Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E3E2E1160E5311ED87828435C4F9AE02.roa
File: E3E2E1160E5311ED87828435C4F9AE02.roa (raw, json)
Hash identifier: dp1Q0Qc+htT/oAeYdVRcT1qnJfzMnwlixCx/HwI4K5k=
Subject key identifier: 96:0D:6E:A2:02:1F:88:A1:33:DE:48:71:3C:66:6E:68:8E:2E:E8:2D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 74D9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E3E2E1160E5311ED87828435C4F9AE02.roa
Signing time: Mon 03 Jul 2023 12:01:26 +0000
ROA not before: Mon 03 Jul 2023 12:01:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 134042
IP address blocks: 103.61.196.0/24 maxlen: 24
103.61.197.0/24 maxlen: 24
103.61.198.0/24 maxlen: 24
103.61.199.0/24 maxlen: 24
103.68.32.0/22 maxlen: 24
103.69.224.0/22 maxlen: 22
103.69.224.0/24 maxlen: 24
103.69.225.0/24 maxlen: 24
103.69.226.0/24 maxlen: 24
103.69.227.0/24 maxlen: 24
103.78.148.0/22 maxlen: 22
103.78.148.0/24 maxlen: 24
103.78.149.0/24 maxlen: 24
103.78.150.0/24 maxlen: 24
103.78.151.0/24 maxlen: 24
103.138.78.0/23 maxlen: 24
103.160.198.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29913 (0x74d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jul 3 12:01:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64a2b896-dc7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a7:ca:79:84:90:f3:80:4f:d7:a4:ae:66:bd:
49:aa:45:2e:40:46:38:40:6b:86:85:ab:dc:90:10:
54:c5:5d:21:12:a8:30:a8:ae:4a:cf:88:e5:c3:10:
74:f6:f0:ac:76:a3:a3:6d:de:94:27:74:68:df:74:
37:2b:25:f0:1d:0a:ea:9c:b9:1c:f6:c4:cf:28:73:
c4:bb:a7:63:fa:d8:a1:52:9c:96:18:46:ca:10:99:
f5:f4:80:9a:a6:a4:75:08:75:6b:cc:32:4a:02:2e:
7c:96:47:79:ef:93:e5:72:53:5c:78:4a:ae:09:e4:
31:fa:e8:bf:ab:4c:e1:b3:82:05:d8:73:49:15:33:
c7:62:47:b1:9f:69:74:a2:36:d1:05:56:2c:c8:46:
12:92:b7:5f:53:92:ff:58:22:57:db:f7:9e:ac:7a:
c6:bc:54:64:aa:e5:33:19:65:a7:a4:54:86:21:63:
21:b9:7e:d1:1f:84:5f:fa:9e:88:55:59:0b:e8:11:
84:db:41:db:13:d3:56:67:b3:b3:1f:96:18:4f:14:
68:a3:16:63:56:0d:42:14:02:50:e6:52:28:89:13:
ff:1f:16:fc:07:77:f4:a6:5e:94:20:5b:06:da:24:
23:16:31:69:8b:48:05:0f:cb:15:7d:e2:bf:83:12:
47:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0D:6E:A2:02:1F:88:A1:33:DE:48:71:3C:66:6E:68:8E:2E:E8:2D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E3E2E1160E5311ED87828435C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.61.196.0/22
103.68.32.0/22
103.69.224.0/22
103.78.148.0/22
103.138.78.0/23
103.160.198.0/24
Signature Algorithm: sha256WithRSAEncryption
83:1f:1f:36:26:50:ea:d5:c2:d3:fa:d6:97:57:3e:8e:c5:86:
bd:5a:3a:35:f8:82:f1:65:e7:55:1f:0f:f6:2e:15:44:16:c5:
00:36:8a:11:3c:d0:c1:ca:db:82:bb:eb:a4:77:11:33:4a:23:
b0:b0:e3:9e:54:c8:44:1d:a8:86:04:3b:84:3d:b9:ed:fa:d8:
3d:b1:50:45:da:b0:d8:b1:cb:22:0b:22:18:ab:e4:36:70:18:
52:5f:1a:24:b2:e4:00:0a:b3:e6:3e:74:1a:27:47:2c:ef:d4:
98:b7:b0:39:98:9f:aa:c5:53:84:eb:d6:04:b8:3c:07:14:f2:
c3:84:8b:54:89:a8:38:54:cf:2e:3b:17:65:3e:39:8e:1c:a1:
db:2f:69:0e:d0:a3:3e:7c:a0:cc:6b:9b:02:38:28:bd:6a:e9:
c8:5e:dd:d0:95:9c:29:81:38:24:22:3c:47:7a:bd:3d:b3:74:
b0:d4:7b:d0:48:d6:16:b7:10:1e:67:e6:6f:99:d3:7a:22:bc:
61:be:c7:bb:ed:d5:63:7f:12:68:17:2f:60:33:de:35:cc:4f:
79:a7:21:46:d6:90:e2:d6:d1:ac:31:59:76:6e:91:af:e6:c5:
15:bc:b3:f6:69:6b:55:4f:5c:a0:ce:81:2a:34:f6:aa:bc:6a:
1e:44:8c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:55:35 2025 by rpki-client