Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BC238DEA9B4411EEA72A6D2CC4F9AE02.roa
File: BC238DEA9B4411EEA72A6D2CC4F9AE02.roa (raw, json)
Hash identifier: Fl57uKYoHFIu0gdcVan7zl1F/jPJqH2nBGt6UHoJpT4=
Subject key identifier: 1E:F4:18:AB:92:C5:B1:A9:54:1C:96:52:F2:4C:EC:E3:BC:D5:54:38
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8A29
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BC238DEA9B4411EEA72A6D2CC4F9AE02.roa
Signing time: Thu 30 May 2024 16:01:51 +0000
ROA not before: Thu 30 May 2024 16:01:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135235
IP address blocks: 103.221.80.0/22 maxlen: 24
2001:df1:d7c0::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35369 (0x8a29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:01:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a2ef-9cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cc:2c:96:68:f3:59:16:ef:1e:a6:55:82:dc:
95:04:38:dc:47:28:e5:0b:b6:2c:67:a2:13:2f:d4:
9b:36:5a:8c:26:f7:a1:08:e2:8b:d5:b0:3a:e1:90:
c7:ff:02:57:86:a1:80:ba:5b:aa:09:9d:e4:47:53:
8e:6f:cb:25:09:39:96:05:00:0f:70:17:84:ae:0e:
03:be:80:b5:d6:93:d0:a0:17:60:4e:4d:f6:f3:83:
2a:6a:8d:6d:79:51:65:04:a3:c9:f3:28:9d:8d:cf:
e7:ef:be:04:9c:b6:ec:a6:8a:ef:9f:3a:7e:79:7a:
61:39:74:da:d1:51:84:f6:4d:39:43:a2:88:8c:ed:
20:e3:ae:43:08:31:25:03:ce:a1:28:f1:4d:8d:9a:
22:07:a9:b7:4a:0e:0f:1b:7b:a3:50:63:63:f8:6d:
49:f7:4d:bd:34:51:6e:34:3e:7a:d0:2d:48:cc:9b:
19:fb:05:69:00:c1:91:65:0d:33:93:8d:f1:02:35:
3d:1e:28:1c:36:05:0e:ed:c7:3a:38:61:77:cf:8b:
12:cd:2c:ac:e0:72:f7:bf:13:ad:50:41:1f:02:12:
98:0a:ce:c9:dd:9e:f1:85:17:07:64:87:bf:64:d6:
76:86:43:40:60:4e:e2:dc:b4:25:37:6d:b2:e0:c5:
3b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F4:18:AB:92:C5:B1:A9:54:1C:96:52:F2:4C:EC:E3:BC:D5:54:38
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BC238DEA9B4411EEA72A6D2CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.80.0/22
IPv6:
2001:df1:d7c0::/48
Signature Algorithm: sha256WithRSAEncryption
2a:c1:e6:f0:e4:6f:94:47:9a:be:4b:55:41:e2:77:56:eb:ec:
6e:92:72:7f:59:61:b4:f3:c8:a1:83:07:12:92:0f:e0:9c:39:
f7:7a:f7:e8:2f:cc:e4:ce:a6:bd:d1:c6:22:79:e7:22:0a:0b:
49:61:fa:9a:5c:b0:6a:0b:c2:49:94:e8:21:ed:82:bc:9e:3e:
4c:48:a2:09:56:96:19:fb:aa:7d:f9:b0:c4:af:03:9a:43:e1:
c5:0e:49:39:d2:9a:ce:8d:59:df:74:0c:68:d2:94:72:43:db:
39:c0:15:3b:a3:b1:a4:f0:36:79:46:68:c5:1d:e0:8d:37:05:
75:06:42:fe:5f:3b:0b:da:f0:e4:fd:c0:ac:51:01:c3:30:73:
77:25:02:df:31:83:dd:2d:b0:f8:03:af:e2:62:9a:cd:a0:d6:
f0:32:75:5e:66:a5:d7:ca:7a:3c:67:68:cc:5f:33:9e:f6:8d:
71:50:e7:04:31:3b:b4:d8:32:34:df:be:ee:2b:ed:e7:ce:09:
bf:64:41:21:eb:be:58:ad:3e:98:46:db:fa:5b:d2:b8:f6:67:
0b:b0:20:54:c5:8b:c6:72:37:43:c0:78:01:46:30:44:52:ff:
86:bc:9d:22:1a:c1:16:a5:49:b0:79:e1:f5:33:75:9e:d4:6f:
2c:78:a8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:34:47 2025 by rpki-client