Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CB9B0024E29C11EE8296636CC4F9AE02.roa
File: CB9B0024E29C11EE8296636CC4F9AE02.roa (raw, json)
Hash identifier: M3ewgRpqgxUVd6jkFsr6mUR+hsZnZpX7Ue3S2ppv43Q=
Subject key identifier: F4:BF:AF:57:BB:B3:00:FA:EA:03:47:0C:32:3B:6F:45:18:EB:56:B6
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8B62
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CB9B0024E29C11EE8296636CC4F9AE02.roa
Signing time: Thu 30 May 2024 16:06:57 +0000
ROA not before: Thu 30 May 2024 16:06:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137093
IP address blocks: 103.107.112.0/22 maxlen: 24
103.192.204.0/24 maxlen: 24
103.192.207.0/24 maxlen: 24
202.53.134.0/23 maxlen: 24
202.155.186.0/24 maxlen: 24
202.155.187.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35682 (0x8b62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:06:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a421-ce04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:00:c0:27:99:ff:65:db:86:04:93:d8:86:35:
05:2b:16:bb:00:30:15:0a:5a:e4:aa:89:ba:18:ac:
b1:93:b1:44:25:8e:d1:41:cb:d7:f6:5f:9c:9b:bb:
61:47:48:51:7a:88:69:70:f0:d9:c6:d0:53:55:0f:
65:e4:0a:0a:26:04:a5:1c:31:a0:bd:a8:76:1f:6d:
47:b2:45:30:6a:c1:7b:05:65:92:10:1b:9d:3f:a2:
8c:4e:83:5c:c0:22:75:ca:51:43:a2:ea:05:6c:ff:
e9:61:eb:b9:84:de:56:ff:39:a7:2f:fe:6d:eb:af:
1f:4f:67:de:ae:33:4e:ba:7b:cb:1b:4e:5e:2c:11:
50:31:90:dc:2e:26:d1:5c:37:21:50:0b:84:8c:e1:
6f:f7:ab:d9:dd:a0:2e:d7:33:f3:31:99:47:34:33:
04:9c:e0:d6:e7:d5:2c:60:53:79:4f:d6:a4:c7:62:
19:4f:53:6b:d7:05:fe:05:9d:bb:da:a5:dc:2f:26:
45:d5:47:ca:5a:30:30:9a:1c:e3:3f:28:01:74:66:
2e:6d:21:b2:f8:81:a9:61:06:99:45:73:3f:07:99:
ef:3a:b8:c0:89:c7:d5:7f:8f:ea:4c:a8:3a:88:04:
78:b2:be:65:b0:99:d0:cf:70:89:d2:07:5d:c1:d2:
47:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BF:AF:57:BB:B3:00:FA:EA:03:47:0C:32:3B:6F:45:18:EB:56:B6
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CB9B0024E29C11EE8296636CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.107.112.0/22
103.192.204.0/24
103.192.207.0/24
202.53.134.0/23
202.155.186.0/23
Signature Algorithm: sha256WithRSAEncryption
71:52:33:2d:df:14:6d:d9:0e:20:d6:e3:8f:46:33:9f:fd:a7:
66:2d:87:0b:f0:5f:34:49:54:ea:50:c7:57:31:5c:c0:64:00:
1c:4d:39:52:4b:c4:91:0f:dc:ad:7c:64:41:af:5c:4e:09:b0:
55:e2:f2:b4:f7:1a:25:7a:3f:3c:e8:45:d0:d5:3f:b1:a4:a2:
f4:c6:ad:f6:fb:0a:19:b1:aa:43:e4:ad:9a:ad:1d:0c:24:e6:
0d:b6:b3:d5:68:35:f4:0f:77:a8:65:a5:ab:f5:ee:4e:5f:18:
2b:20:29:c7:41:10:ac:2f:57:57:b6:da:e6:02:ab:fd:3b:61:
1e:0a:bb:b4:41:9b:a7:1d:52:a5:8d:1d:9b:d9:79:d7:cd:9c:
36:44:f3:cf:cb:20:08:a8:a1:1a:d0:4c:84:47:f0:91:43:13:
d2:ba:4f:e5:b9:ee:b1:5d:c0:a3:71:e8:59:fe:bf:93:ab:09:
1e:7c:0c:79:ad:12:9e:ba:f3:2b:4a:d3:61:ae:eb:70:b8:bf:
65:b0:07:d1:ce:f8:91:37:41:d2:20:3d:f7:3a:89:e0:dd:53:
5f:50:1c:1a:dd:e2:70:5c:c2:99:b1:36:b6:d8:12:36:28:bc:
8e:13:ec:11:dc:28:be:2d:6a:8d:30:be:ea:10:52:52:fc:ba:
d8:17:b0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:17:41 2025 by rpki-client