Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E00DE8A2020C11EFBB49D363C4F9AE02.roa
File: E00DE8A2020C11EFBB49D363C4F9AE02.roa (raw, json)
Hash identifier: wcN7MtzUcZA+NOyPNxCnD0oIrj2IXQCifhAiiuOvZRs=
Subject key identifier: 71:AB:94:45:C4:66:A6:E1:5F:DF:D0:8E:C8:8A:3F:2D:9C:9A:51:77
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 86FA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E00DE8A2020C11EFBB49D363C4F9AE02.roa
Signing time: Fri 03 May 2024 06:29:42 +0000
ROA not before: Fri 03 May 2024 06:29:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 45.112.192.0/22 maxlen: 24
45.115.92.0/22 maxlen: 24
103.14.197.0/24 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.47.152.0/24 maxlen: 24
103.51.92.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.108.76.0/22 maxlen: 24
103.109.220.0/22 maxlen: 24
103.142.64.0/23 maxlen: 24
103.171.236.0/23 maxlen: 24
103.180.38.0/23 maxlen: 24
103.180.216.0/23 maxlen: 24
103.181.88.0/23 maxlen: 24
103.181.202.0/23 maxlen: 24
103.182.12.0/23 maxlen: 24
103.186.44.0/23 maxlen: 24
103.200.48.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
203.191.56.0/22 maxlen: 24
2400:d180:66::/48 maxlen: 48
2400:d180:67::/48 maxlen: 48
2400:d180:68::/48 maxlen: 48
2400:d180:69::/48 maxlen: 48
2400:d180:70::/48 maxlen: 48
2400:d180:71::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34554 (0x86fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 3 06:29:42 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66348456-cd9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:98:4f:8e:7f:c0:c1:27:21:dd:aa:ff:f1:3d:
24:25:83:6c:2a:1f:cc:57:40:32:9e:a9:28:ad:36:
61:af:7a:bb:39:3e:eb:39:0c:24:13:f1:27:27:c0:
b3:b2:27:8c:07:e6:70:ed:b4:81:8b:cd:e5:8e:b0:
b4:43:7a:cc:85:76:6d:5f:c4:f1:dd:0c:7e:be:53:
f0:05:43:ac:25:fa:13:5f:94:92:e7:fb:13:e4:23:
a0:73:14:08:38:20:ab:ef:aa:d7:f9:15:b9:82:f8:
2b:78:11:d5:31:c4:25:b7:7c:66:45:b8:ed:db:ea:
f2:54:8f:f5:35:ba:8e:62:46:d5:ba:98:2c:80:03:
38:a6:28:74:39:9e:9a:ef:71:bb:1e:cd:a0:73:11:
5e:6d:a6:5c:d7:41:77:6a:e2:d4:0a:b5:3f:dc:1f:
37:b7:11:7e:0d:31:35:a7:46:80:35:98:f9:ed:c2:
da:85:74:0a:db:16:3e:a4:8d:01:09:5f:eb:af:67:
a5:f7:c5:31:0a:2e:90:7a:06:3e:47:73:b8:74:34:
45:70:2b:d1:df:da:67:c3:79:1a:7f:0c:84:b4:49:
f6:9d:ff:d8:d1:6a:2f:f3:35:ff:99:36:72:5d:44:
ed:fe:91:6c:2c:37:ac:c0:04:f4:2c:f6:a2:76:1f:
f5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AB:94:45:C4:66:A6:E1:5F:DF:D0:8E:C8:8A:3F:2D:9C:9A:51:77
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E00DE8A2020C11EFBB49D363C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.112.192.0/22
45.115.92.0/22
103.14.197.0/24
103.27.168.0/24
103.27.170.0/23
103.47.152.0/24
103.51.92.0/22
103.52.48.0/22
103.55.84.0/22
103.108.76.0/22
103.109.220.0/22
103.142.64.0/23
103.171.236.0/23
103.180.38.0/23
103.180.216.0/23
103.181.88.0/23
103.181.202.0/23
103.182.12.0/23
103.186.44.0/23
103.200.48.0/22
103.228.172.0/22
203.191.56.0/22
IPv6:
2400:d180:66::-2400:d180:69:ffff:ffff:ffff:ffff:ffff
2400:d180:70::/47
Signature Algorithm: sha256WithRSAEncryption
76:c2:2c:eb:23:e5:eb:7c:97:f6:85:ae:a2:a9:95:2e:5b:06:
dd:bb:25:41:96:1c:93:cd:b1:c6:96:4d:92:4d:81:07:5b:f1:
35:b5:f5:fb:1c:ee:ef:7e:e6:bb:11:f9:1e:c4:51:26:c0:4d:
47:5a:dd:3b:9f:37:dc:6c:37:c3:91:cd:4d:ed:b6:dd:6b:e6:
df:22:f2:00:28:a9:1f:25:e1:47:68:7e:ab:a7:05:7c:71:76:
56:c8:af:b5:1f:91:7b:b6:17:fc:80:b0:93:b6:e7:f6:9c:e8:
3e:43:68:9c:ae:c0:c4:dd:91:6d:0a:4d:33:b1:54:3a:74:b8:
42:2d:fd:ac:00:d6:da:8d:9a:50:28:fe:e7:c5:b7:3a:4e:83:
78:a0:c7:b4:5b:d1:87:41:a4:3e:f6:d3:d1:0d:a1:8d:9b:9e:
5d:20:99:dc:66:7f:36:07:f1:90:32:05:22:67:3b:0e:8a:eb:
f8:31:ad:7d:44:02:3c:f3:47:8b:9f:37:bc:b3:5d:42:ba:ba:
34:5c:7c:96:4c:a9:3e:35:b4:86:97:93:5b:fd:97:11:21:8e:
78:33:1f:18:0f:b2:9d:5d:33:f6:c1:29:5e:39:5f:f6:4e:df:
f4:9e:94:49:8a:56:f6:d0:31:fc:51:db:c2:c9:21:4c:09:69:
41:9b:44:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:17:39 2025 by rpki-client