Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/61E5795E511911ED9308A55CC4F9AE02.roa
File: 61E5795E511911ED9308A55CC4F9AE02.roa (raw, json)
Hash identifier: VsvxN6T46rJAINRaboN0YSXlvsg15bUYyRNrDzRwIcA=
Subject key identifier: BD:62:49:58:09:5E:45:89:37:F0:24:20:0B:14:8F:76:DA:99:7D:1D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9EF6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/61E5795E511911ED9308A55CC4F9AE02.roa
Signing time: Thu 12 Dec 2024 10:11:34 +0000
ROA not before: Thu 12 Dec 2024 10:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136629
IP address blocks: 45.248.36.0/23 maxlen: 24
103.99.200.0/22 maxlen: 22
103.99.200.0/24 maxlen: 24
103.99.201.0/24 maxlen: 24
103.99.202.0/24 maxlen: 24
103.99.203.0/24 maxlen: 24
103.177.2.0/23 maxlen: 24
2406:ffc0::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40694 (0x9ef6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Dec 12 10:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=675ab6d5-4291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e5:84:22:82:3a:4a:19:2d:3c:c0:55:26:19:
d2:07:47:3b:e4:a1:77:ea:af:30:b0:ce:b0:33:24:
35:4c:6d:ea:c0:11:5f:4f:75:6e:b9:10:ad:6e:e8:
d7:ad:61:08:40:1d:12:df:b6:59:0d:a9:bf:f8:41:
55:19:d8:2a:6c:57:f9:8d:ca:66:be:1a:07:f7:5e:
ab:f2:26:65:18:33:2f:9a:92:fc:09:71:10:5f:77:
fb:22:25:51:52:e9:68:68:b9:71:f4:7c:a4:49:bf:
9e:b2:37:95:9d:5c:b8:f9:7f:7c:aa:4c:83:4d:7e:
ad:85:2f:63:96:6a:6b:db:cf:46:f4:ca:ef:37:dc:
07:02:bc:0e:54:33:c1:28:51:ec:86:16:9b:38:79:
07:ac:b5:a4:c7:2e:33:85:4d:2c:09:df:8c:3b:77:
4c:33:cc:e6:fc:5a:8c:20:46:09:60:13:e7:5a:9e:
7e:f4:13:db:cb:f3:67:16:77:b0:83:36:c4:f0:05:
ec:e4:fc:5e:e1:c5:31:fb:a2:67:10:d6:51:cf:22:
8b:05:bb:81:b6:3d:34:7e:fd:b2:2a:92:81:00:aa:
62:cb:49:70:77:7e:b7:83:67:2e:2c:4e:07:17:09:
86:e4:f2:ae:ae:a9:e5:3d:c8:30:31:c1:95:be:38:
11:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:62:49:58:09:5E:45:89:37:F0:24:20:0B:14:8F:76:DA:99:7D:1D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/61E5795E511911ED9308A55CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.248.36.0/23
103.99.200.0/22
103.177.2.0/23
IPv6:
2406:ffc0::/32
Signature Algorithm: sha256WithRSAEncryption
73:92:6a:af:7c:60:e6:74:20:80:50:bf:7f:5e:07:f5:94:2d:
60:13:b9:eb:3a:65:cc:c1:11:16:e5:e3:aa:28:40:00:c5:5d:
a0:76:67:bc:e6:2a:d7:00:b1:f7:9b:77:9d:09:18:86:6f:cc:
37:65:8e:1c:9b:64:8f:4d:ee:f9:d7:b3:ba:70:d1:d4:57:04:
17:ba:c9:61:81:f9:2c:6c:3c:d0:7f:af:25:f9:bf:bf:03:f4:
d2:07:fa:b6:96:4b:48:a4:e9:50:93:86:61:2f:7e:e9:b8:a1:
69:4a:15:e7:6b:ba:01:ff:7d:02:31:5a:1d:1b:5c:d2:8d:51:
2b:d4:5e:92:2c:f2:d4:65:65:49:e4:bb:d6:dc:48:24:c4:c5:
04:a5:e5:64:42:65:d7:42:d6:93:4a:c2:4e:5b:58:88:42:84:
89:57:89:e4:22:3a:a7:f0:f1:dc:5a:d9:b6:02:d1:8a:99:3f:
52:ec:19:be:59:4c:44:32:1c:00:99:56:79:2c:35:3c:9e:b7:
42:a0:56:2e:2d:46:50:b0:7c:52:61:c2:30:66:ba:eb:74:36:
ff:d0:14:9c:4c:9c:e5:c1:4c:55:f1:0b:25:16:46:05:6e:86:
a3:b1:43:d0:a9:d0:ba:d4:42:16:28:52:92:f8:e6:e0:2c:21:
f0:87:e0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:40 2025 by rpki-client