a7:70:23:a5:6a:ba:aa:eb:3e:77:d6:82:58:ec:f0:f8:45:
79:7a:dd:c4:97:5e:54:fc:fd:67:14:07:cc:4a:7d:2d:02:02:
a6:c0:7e:a7:c1:a0:6e:72:67:b1:79:cb:2e:2d:eb:41:ae:02:
8f:8b:f0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:27:03 2025 by rpki-client