Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/55A9B4125C2B11ED86B05D2CC4F9AE02.roa
File: 55A9B4125C2B11ED86B05D2CC4F9AE02.roa (raw, json)
Hash identifier: Mr7nGcBDVF888PXlSUMVD9WtfWUBCOtEFpOKR6x17g0=
Subject key identifier: A7:6B:FF:EE:FA:52:EC:63:82:9D:B8:4B:86:FE:4E:3F:80:DB:E5:72
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 08F8
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/55A9B4125C2B11ED86B05D2CC4F9AE02.roa
Signing time: Fri 04 Nov 2022 10:27:51 +0000
ROA not before: Fri 04 Nov 2022 10:27:51 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 9387
IP address blocks: 103.11.60.0/24 maxlen: 24
103.11.61.0/24 maxlen: 24
103.11.62.0/24 maxlen: 24
113.203.208.0/22 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/23 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.218.0/23 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.224.0/22 maxlen: 22
113.203.228.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.234.0/24 maxlen: 24
113.203.235.0/24 maxlen: 24
113.203.236.0/24 maxlen: 24
113.203.237.0/24 maxlen: 24
113.203.238.0/24 maxlen: 24
113.203.239.0/24 maxlen: 24
113.203.240.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
113.203.246.0/24 maxlen: 24
113.203.248.0/22 maxlen: 22
113.203.252.0/22 maxlen: 22
180.178.128.0/24 maxlen: 24
180.178.129.0/24 maxlen: 24
180.178.132.0/24 maxlen: 24
180.178.133.0/24 maxlen: 24
180.178.134.0/24 maxlen: 24
180.178.135.0/24 maxlen: 24
180.178.137.0/24 maxlen: 24
180.178.138.0/24 maxlen: 24
180.178.139.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.151.0/24 maxlen: 24
180.178.152.0/22 maxlen: 24
180.178.156.0/24 maxlen: 24
180.178.158.0/24 maxlen: 24
180.178.159.0/24 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.164.0/22 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.172.0/24 maxlen: 24
180.178.173.0/24 maxlen: 24
180.178.174.0/24 maxlen: 24
180.178.175.0/24 maxlen: 24
180.178.180.0/22 maxlen: 24
180.178.184.0/22 maxlen: 22
223.29.224.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
223.29.226.0/24 maxlen: 24
223.29.232.0/22 maxlen: 22
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
2401:4100::/33 maxlen: 33
2401:4100:8000::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2296 (0x8f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7
Validity
Not Before: Nov 4 10:27:51 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=6364e927-d504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4e:ad:79:57:d1:6e:12:44:98:24:04:1f:33:
a4:05:69:7f:26:e5:06:1f:e6:7f:51:a8:77:83:12:
d6:85:c2:af:4b:4d:c7:60:f7:a1:d6:d4:a1:00:05:
aa:9d:30:7f:41:de:25:3e:bf:da:1b:76:9e:2f:25:
5c:58:b9:fc:2c:06:66:68:7a:ef:9d:eb:cd:82:1b:
6f:76:92:96:7f:d6:dc:9d:7d:e2:02:25:c9:5c:d2:
ee:7f:05:25:d9:89:07:18:02:df:62:fc:f5:86:ac:
74:11:d5:52:23:4f:51:19:1f:64:ad:15:c6:fd:1d:
13:6f:15:b9:ce:74:40:72:45:8f:3e:f5:ee:8a:42:
7a:9b:9f:e5:b5:2a:f1:22:d9:b3:a3:28:72:9d:be:
86:96:98:9f:53:be:54:f7:38:fe:91:f9:a0:8e:a4:
f4:5f:04:b8:03:f8:e0:58:14:21:f3:ab:a6:64:8a:
dd:73:e9:f5:5d:cf:48:c8:58:14:12:dc:4d:4f:7e:
42:44:ff:cf:28:c5:71:89:b1:52:83:89:54:44:be:
5f:6c:78:31:86:45:83:96:8a:89:8f:2f:73:c4:86:
17:72:ec:4d:cf:11:3a:84:0f:90:71:fc:8f:4e:f8:
8e:f4:16:c3:14:70:91:43:4f:c7:c7:e7:6f:cb:40:
c0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6B:FF:EE:FA:52:EC:63:82:9D:B8:4B:86:FE:4E:3F:80:DB:E5:72
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/55A9B4125C2B11ED86B05D2CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.60.0-103.11.62.255
113.203.208.0-113.203.219.255
113.203.223.0-113.203.229.255
113.203.231.0/24
113.203.234.0-113.203.240.255
113.203.242.0-113.203.246.255
113.203.248.0/21
180.178.128.0/23
180.178.132.0/22
180.178.137.0-180.178.139.255
180.178.144.0/24
180.178.149.0-180.178.156.255
180.178.158.0-180.178.162.255
180.178.164.0-180.178.168.255
180.178.172.0/22
180.178.180.0-180.178.187.255
223.29.224.0-223.29.226.255
223.29.232.0/21
IPv6:
2401:4100::-2401:4100:8000:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2e:dc:90:b2:92:60:d9:5d:ab:cd:71:54:1c:3d:86:27:18:98:
f4:45:f0:4c:cc:48:cd:7f:89:2d:8b:ab:84:21:7c:37:38:f2:
b7:e0:d9:ce:67:06:a2:42:28:26:62:20:db:5d:82:cf:07:34:
78:b3:e6:96:86:71:76:59:30:4f:a0:88:6d:58:6f:d5:4f:fe:
b6:14:58:f6:69:10:b9:c5:5f:be:a9:77:9b:39:d5:92:8c:d4:
1a:7a:ac:15:ce:00:32:cd:80:f7:11:fa:79:bb:1b:70:46:8b:
4e:7c:ee:35:51:26:13:55:be:63:23:c6:c6:a8:67:7b:7b:db:
10:5c:5d:c6:6c:06:9e:28:05:e3:5d:8b:c0:b4:9e:f2:fa:2f:
29:6e:46:4d:c3:11:39:02:47:49:c0:e0:4d:f6:0c:43:66:4c:
b1:b2:4e:a3:c5:40:33:7a:40:11:87:03:65:6f:52:ca:dd:3f:
74:6a:54:d8:98:79:41:50:2c:43:5e:8e:9d:b6:39:2b:c3:36:
dd:a5:ec:06:05:ad:df:da:70:76:b7:8d:cb:63:06:96:57:48:
00:a4:96:c3:b3:32:82:f7:88:20:6b:27:b5:d4:47:f4:85:ec:
42:d0:cf:35:a9:1d:bf:7d:0e:d2:ab:f3:e7:48:54:18:1c:56:
fe:38:90:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 06:05:10 2025 by rpki-client