Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C6A7DD321CD711EB8DD1CD54C4F9AE02.roa
File: C6A7DD321CD711EB8DD1CD54C4F9AE02.roa (raw, json)
Hash identifier: kSnL/xvtKrj7DSEplax0MuhhXsfA4PKzirBJ61s9VqY=
Subject key identifier: 03:9D:23:F6:C3:4D:6B:9A:40:E6:25:9E:68:8B:EF:D9:11:7D:ED:2B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 887F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C6A7DD321CD711EB8DD1CD54C4F9AE02.roa
Signing time: Thu 30 May 2024 15:54:47 +0000
ROA not before: Thu 30 May 2024 15:54:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 132771
IP address blocks: 103.111.0.0/22 maxlen: 24
103.113.96.0/22 maxlen: 24
103.147.136.0/23 maxlen: 24
103.167.174.0/23 maxlen: 24
103.167.204.0/23 maxlen: 24
103.168.96.0/23 maxlen: 24
103.170.44.0/23 maxlen: 24
103.173.210.0/23 maxlen: 24
2407:26c0::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34943 (0x887f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 15:54:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a147-a968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1e:6e:34:aa:c6:0a:6e:cc:02:7b:90:bf:3b:
af:27:e5:08:9d:97:32:dc:01:64:13:1a:a5:52:f0:
4c:d0:3c:fa:5a:b3:6e:74:4e:69:c4:22:4d:18:e7:
89:4d:08:17:cd:2a:50:63:4e:41:3c:bf:7d:55:a0:
01:fc:3c:c1:4d:c7:56:fc:bc:52:5d:9f:39:0e:19:
45:f2:bf:4a:1b:ac:94:6c:35:00:a0:78:1a:c7:81:
87:14:91:3b:f5:2c:f4:5a:c8:38:48:69:6a:f6:6a:
c0:e4:e8:b6:bf:ee:40:53:7a:fe:40:d7:3f:61:da:
e2:e1:ee:34:f5:2e:c0:8e:27:a0:14:ea:62:9d:50:
ba:43:ba:38:56:bd:74:cd:48:7a:c8:84:cd:c1:d4:
74:36:da:77:96:ec:7f:c8:99:c4:e8:7c:5c:79:f4:
38:c8:2b:c7:a5:5d:54:a3:1a:fc:56:f9:7a:7c:57:
12:3d:ba:7b:fe:ba:22:13:44:e2:fd:05:39:f7:17:
53:ef:69:89:c8:25:28:fc:8a:68:74:b8:11:61:88:
01:c3:98:e2:b6:96:85:d1:36:b7:2e:05:b7:25:a0:
ce:97:b3:0b:27:b2:2c:c1:c0:40:5f:da:d2:7d:0e:
da:e1:f1:b8:ac:eb:48:42:31:9a:46:2b:6f:af:56:
f6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9D:23:F6:C3:4D:6B:9A:40:E6:25:9E:68:8B:EF:D9:11:7D:ED:2B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C6A7DD321CD711EB8DD1CD54C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.111.0.0/22
103.113.96.0/22
103.147.136.0/23
103.167.174.0/23
103.167.204.0/23
103.168.96.0/23
103.170.44.0/23
103.173.210.0/23
IPv6:
2407:26c0::/32
Signature Algorithm: sha256WithRSAEncryption
32:66:e1:1c:6e:e6:99:7a:00:1b:f0:5e:ae:4b:c8:52:ee:0d:
c4:45:9b:45:04:60:b2:04:35:50:80:31:82:8d:f0:13:c8:86:
17:ed:a5:a1:ef:ab:ba:3e:27:62:01:fc:4d:d2:6b:d6:5c:87:
c6:46:e4:9b:12:29:87:e5:11:8f:47:3b:20:a0:02:ee:c6:2c:
15:de:92:19:72:09:df:5f:73:20:f2:e2:5a:fe:0b:e1:e7:6a:
d7:c0:b2:c6:37:05:f1:1c:c1:2d:72:d3:ab:cc:df:36:7a:24:
c5:94:6b:51:aa:d0:1f:40:bd:2d:1a:77:3a:2b:00:eb:e6:d0:
0e:6f:30:01:c0:18:d0:99:b7:75:60:a0:03:c0:86:fe:64:4b:
8c:5f:23:86:35:a0:33:7b:a7:a7:21:74:04:f5:e9:bc:2c:ef:
b9:b9:e3:48:3e:ac:0d:be:2f:2f:5c:a6:54:a8:89:88:30:b9:
51:97:28:cc:4d:8b:03:80:03:57:ee:2b:e7:25:f0:e6:0f:5d:
28:d5:ea:10:a2:78:63:ef:fb:8b:64:60:c3:1d:c7:85:e2:b4:
15:50:48:8f:43:ea:c8:eb:b6:50:8a:c6:7b:75:f4:86:3f:cc:
b9:65:63:f0:f3:3a:35:41:38:a8:52:3a:bc:78:8f:64:1e:77:
54:83:ed:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:57:58 2025 by rpki-client