Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8B7CE372BB4611EEB75FC260C4F9AE02.roa
File: 8B7CE372BB4611EEB75FC260C4F9AE02.roa (raw, json)
Hash identifier: bc/ZCpbyn+BJ0QFekdNfN4mpdk53HGmlddq/kUfys60=
Subject key identifier: 17:01:08:3F:1E:37:5C:DC:44:99:9B:73:18:FE:1F:58:8E:3D:DD:35
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 81E4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8B7CE372BB4611EEB75FC260C4F9AE02.roa
Signing time: Thu 25 Jan 2024 05:56:56 +0000
ROA not before: Thu 25 Jan 2024 05:56:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 139195
IP address blocks: 103.42.72.0/22 maxlen: 24
103.104.222.0/24 maxlen: 24
103.105.224.0/22 maxlen: 24
103.171.58.0/23 maxlen: 24
103.189.216.0/24 maxlen: 24
103.189.217.0/24 maxlen: 24
113.30.144.0/22 maxlen: 24
119.161.96.0/22 maxlen: 24
2001:df6:4900::/48 maxlen: 48
2407:c040::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33252 (0x81e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jan 25 05:56:56 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65b1f828-6367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f8:f0:d2:c0:7e:65:79:eb:88:22:44:22:c6:
1d:4b:18:95:9f:cb:c5:b4:62:06:8f:bd:36:42:c3:
89:07:fc:cc:30:b2:05:5a:ad:00:fa:a3:90:92:d5:
40:1d:6d:48:53:2d:aa:7c:84:92:45:ae:bb:63:e4:
65:7e:a2:40:87:b0:ec:ff:fd:56:b6:69:37:32:7b:
47:b9:6d:ad:b5:46:d5:90:73:4b:7e:84:f1:4f:dc:
1e:d5:a7:8d:a9:8f:2c:e1:75:a0:14:ee:10:a8:3a:
fd:68:cc:84:39:6a:4d:1d:93:c4:c5:3a:91:c9:8c:
07:0b:da:b1:09:c3:59:14:c4:42:e9:91:21:f7:03:
24:f3:a6:3a:62:c1:75:5c:ed:69:ef:c0:22:00:21:
f2:5a:5b:dc:ce:b3:5e:08:71:6c:70:e2:89:06:da:
f6:fe:3a:08:12:90:ef:35:22:af:3b:7d:a0:92:57:
c8:b0:21:3f:0a:7b:0f:e6:7a:1b:37:a5:4e:a8:b7:
29:94:3e:4d:e7:b9:2c:dc:87:f2:49:69:a5:1b:d6:
92:55:f1:fd:30:81:11:61:c3:ac:40:69:ee:d7:09:
2c:13:33:0a:47:7d:59:6b:96:dd:59:b0:78:98:51:
0c:89:ea:94:27:fe:26:1f:9d:66:50:c6:0d:7a:f3:
4a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:01:08:3F:1E:37:5C:DC:44:99:9B:73:18:FE:1F:58:8E:3D:DD:35
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8B7CE372BB4611EEB75FC260C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.42.72.0/22
103.104.222.0/24
103.105.224.0/22
103.171.58.0/23
103.189.216.0/23
113.30.144.0/22
119.161.96.0/22
IPv6:
2001:df6:4900::/48
2407:c040::/32
Signature Algorithm: sha256WithRSAEncryption
83:fb:85:08:84:88:59:87:88:71:36:85:9e:2a:04:f0:34:5f:
ca:24:63:48:50:a6:4d:de:3d:84:42:09:52:7a:c2:b3:3b:f6:
6a:54:b8:fa:40:99:f1:c2:9e:f4:66:8e:d9:ed:c2:7e:12:a8:
ec:4b:ef:c7:b6:2b:f8:b3:f3:f9:8d:8a:3e:99:36:ba:56:10:
46:82:78:b0:57:02:78:85:fd:29:d1:07:3b:7a:01:da:83:03:
7f:ec:de:5c:21:3f:b6:8b:c2:f7:09:1d:84:15:b3:4b:f0:01:
dc:c2:50:33:3b:3b:18:2a:54:f9:e2:80:2e:f4:a8:6d:b1:d8:
6c:a6:fe:ce:2d:12:cd:6e:97:50:3b:15:71:5e:0b:17:aa:0d:
b3:86:ca:71:0e:c9:9a:fe:25:62:fb:0d:8a:08:49:de:66:4c:
da:f0:48:c3:da:50:4a:ef:7d:fd:48:32:51:f9:8f:1a:e4:57:
b4:e7:85:da:20:c5:96:46:88:09:66:03:0c:7f:c0:54:49:dc:
e8:f6:2c:76:3d:80:26:d2:c2:e7:63:d1:41:1d:71:86:4d:a1:
bf:e7:83:95:08:32:59:e4:c5:79:09:6f:fc:a2:54:2f:9a:45:
f6:29:e4:4b:14:b0:3b:71:87:50:9f:5b:e4:65:6f:57:5c:47:
29:2b:1e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:04:08 2025 by rpki-client