Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/4216609C2F2D11EDBADDCA86C4F9AE02.roa
File: 4216609C2F2D11EDBADDCA86C4F9AE02.roa (raw, json)
Hash identifier: KqV2sN76wQ1lJtIhdPidwa/RwqyWPQVxN8Tc0DI/qYs=
Subject key identifier: 92:03:FF:59:B4:A7:D1:43:0E:B4:24:D6:D0:F5:6E:71:23:B0:55:17
Certificate issuer: /CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD
Certificate serial: 08A9
Authority key identifier: 08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/4216609C2F2D11EDBADDCA86C4F9AE02.roa
Signing time: Thu 08 Jun 2023 22:02:54 +0000
ROA not before: Thu 08 Jun 2023 22:02:54 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 58895
IP address blocks: 103.92.20.0/22 maxlen: 22
103.92.20.0/24 maxlen: 24
103.92.21.0/24 maxlen: 24
103.92.22.0/24 maxlen: 24
103.92.23.0/24 maxlen: 24
103.203.44.0/22 maxlen: 22
103.203.44.0/24 maxlen: 24
103.203.45.0/24 maxlen: 24
103.203.46.0/24 maxlen: 24
103.203.47.0/24 maxlen: 24
116.213.32.0/24 maxlen: 24
116.213.33.0/24 maxlen: 24
116.213.34.0/24 maxlen: 24
116.213.35.0/24 maxlen: 24
123.253.92.0/22 maxlen: 22
123.253.92.0/24 maxlen: 24
123.253.93.0/24 maxlen: 24
123.253.94.0/24 maxlen: 24
123.253.95.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2217 (0x8a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1FCC
Validity
Not Before: Jun 8 22:02:54 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6482500d-c08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:83:a3:27:23:b4:f6:8e:d6:db:dc:79:c7:13:
ef:df:87:08:22:5d:fe:16:bd:db:2f:28:09:6b:58:
d6:72:f9:31:bf:86:e5:eb:eb:fe:62:da:f9:dc:c6:
8e:47:e7:a9:50:11:47:ca:65:b7:1d:05:41:dd:59:
30:e7:73:82:3e:65:88:9a:1d:fa:1e:d8:f5:a1:78:
16:d5:b9:02:3f:1f:f3:56:20:d0:e8:de:57:49:dd:
5f:8f:8a:f6:e6:b5:f8:24:af:78:17:3f:57:da:65:
f9:39:25:8d:92:43:fe:6e:82:ed:7e:57:72:38:97:
09:55:00:0b:20:f3:fa:a7:27:ef:4e:e9:87:7c:8e:
08:7e:da:d0:e7:ab:86:e5:e7:5e:6b:00:2b:b5:75:
cb:39:bb:9a:03:18:3f:8a:b2:25:e7:94:2d:78:14:
9b:de:48:41:11:3a:1f:f0:f5:8a:6d:5f:06:4a:d1:
ec:04:9a:70:34:68:83:d3:0e:a4:b1:c8:78:5d:c0:
10:c5:43:08:9b:43:3c:c2:ef:c2:71:e8:a8:e9:1b:
b3:6c:44:8b:6d:c9:df:ed:e7:20:52:4e:eb:b2:d3:
f1:77:3e:ee:fa:d8:d3:17:be:ca:80:b4:d0:58:1d:
e1:51:da:1a:7d:d3:6c:67:bf:18:c3:c6:b9:1c:be:
01:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:03:FF:59:B4:A7:D1:43:0E:B4:24:D6:D0:F5:6E:71:23:B0:55:17
X509v3 Authority Key Identifier:
keyid:08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/4216609C2F2D11EDBADDCA86C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.92.20.0/22
103.203.44.0/22
116.213.32.0/22
123.253.92.0/22
Signature Algorithm: sha256WithRSAEncryption
63:a6:a5:f0:4c:3c:98:78:96:57:06:55:90:f4:2e:5d:bd:b8:
8e:99:5e:8e:e0:0d:21:35:e5:25:58:c9:7d:55:2b:31:42:66:
3e:70:0e:f0:c2:d7:c8:bf:7e:b0:22:6a:76:83:56:ee:69:b4:
fb:da:de:db:fb:88:4a:89:66:01:2d:eb:4e:59:7f:70:45:a8:
5f:78:1f:a3:4f:01:35:39:4e:36:3c:63:8f:86:05:44:c6:28:
ff:c4:69:ef:5e:38:32:ef:cb:10:16:e1:4d:3f:f0:7f:53:27:
54:93:62:49:2d:2c:48:4a:54:1c:c0:db:28:57:9a:1a:52:81:
97:c7:d2:fb:70:3a:9e:6f:b2:e2:39:e2:9f:96:d6:e5:80:ae:
02:21:3e:02:a8:f4:dd:47:c4:4e:4f:e5:be:74:f5:f8:1d:13:
cf:61:4d:9f:c2:6f:1c:db:f4:84:64:31:67:d0:63:60:9c:3a:
e9:c1:fc:07:f0:1e:19:b8:35:ce:f7:8f:c4:fc:1f:86:7f:45:
da:59:4a:4a:f1:ff:17:97:e9:0f:f5:f8:6a:83:42:90:3c:c7:
89:1a:f7:a7:b2:a8:b1:25:bf:51:6f:f8:50:ea:cc:a6:39:32:
7b:51:ab:04:3b:d2:13:eb:89:89:a6:8e:3c:e0:c1:33:22:f0:
74:1c:f5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:40:18 2025 by rpki-client