Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5FA0670653B711EF9C48C54EC4F9AE02.roa
File: 5FA0670653B711EF9C48C54EC4F9AE02.roa (raw, json)
Hash identifier: mEtHLaizmgtGQdLI5KGs1AOtZ1XLgxmMs4n3jY1Mv+0=
Subject key identifier: 07:D0:FF:4C:9E:4B:F3:33:C7:6C:6B:21:BC:31:A5:F2:A9:D5:81:E9
Certificate issuer: /CN=A91B59E5/serialNumber=E47BF70254532697D20D0D3110F625370D65FA83
Certificate serial: 0126
Authority key identifier: E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5FA0670653B711EF9C48C54EC4F9AE02.roa
Signing time: Tue 17 Sep 2024 10:40:01 +0000
ROA not before: Tue 17 Sep 2024 10:40:01 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 133320
IP address blocks: 45.118.9.0/24 maxlen: 24
103.58.41.0/24 maxlen: 24
103.237.113.0/24 maxlen: 24
103.237.114.0/24 maxlen: 24
103.237.115.0/24 maxlen: 24
2001:df6:a900::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294 (0x126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B59E5
Validity
Not Before: Sep 17 10:40:01 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66e95c81-4f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4a:ec:fb:cc:db:bd:72:b6:51:3f:51:2b:5b:
13:43:0b:6f:85:59:f7:0e:fc:2c:46:bd:84:91:2c:
db:d8:03:cb:8e:7d:4f:74:9f:1c:ff:c7:85:cf:27:
4d:1e:86:c7:d9:4a:bb:1c:4e:a0:79:c7:32:09:9e:
55:7e:e4:47:fe:53:bb:59:5e:ad:c3:f4:3d:b7:35:
f2:fb:c4:61:50:f0:72:12:cb:fc:2d:0a:38:f4:12:
9f:6b:dd:92:04:c3:3e:f2:97:ec:ae:88:bd:af:4c:
97:e6:a2:70:00:d8:da:c9:51:5c:40:ae:41:01:aa:
17:b0:fd:55:20:cf:56:ec:d2:f7:97:bb:dd:aa:7d:
fc:b0:72:54:54:30:76:1b:dc:d8:f1:6f:b1:0d:c6:
f4:b5:18:8b:89:17:75:0d:eb:5c:6a:dd:e1:1b:fb:
a0:8f:80:f6:6c:80:4c:31:c2:25:4e:ae:e7:0a:77:
0c:8b:52:a8:1d:8f:55:c7:14:6a:52:90:7f:e8:9e:
46:0b:d5:fa:91:a6:df:38:31:d0:04:69:1f:89:2a:
81:a0:3c:c1:f9:53:46:db:8f:6d:64:00:f5:5f:b1:
b5:b5:c7:af:8b:61:45:ea:ef:82:84:7a:eb:50:3d:
1b:e6:c7:d5:fb:59:75:09:16:b1:3b:50:3b:4c:09:
c1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D0:FF:4C:9E:4B:F3:33:C7:6C:6B:21:BC:31:A5:F2:A9:D5:81:E9
X509v3 Authority Key Identifier:
keyid:E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5FA0670653B711EF9C48C54EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.118.9.0/24
103.58.41.0/24
103.237.113.0-103.237.115.255
IPv6:
2001:df6:a900::/48
Signature Algorithm: sha256WithRSAEncryption
08:3b:fd:b9:14:b7:42:48:91:45:e4:39:73:94:56:9c:79:a0:
8c:85:c3:61:bc:2e:3a:03:29:3a:11:a3:d0:5d:33:44:61:9d:
37:90:91:7e:38:4c:43:1c:d4:7c:2f:9e:2a:d6:93:94:9c:5c:
3d:06:54:fe:ec:fa:06:5c:b5:ce:4d:55:3d:50:03:5c:7f:69:
ec:c6:56:fb:61:31:f2:3f:84:95:bc:ea:f5:de:81:68:6f:c6:
2f:84:bb:be:8b:79:48:a3:97:5b:43:a5:35:11:4d:1a:7f:a0:
62:4d:e9:22:42:53:d7:f7:87:d4:28:6a:d3:30:6b:46:65:90:
33:29:02:61:87:d1:2b:38:55:af:dd:f2:34:98:91:5e:a6:2a:
9f:59:84:bb:fd:e3:4e:7c:6f:98:a4:06:4f:b8:d5:a7:e5:af:
a7:27:8d:9e:2c:5d:10:e8:f0:51:ca:ea:99:26:a4:43:4a:37:
77:35:96:a6:de:e5:c8:e5:6c:2b:d5:5f:ab:a7:83:0f:4e:70:
e4:41:25:31:33:ab:0c:4f:3d:8d:c5:9b:44:85:d6:9d:e6:24:
9c:46:6a:34:59:93:4e:2e:26:d5:05:83:43:cf:91:f8:8b:31:
e7:aa:df:8e:09:54:a9:ea:3d:6e:28:cf:2f:85:5c:df:02:d0:
c4:6c:60:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:19:54 2025 by rpki-client