Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E7B0EE28CC6D11EC899EAD6CC4F9AE02.roa
File: E7B0EE28CC6D11EC899EAD6CC4F9AE02.roa (raw, json)
Hash identifier: AzLLo510IDspfk1gu9rmun788ykITvyDDOGblKzs+R8=
Subject key identifier: 9E:45:AD:4C:3A:1D:54:99:64:9C:F8:C3:1B:8C:2A:63:B2:96:6E:F1
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 4DAD
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E7B0EE28CC6D11EC899EAD6CC4F9AE02.roa
Signing time: Thu 05 May 2022 12:21:36 +0000
ROA not before: Thu 05 May 2022 12:21:35 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 141875
IP address blocks: 45.125.252.0/22 maxlen: 22
45.125.252.0/24 maxlen: 24
45.125.253.0/24 maxlen: 24
45.125.254.0/24 maxlen: 24
45.125.255.0/24 maxlen: 24
103.162.192.0/23 maxlen: 24
103.165.72.0/23 maxlen: 24
103.165.76.0/23 maxlen: 24
103.165.88.0/23 maxlen: 24
103.169.242.0/23 maxlen: 24
103.217.82.0/24 maxlen: 24
103.217.83.0/24 maxlen: 24
103.241.132.0/24 maxlen: 24
103.241.135.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19885 (0x4dad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 5 12:21:35 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=6273c14f-fb92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9f:96:ad:0f:fe:f0:c3:0b:4c:4d:c9:0d:5a:
a1:63:14:72:d1:b2:f7:e3:ce:20:0f:c1:b7:d6:9c:
a6:0a:04:6e:58:83:a8:b7:84:1f:c4:50:8a:a1:84:
ea:b8:4b:d9:44:25:c3:44:18:c3:b8:14:1c:24:c1:
b6:08:3b:66:53:dc:32:9c:a0:c8:53:7b:1f:1d:d7:
b9:96:12:0e:65:51:a0:15:87:7b:ab:8c:b6:71:5f:
ce:19:bc:c7:d8:64:8c:b7:cf:3c:a7:6d:f4:6e:68:
bf:b3:0e:90:59:f6:9f:26:24:5e:96:cf:05:62:2e:
12:5f:48:53:f3:29:9d:16:2b:36:28:5c:56:c2:15:
ac:ff:d3:70:11:43:09:ad:b8:51:de:f2:51:90:af:
4b:61:16:e2:41:71:47:6b:0e:fc:84:16:71:80:20:
13:c0:7e:10:ca:db:94:a9:d6:02:c9:14:60:5d:21:
e0:70:48:66:80:21:c3:3c:ad:1c:fb:c8:71:00:a5:
8e:6f:e3:15:f1:72:86:d0:54:a3:86:4c:60:9e:7c:
c4:f7:58:c4:9b:d5:d5:2f:5b:87:b8:82:ef:2d:10:
73:be:39:ef:c4:25:6d:2e:99:9f:8c:7f:1f:c9:f9:
7d:5e:24:ee:f5:c5:5e:8f:d4:cf:64:13:1f:e0:28:
a4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:45:AD:4C:3A:1D:54:99:64:9C:F8:C3:1B:8C:2A:63:B2:96:6E:F1
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E7B0EE28CC6D11EC899EAD6CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.125.252.0/22
103.162.192.0/23
103.165.72.0/23
103.165.76.0/23
103.165.88.0/23
103.169.242.0/23
103.217.82.0/23
103.241.132.0/24
103.241.135.0/24
Signature Algorithm: sha256WithRSAEncryption
80:f6:44:65:fa:ab:e4:75:1f:93:31:2e:3a:9f:5f:7a:29:46:
ce:db:fe:58:9b:77:39:33:a3:09:4e:a7:f5:77:46:62:f2:30:
e4:2f:f6:da:ab:70:f4:d5:96:72:60:9d:98:d0:0e:de:c8:1d:
3c:c0:61:b3:71:30:b0:94:b7:0d:58:f5:ec:37:14:9c:2f:d2:
b3:b0:85:e1:d8:27:be:42:48:b3:d1:d5:5a:dd:df:da:4b:d1:
cf:85:5a:4c:c3:18:71:4d:7c:6a:a0:85:4b:e3:23:67:80:56:
fa:83:28:75:d1:d8:ac:99:28:9c:2c:a8:a2:eb:1d:70:21:60:
c8:47:bd:1e:36:7e:a6:0b:a7:87:81:db:5f:a2:c6:90:3d:28:
ee:81:b1:a2:80:50:28:1f:34:fc:26:4c:56:fb:84:a2:0a:32:
8c:3e:a7:26:1d:98:73:39:06:2a:82:cf:e3:22:e4:ba:43:8c:
8a:c2:b0:15:a0:e4:80:50:9a:0c:4c:58:f2:50:57:3d:31:f3:
50:aa:a5:c8:b2:21:2f:22:41:a9:61:b4:47:c8:f3:dd:42:4b:
a3:cb:e1:5e:40:13:c9:ac:d0:e2:14:18:ab:49:68:e0:f3:2d:
e1:a1:9a:24:1d:8b:7d:58:e7:38:97:6d:66:14:b7:44:de:57:
85:e0:73:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:27:36 2025 by rpki-client