Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9ACB9D36B5ED11EE96BA8D75C4F9AE02.roa
File: 9ACB9D36B5ED11EE96BA8D75C4F9AE02.roa (raw, json)
Hash identifier: 61cGk+gA6GSH6f+madAh/tqIbITcX+zVPPM6Rl6TFak=
Subject key identifier: EB:05:DC:54:80:B6:71:AF:C1:99:75:E4:C2:1A:D0:CF:54:1D:00:54
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8193
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9ACB9D36B5ED11EE96BA8D75C4F9AE02.roa
Signing time: Thu 18 Jan 2024 10:37:40 +0000
ROA not before: Thu 18 Jan 2024 10:37:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135725
IP address blocks: 103.109.72.0/22 maxlen: 22
103.109.72.0/23 maxlen: 24
103.109.74.0/24 maxlen: 24
103.109.75.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33171 (0x8193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jan 18 10:37:40 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65a8ff74-c411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d5:5d:e8:9a:2e:67:0f:df:2d:70:af:86:d2:
02:a9:cb:66:22:40:9a:3b:72:96:bf:c8:98:71:70:
2f:80:d7:72:9c:bc:95:c7:ce:3e:54:04:a8:26:08:
d3:45:29:92:0c:7a:ef:27:4c:da:20:73:0b:9e:62:
ae:a4:85:eb:a4:9a:89:57:6f:a8:76:6c:47:a5:b1:
79:52:6b:c6:dd:9a:e1:b9:d1:5b:6e:24:5f:dd:f2:
fe:4e:60:9a:51:35:ca:b6:f3:30:9b:72:cb:b9:31:
0f:30:29:7a:79:10:c6:65:95:f9:9f:fe:60:f5:fb:
79:d0:23:40:8b:b4:90:91:cc:d0:88:a6:77:60:6c:
45:06:7e:e3:3e:90:49:0e:29:8e:7c:6e:a0:3b:55:
da:90:3c:f0:da:38:ee:62:dc:0b:34:22:0c:a4:83:
99:97:95:e7:e0:66:ba:26:e8:74:08:ff:de:86:aa:
16:58:f0:48:79:2f:84:f5:ac:46:67:fd:fe:b7:be:
89:bc:a8:7e:6a:5c:e8:af:41:d6:65:6b:31:73:56:
3d:1b:b3:dd:a3:2f:46:b9:b6:78:6d:8d:7d:c4:cb:
81:71:64:81:f4:7e:6a:83:18:dc:83:1f:b7:8a:b2:
6f:24:53:aa:c5:e5:8d:89:fa:8f:ba:ad:87:70:09:
f7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:05:DC:54:80:B6:71:AF:C1:99:75:E4:C2:1A:D0:CF:54:1D:00:54
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9ACB9D36B5ED11EE96BA8D75C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.109.72.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:e3:7b:d7:33:57:ae:42:6a:a1:bf:8d:e1:11:00:25:9e:f5:
c1:b8:d5:bd:4f:92:c0:35:5a:61:db:72:93:2b:0e:52:34:8a:
0b:e2:44:92:ce:99:13:83:1d:8d:66:62:8f:e7:07:b7:88:13:
81:5b:a4:74:91:e3:8a:23:31:63:a4:26:a7:f7:61:d2:32:43:
3f:56:22:a4:3a:bf:45:52:a7:71:dd:69:6b:0d:99:c7:fa:0d:
63:87:10:b9:6a:10:86:4d:68:20:16:a9:2a:38:f6:87:71:7b:
21:42:8a:2e:48:81:0c:6e:c6:a5:7e:c6:bf:29:12:b1:fd:36:
a7:80:05:34:6b:d7:13:76:d3:0e:6d:0a:69:97:4d:93:92:cd:
6b:7c:55:bd:63:f8:c4:fd:4b:0d:53:aa:28:f9:99:14:5c:9e:
5a:e7:00:c8:df:d6:30:bb:e7:ce:ad:18:a3:b2:3e:90:81:6b:
d3:3f:d9:6a:c3:e0:dc:e1:bd:6c:92:e9:c9:1d:c7:3f:bc:57:
a8:fa:e9:a1:65:8f:f3:41:1a:32:61:e8:42:63:a5:f6:6c:a1:
56:19:bb:01:a9:3d:ab:d7:68:58:72:f9:63:0b:9b:16:8c:5f:
55:6a:1b:c0:ce:76:79:50:d6:8c:56:77:dc:ed:c2:66:0b:10:
26:25:f0:09
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgIDAIGTMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDExODEwMzc0MFoXDTI0MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjVhOGZmNzQtYzQxMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL/VXeiaLmcP3y1wr4bSAqnLZiJAmjtylr/ImHFwL4DXcpy8lcfOPlQEqCYI
00Upkgx67ydM2iBzC55irqSF66SaiVdvqHZsR6WxeVJrxt2a4bnRW24kX93y/k5g
mlE1yrbzMJtyy7kxDzApenkQxmWV+Z/+YPX7edAjQIu0kJHM0Iimd2BsRQZ+4z6Q
SQ4pjnxuoDtV2pA88No47mLcCzQiDKSDmZeV5+BmuibodAj/3oaqFljwSHkvhPWs
Rmf9/re+ibyofmpc6K9B1mVrMXNWPRuz3aMvRrm2eG2NfcTLgXFkgfR+aoMY3IMf
t4qybyRTqsXljYn6j7qth3AJ90ECAwEAAaOCApUwggKRMB0GA1UdDgQWBBTrBdxU
gLZxr8GZdeTCGtDPVB0AVDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzlBQ0I5RDM2
QjVFRDExRUU5NkJBOEQ3NUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCZ21IMA0GCSqGSIb3DQEBCwUAA4IBAQBO43vXM1euQmqh
v43hEQAlnvXBuNW9T5LANVph23KTKw5SNIoL4kSSzpkTgx2NZmKP5we3iBOBW6R0
keOKIzFjpCan92HSMkM/ViKkOr9FUqdx3WlrDZnH+g1jhxC5ahCGTWggFqkqOPaH
cXshQoouSIEMbsalfsa/KRKx/TangAU0a9cTdtMObQppl02Tks1rfFW9Y/jE/UsN
U6oo+ZkUXJ5a5wDI39Ywu+fOrRijsj6QgWvTP9lqw+Dc4b1skunJHcc/vFeo+umh
ZY/zQRoyYehCY6X2bKFWGbsBqT2r12hYcvljC5sWjF9VahvAznZ5UNaMVnfc7cJm
CxAmJfAJ
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:25:33 2025 by rpki-client