Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E6431A0C11ED11EBAE035844C4F9AE02.roa
File: E6431A0C11ED11EBAE035844C4F9AE02.roa (raw, json)
Hash identifier: IolPvL4kULlMxAoJoZyc+lGfArITwWzUxJcl0XtL2zw=
Subject key identifier: A7:1C:24:FB:0C:66:85:A6:53:DE:43:3B:0D:07:E2:63:B4:A5:2A:72
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 514F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E6431A0C11ED11EBAE035844C4F9AE02.roa
Signing time: Mon 16 May 2022 04:15:16 +0000
ROA not before: Mon 16 May 2022 04:15:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137123
IP address blocks: 103.85.228.0/24 maxlen: 24
103.85.229.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20815 (0x514f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 16 04:15:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6281cfd3-683f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:82:53:da:94:07:b5:83:d2:d2:bb:95:75:7b:
1c:19:93:c8:77:ac:c0:ea:f3:c1:fd:d1:10:f2:f8:
5b:e9:42:c1:3f:0e:09:2e:93:f5:a5:8e:8b:98:c6:
44:ee:35:68:a4:08:b6:3b:23:6e:84:60:33:10:01:
c2:e4:ee:e2:aa:d9:9a:ef:80:f6:40:16:29:44:e0:
76:97:db:6d:73:95:0e:d2:d1:72:fa:0e:88:40:76:
10:8e:15:bb:94:3d:a7:c5:4f:46:2a:35:79:8a:24:
01:04:33:e8:46:a5:23:95:60:4c:dd:dc:ef:97:eb:
fe:48:4b:26:1d:ba:4f:34:92:98:71:70:7a:85:b6:
7f:b6:4b:ee:3d:13:1e:ba:e7:0a:e9:67:e7:3d:d7:
77:eb:77:70:97:b1:6a:6c:dd:cb:a9:2e:35:bb:6e:
89:0c:3a:d9:80:d4:ee:4d:eb:83:a6:a8:b5:72:c3:
6d:3b:f9:65:65:93:a6:60:f5:04:cd:ef:a5:c0:bc:
e3:9b:63:73:f6:47:f5:da:f2:1a:60:a9:9d:c6:a9:
a8:d9:74:d9:d4:fc:ee:86:f3:14:2f:da:31:26:44:
31:56:ba:85:82:c5:e6:de:18:b9:48:af:bc:89:22:
bb:e0:24:84:02:f4:da:88:3e:4b:f8:cd:78:db:db:
91:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1C:24:FB:0C:66:85:A6:53:DE:43:3B:0D:07:E2:63:B4:A5:2A:72
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E6431A0C11ED11EBAE035844C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.85.228.0/23
Signature Algorithm: sha256WithRSAEncryption
64:ce:49:f6:78:3c:86:a0:61:27:f3:13:f2:60:bd:de:d9:ab:
95:57:b1:74:a1:67:25:4a:f6:05:d3:d8:27:eb:1b:07:3c:b5:
fc:5c:d3:33:50:c9:ad:54:90:a1:58:98:c8:3f:bc:7d:86:a5:
fa:c3:68:e6:b7:a2:42:25:42:af:44:cf:d5:09:62:10:ae:98:
af:ad:a8:a5:33:10:a0:4b:32:8a:8d:d9:ca:d0:e8:59:ad:fe:
61:c4:1e:b0:fb:e1:bc:8a:d2:ca:a3:96:65:7b:ea:6d:a3:a8:
1a:e2:02:84:e0:64:fd:10:ec:41:d8:2e:3e:c2:cc:dc:99:2e:
db:fa:80:17:3f:a9:2b:41:f2:18:da:0d:e3:dd:9a:76:ec:0a:
e2:57:c8:68:b5:ae:a6:63:7e:23:12:7b:8b:27:2c:c4:ac:bd:
c8:98:88:81:b4:a9:11:7d:4d:52:14:93:9d:d5:68:7d:52:c4:
ba:cc:fe:fe:51:89:95:87:5e:d5:65:b9:06:b0:ba:a5:22:9c:
e0:82:c7:4e:61:6a:9d:f3:a5:d7:ac:99:84:d0:75:53:dc:da:
c6:8b:33:3c:ad:eb:f4:3f:36:2d:57:f4:11:95:db:c8:af:93:
8f:61:ee:bd:36:31:54:e7:d1:6a:3b:bf:d3:d6:e4:21:46:b2:
b2:ad:40:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:24:32 2025 by rpki-client