Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EE3FE116BDD011EA9702FC12C4F9AE02.roa
File: EE3FE116BDD011EA9702FC12C4F9AE02.roa (raw, json)
Hash identifier: j+KAeRbPF38zScfPOLvRldV/e5KL62xRWqVHdhpGldo=
Subject key identifier: 3B:F1:3A:96:4F:6F:C9:19:A2:CD:A2:F0:2C:8F:5F:8F:8B:CE:DB:5A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5285
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EE3FE116BDD011EA9702FC12C4F9AE02.roa
Signing time: Mon 16 May 2022 04:20:54 +0000
ROA not before: Mon 16 May 2022 04:20:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140166
IP address blocks: 103.152.21.0/24 maxlen: 24
103.156.221.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21125 (0x5285)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 16 04:20:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6281d126-1a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:00:39:9c:cc:da:c3:69:ea:06:0e:f6:31:1d:
a5:c1:ed:7b:77:5d:dd:2b:0e:44:ac:ac:7f:40:de:
12:74:ba:9b:9d:19:64:c8:1e:3a:2e:00:87:1d:d5:
2f:73:75:41:6b:4a:8a:d2:6e:58:07:c0:8c:a9:21:
89:ae:2d:a3:25:77:cb:2e:ff:2d:ca:16:06:28:fb:
df:40:da:fa:e9:c8:fc:46:31:18:07:ee:3a:8d:ca:
82:01:3a:33:d2:b7:a7:eb:8c:1a:52:5e:b5:b8:fa:
d9:ee:f7:51:78:ae:f8:ac:06:ef:49:da:47:f5:bf:
16:3c:82:6b:04:83:e2:2c:83:53:1c:48:99:db:06:
31:d0:a1:97:a4:14:f9:f8:06:30:59:f8:f4:4c:8d:
c0:cd:da:90:e8:9e:d9:78:5b:e3:0d:27:6a:48:e7:
2e:7f:37:03:af:35:f4:60:53:fb:99:c8:17:9d:95:
06:18:b6:bb:75:8e:9e:18:eb:17:ff:1a:20:c6:6c:
e7:c7:38:39:f3:cc:2d:86:f4:cc:81:3c:27:9a:d3:
82:89:e2:59:03:b0:3b:73:e3:30:9f:0c:fd:d7:26:
95:b0:3f:aa:af:d6:0c:7b:ef:da:77:84:7b:85:1f:
a5:96:69:c6:91:3a:43:50:5f:0d:3b:4e:71:92:32:
05:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F1:3A:96:4F:6F:C9:19:A2:CD:A2:F0:2C:8F:5F:8F:8B:CE:DB:5A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EE3FE116BDD011EA9702FC12C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.21.0/24
103.156.221.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:83:73:27:2b:68:57:c8:c0:a8:5b:1d:6f:3f:f7:91:10:bf:
47:5d:33:cb:d0:5a:7c:f0:25:9c:c1:78:03:6d:73:21:3d:0e:
ca:d4:53:dc:bb:7f:42:85:11:ef:e4:08:e2:ff:cc:19:ab:13:
3d:4f:5e:e1:37:24:2f:ca:ff:a8:d6:48:81:28:cb:59:7b:32:
f7:d7:8c:28:05:66:2b:c8:bb:8c:4f:c0:66:7d:1f:97:79:69:
ed:a9:33:6f:64:99:d0:59:1c:e8:d4:d7:d5:a0:d8:7b:fc:a9:
e2:68:df:c0:8e:9f:d5:ba:df:60:11:5a:5b:e9:e1:1d:e8:ba:
fc:01:bb:f5:18:be:9d:5f:b7:85:d0:64:80:98:07:45:6b:12:
62:9c:3d:da:e3:b2:5d:e7:71:23:6f:51:22:7c:5d:3a:83:bb:
32:d2:4a:60:23:76:25:9b:d4:93:21:3c:99:23:34:b2:fd:8d:
62:8c:ed:ec:70:64:27:dc:a1:be:16:df:c9:20:85:e9:47:5f:
a6:ab:2d:2f:35:58:d3:d6:e3:c4:88:22:a7:00:6c:b0:0a:e8:
21:89:8c:ac:14:bc:b1:4d:d1:e3:db:d9:b0:bd:80:5a:27:12:
fa:ff:da:5e:93:3a:f2:01:b6:de:1a:14:b2:67:c8:4d:76:2e:
2d:56:66:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 17:18:55 2025 by rpki-client