Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CAEF5662BE0011EF99BFE581C4F9AE02.roa
File: CAEF5662BE0011EF99BFE581C4F9AE02.roa (raw, json)
Hash identifier: zAvxs/MFqyPxiIMEVQpnGMPOnEoURWN/8PmaNQvEx10=
Subject key identifier: EB:99:1C:67:81:6C:0C:56:FA:F7:98:38:0B:8F:2F:E1:F0:B5:E9:C6
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9FB8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CAEF5662BE0011EF99BFE581C4F9AE02.roa
Signing time: Thu 19 Dec 2024 12:00:09 +0000
ROA not before: Thu 19 Dec 2024 12:00:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135177
IP address blocks: 103.141.216.0/23 maxlen: 24
103.190.212.0/23 maxlen: 24
2400:5460::/48 maxlen: 48
2400:5460:1::/48 maxlen: 48
2400:5460:2::/48 maxlen: 48
2400:5460:3::/48 maxlen: 48
2400:5460:4::/48 maxlen: 48
2400:5460:5::/48 maxlen: 48
2400:5460:6::/48 maxlen: 48
2400:5460:7::/48 maxlen: 48
2400:5460:8::/48 maxlen: 48
2400:5460:9::/48 maxlen: 48
2400:5460:a::/48 maxlen: 48
2400:5460:b::/48 maxlen: 48
2400:5460:c::/48 maxlen: 48
2400:5460:d::/48 maxlen: 48
2400:5460:e::/48 maxlen: 48
2400:5460:f::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40888 (0x9fb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Dec 19 12:00:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67640ac8-6b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a3:51:48:1b:c0:3e:d8:d4:5a:04:6b:79:ef:
6a:fb:72:7a:e0:66:64:b5:ba:68:1a:2d:e6:60:00:
3a:69:36:ed:91:f6:bc:e8:8d:08:07:c0:38:c4:c5:
75:b3:02:c2:74:51:f4:9a:ac:0d:80:41:f5:06:75:
5e:7a:ba:81:64:df:3d:2d:ef:da:ea:0d:94:91:4f:
4c:b7:31:8a:fb:b0:f0:7d:c4:4e:5f:72:c9:f3:a3:
14:ee:13:46:b0:7d:47:f3:f0:b7:1b:5a:7b:05:c2:
a7:b8:9b:79:02:09:62:50:19:f8:4f:78:83:07:b3:
3a:f0:15:04:06:4c:6d:02:d7:be:90:88:9e:a2:ff:
e6:49:c9:f0:5f:78:bd:bf:3e:e6:3d:f8:f2:55:5e:
03:16:56:86:ec:1f:90:56:4e:f5:67:32:44:84:b1:
40:3c:fc:25:f3:05:f5:ba:e7:c2:d5:fd:5c:70:c2:
98:44:fa:db:a3:97:90:a4:26:92:6c:38:6e:eb:1e:
36:b4:07:5f:c8:7c:6a:aa:11:7b:f6:96:93:d4:d2:
08:2f:a2:05:78:0f:c8:50:a3:61:8c:61:31:97:8e:
a6:89:53:33:b7:5f:43:69:c1:db:d6:3c:cf:ff:df:
ca:f9:ef:9f:f9:c0:8e:a7:ef:d3:26:ea:d3:d1:b9:
7c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:99:1C:67:81:6C:0C:56:FA:F7:98:38:0B:8F:2F:E1:F0:B5:E9:C6
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CAEF5662BE0011EF99BFE581C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.141.216.0/23
103.190.212.0/23
IPv6:
2400:5460::/44
Signature Algorithm: sha256WithRSAEncryption
22:22:60:15:b6:f9:ce:be:44:f0:ad:07:75:fa:cc:72:5b:83:
9b:f4:e6:2c:67:7a:62:f5:90:cd:00:bd:e2:d4:04:71:cc:81:
1f:3e:dc:27:55:02:56:a6:c9:45:31:31:2d:f4:64:9b:2e:f8:
27:51:92:ba:c1:93:c0:23:d6:03:6d:37:9c:76:a6:9a:08:28:
b3:b8:2d:9a:9e:30:a2:55:3b:2a:bb:f8:f4:04:39:da:08:aa:
ec:2b:ac:ca:76:bc:73:04:fa:9b:eb:78:7d:2a:b1:62:ac:d0:
75:b4:85:23:23:2c:b8:c8:41:bc:b6:9e:25:e1:6d:b0:6b:67:
b3:f4:f8:d8:fa:0b:02:d8:ea:da:ff:69:77:57:bf:5d:86:65:
99:f0:c4:ca:f3:c5:b8:78:fe:6f:17:4f:2e:03:ca:e7:b6:d4:
1a:63:9b:4c:a2:40:f8:ef:11:cc:d5:b0:17:3a:f9:3e:63:25:
75:7c:2c:26:20:db:85:0b:61:42:e6:6e:91:09:2c:94:d5:00:
5d:6f:24:4c:58:94:cb:85:0b:ee:d9:8c:86:a4:64:6e:13:58:
58:c1:4c:6b:56:ee:43:c5:9d:58:b6:f5:78:8a:83:bb:ce:be:
32:9c:05:4b:1a:c5:8b:2f:96:66:7b:4a:a4:ab:fa:3e:bb:9a:
f4:e5:fe:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:09:19 2025 by rpki-client