Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/22963DC4C55F11ECB1976477C4F9AE02.roa
File: 22963DC4C55F11ECB1976477C4F9AE02.roa (raw, json)
Hash identifier: qFvget+RwYwHxMJIZTtnQLcKAqI4QzPoHUjJBX3bwrA=
Subject key identifier: B0:E0:21:A5:76:87:EB:B8:81:4B:18:4E:BD:81:62:D2:1C:CA:81:D6
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 071D
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/22963DC4C55F11ECB1976477C4F9AE02.roa
Signing time: Tue 26 Apr 2022 13:09:14 +0000
ROA not before: Tue 26 Apr 2022 13:09:14 +0000
ROA not after: Thu 01 Dec 2022 00:00:00 +0000
asID: 210654
IP address blocks: 113.203.220.0/22 maxlen: 24
113.203.224.0/22 maxlen: 24
180.178.148.0/22 maxlen: 24
180.178.156.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1821 (0x71d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7
Validity
Not Before: Apr 26 13:09:14 2022 GMT
Not After : Dec 1 00:00:00 2022 GMT
Subject: CN=6267eefa-4664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:24:1e:93:f8:68:9d:38:0d:d8:a1:a8:43:93:
66:2c:27:8c:de:9b:87:c4:60:9a:4c:8b:2c:8c:50:
42:dc:58:73:b0:ac:43:52:df:d5:b0:ee:a1:91:f5:
fb:c1:59:38:0b:df:8a:f2:01:3c:40:d5:7b:da:ad:
0f:93:81:6a:50:35:73:10:15:1d:ce:13:8b:da:15:
91:2a:23:63:4d:32:a0:6d:f5:22:ad:61:bc:71:5d:
1b:71:55:b5:58:71:98:d5:fe:7d:3a:4f:86:c4:53:
86:6b:f3:fe:5b:89:83:9d:1c:70:c5:f6:df:6b:b2:
94:05:5d:10:09:aa:c6:9c:ee:84:41:12:fa:f4:00:
52:c8:4e:e0:05:7b:32:3e:f6:9f:7a:72:dc:e2:81:
89:66:23:a8:2e:51:ec:3b:d5:3f:19:a0:db:e5:ad:
2f:37:60:1d:c4:04:88:80:7a:77:f0:37:bf:7a:c0:
69:78:6e:c4:0b:62:26:14:dd:22:8e:58:fb:68:61:
6d:a5:8a:f5:08:04:90:55:f0:63:63:c7:8a:3b:2b:
48:35:43:90:29:b6:af:18:06:db:10:3f:b8:68:ee:
67:fd:48:9f:6e:44:e9:95:ef:cb:4f:aa:d3:c1:52:
ad:c1:62:3a:83:54:d1:b3:ef:86:0f:94:ce:06:0a:
d2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E0:21:A5:76:87:EB:B8:81:4B:18:4E:BD:81:62:D2:1C:CA:81:D6
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/22963DC4C55F11ECB1976477C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.220.0-113.203.227.255
180.178.148.0/22
180.178.156.0/22
Signature Algorithm: sha256WithRSAEncryption
37:7a:08:53:27:ef:63:6e:b5:f8:20:e3:d3:5a:3f:73:e8:17:
da:fc:c4:f1:58:4f:9a:13:16:c1:ce:7d:7e:94:e0:35:0b:96:
01:b8:fe:42:46:f4:26:d5:6b:67:dd:5b:b8:63:dd:34:fb:15:
bd:0a:1e:8a:4d:15:f5:3f:6d:d8:7a:ba:70:4f:5a:cf:cd:c5:
f1:f5:5e:7d:68:cb:c1:cd:54:8c:5f:1b:aa:04:a4:50:bc:6b:
38:1e:52:cf:a7:62:20:e7:7f:52:b8:df:d2:60:e5:2f:f7:8a:
64:91:92:f0:e2:79:0c:8e:25:bb:4b:5e:ef:2b:22:9f:df:70:
3e:bc:24:28:7d:53:98:26:03:3f:30:9c:14:3a:bc:f1:46:c2:
3b:0a:c0:e1:43:46:c7:3d:7f:57:cb:2e:54:c4:e2:47:fe:0e:
6b:65:bd:3c:cd:e3:14:00:94:f6:60:fa:5b:5f:cd:8b:89:0a:
62:ef:16:02:06:c2:ea:53:c4:6b:a4:6b:ac:7b:48:6c:43:cc:
9e:f9:24:47:40:f1:75:70:4f:d0:3f:87:5d:19:ea:30:b1:de:
14:a2:ae:47:20:30:dd:67:62:3c:05:2e:9c:7f:3d:8b:02:7a:
a3:bd:bc:1e:e1:cb:1e:b4:5a:47:08:6a:c4:44:85:44:99:53:
03:5a:65:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:00:49 2025 by rpki-client