Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7AD1239E403411EFABB9C20CC4F9AE02.roa
File: 7AD1239E403411EFABB9C20CC4F9AE02.roa (raw, json)
Hash identifier: 46RiTAUFyAhNVikdLOjPehzar8cQ2nedoEXBz/73Kco=
Subject key identifier: F4:09:1B:D8:4C:56:2F:B3:36:6D:E2:D5:9B:56:71:C2:2B:E9:B1:3E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9479
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7AD1239E403411EFABB9C20CC4F9AE02.roa
Signing time: Fri 12 Jul 2024 09:52:41 +0000
ROA not before: Fri 12 Jul 2024 09:52:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135235
IP address blocks: 103.221.80.0/22 maxlen: 22
103.221.80.0/23 maxlen: 24
2001:df1:d7c0::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38009 (0x9479)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jul 12 09:52:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6690fce9-12a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:22:a4:c5:a0:1e:58:12:8b:82:51:a0:44:a1:
00:f5:f5:87:85:3e:95:4c:53:7b:91:3d:78:73:c3:
f6:f6:64:3b:cf:17:4c:62:1c:f1:e7:c6:78:c5:42:
7e:97:79:4d:67:19:eb:c3:75:dc:4b:fd:08:a8:02:
bb:93:d2:ce:ad:fd:12:4d:1b:81:eb:98:8a:02:97:
c8:9e:8a:e4:12:25:a7:d1:93:9c:4e:ee:92:a6:74:
18:ae:7c:29:59:2e:c3:f7:ce:2f:64:a0:0a:35:51:
aa:93:8e:3b:12:0a:d1:17:05:d6:7f:6c:0f:85:b5:
61:a1:0b:35:8d:15:41:da:73:c3:8b:b0:49:8e:89:
5e:e5:93:72:d0:98:54:3b:eb:22:4b:32:5b:d4:a2:
bc:5b:8f:e4:79:2c:05:ba:d1:c0:9c:f0:65:c9:8e:
82:b6:b5:f6:95:05:98:4a:57:18:cd:c8:f9:35:50:
d8:a8:15:61:e1:d5:71:2a:0b:f2:44:92:53:c3:fc:
aa:59:92:59:98:a3:e0:b9:94:4a:25:69:aa:5a:5f:
bf:be:76:6e:00:f6:18:4f:81:02:3f:01:53:fd:7a:
34:03:a6:c5:0a:d9:1c:c6:51:3f:f1:d9:23:8a:6b:
8d:9a:fa:1f:10:9e:55:22:02:26:1e:55:5c:a7:54:
4d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:09:1B:D8:4C:56:2F:B3:36:6D:E2:D5:9B:56:71:C2:2B:E9:B1:3E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7AD1239E403411EFABB9C20CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.80.0/22
IPv6:
2001:df1:d7c0::/48
Signature Algorithm: sha256WithRSAEncryption
26:5b:0b:7d:83:1b:90:f0:6d:e8:d7:a6:30:3a:e7:13:31:d2:
ae:d6:98:9d:8c:10:d7:57:72:7a:89:0d:1f:86:38:1d:75:61:
3a:2c:71:ed:1d:e8:0b:7e:5f:96:97:c1:36:9e:fe:5a:04:14:
44:ab:aa:18:78:39:66:94:4f:d8:92:83:c7:a5:fc:6a:2f:7d:
b7:ab:3d:a3:9d:85:07:bb:21:4d:fa:57:e9:5a:5b:d3:2f:47:
f7:fb:1a:e2:a5:f4:d1:a6:9a:47:c9:c3:3a:0a:0e:9d:c8:6b:
ba:d6:10:36:71:b6:da:ee:08:b5:21:c0:e5:25:d6:50:ae:1c:
ef:ff:69:60:e9:be:bf:aa:e6:a4:57:3b:a1:9a:67:f6:83:05:
68:e5:71:60:df:bf:da:75:04:1b:6c:0a:bb:69:6a:12:9c:fc:
91:23:5b:60:cf:55:19:e5:72:89:01:d6:c9:33:f6:e5:e0:9d:
6c:b9:49:01:d8:51:bd:a7:38:10:b9:15:d1:d7:13:31:c8:05:
dc:ac:c0:3a:23:ce:ec:a6:b5:af:7a:b5:11:66:cc:95:55:e8:
e9:37:eb:d9:71:c2:7e:5b:0e:6e:31:77:0c:5c:6e:77:ce:c0:
53:a2:cd:07:65:33:4a:bf:46:a6:90:c4:64:7d:de:a0:c2:c7:
62:46:d5:d4
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIDAJR5MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDcxMjA5NTI0MVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjY5MGZjZTktMTJhMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKsipMWgHlgSi4JRoEShAPX1h4U+lUxTe5E9eHPD9vZkO88XTGIc8efGeMVC
fpd5TWcZ68N13Ev9CKgCu5PSzq39Ek0bgeuYigKXyJ6K5BIlp9GTnE7ukqZ0GK58
KVkuw/fOL2SgCjVRqpOOOxIK0RcF1n9sD4W1YaELNY0VQdpzw4uwSY6JXuWTctCY
VDvrIksyW9SivFuP5HksBbrRwJzwZcmOgra19pUFmEpXGM3I+TVQ2KgVYeHVcSoL
8kSSU8P8qlmSWZij4LmUSiVpqlpfv752bgD2GE+BAj8BU/16NAOmxQrZHMZRP/HZ
I4prjZr6HxCeVSICJh5VXKdUTasCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBT0CRvY
TFYvszZt4tWbVnHCK+mxPjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzdBRDEyMzlF
NDAzNDExRUZBQkI5QzIwQ0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/
BCEwHzAMBAIAATAGAwQCZ91QMA8EAgACMAkDBwAgAQ3x18AwDQYJKoZIhvcNAQEL
BQADggEBACZbC32DG5DwbejXpjA65xMx0q7WmJ2MENdXcnqJDR+GOB11YTosce0d
6At+X5aXwTae/loEFESrqhh4OWaUT9iSg8el/GovfberPaOdhQe7IU36V+laW9Mv
R/f7GuKl9NGmmkfJwzoKDp3Ia7rWEDZxttruCLUhwOUl1lCuHO//aWDpvr+q5qRX
O6GaZ/aDBWjlcWDfv9p1BBtsCrtpahKc/JEjW2DPVRnlcokB1skz9uXgnWy5SQHY
Ub2nOBC5FdHXEzHIBdyswDojzuymta96tRFmzJVV6Ok369lxwn5bDm4xdwxcbnfO
wFOizQdlM0q/RqaQxGR93qDCx2JG1dQ=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:58:27 2025 by rpki-client