Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/9A021EE8074D11ED99CF6642C4F9AE02.roa
File: 9A021EE8074D11ED99CF6642C4F9AE02.roa (raw, json)
Hash identifier: stX6bNDlrRmEC7m3wxEwnSuAtCGiZsKnG/Ip2LA71qw=
Subject key identifier: A8:05:A6:22:B1:50:AF:14:50:63:70:DC:74:B3:CD:6D:CF:A5:84:94
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 0828
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/9A021EE8074D11ED99CF6642C4F9AE02.roa
Signing time: Wed 10 Aug 2022 14:48:01 +0000
ROA not before: Wed 10 Aug 2022 14:48:01 +0000
ROA not after: Thu 01 Dec 2022 00:00:00 +0000
asID: 9387
IP address blocks: 103.11.60.0/24 maxlen: 24
103.11.62.0/24 maxlen: 24
103.11.63.0/24 maxlen: 24
113.203.208.0/22 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/23 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.218.0/23 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.228.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.234.0/24 maxlen: 24
113.203.235.0/24 maxlen: 24
113.203.236.0/24 maxlen: 24
113.203.237.0/24 maxlen: 24
113.203.238.0/24 maxlen: 24
113.203.239.0/24 maxlen: 24
113.203.240.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
113.203.246.0/24 maxlen: 24
113.203.247.0/24 maxlen: 24
180.178.128.0/24 maxlen: 24
180.178.129.0/24 maxlen: 24
180.178.132.0/24 maxlen: 24
180.178.133.0/24 maxlen: 24
180.178.134.0/24 maxlen: 24
180.178.135.0/24 maxlen: 24
180.178.137.0/24 maxlen: 24
180.178.138.0/24 maxlen: 24
180.178.139.0/24 maxlen: 24
180.178.140.0/22 maxlen: 22
180.178.144.0/24 maxlen: 24
180.178.145.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.151.0/24 maxlen: 24
180.178.152.0/22 maxlen: 24
180.178.156.0/23 maxlen: 24
180.178.159.0/24 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.164.0/22 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.172.0/24 maxlen: 24
180.178.173.0/24 maxlen: 24
180.178.174.0/24 maxlen: 24
180.178.175.0/24 maxlen: 24
180.178.176.0/21 maxlen: 24
223.29.224.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
223.29.227.0/24 maxlen: 24
223.29.232.0/22 maxlen: 22
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
2401:4100::/33 maxlen: 33
2401:4100:8000::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2088 (0x828)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7
Validity
Not Before: Aug 10 14:48:01 2022 GMT
Not After : Dec 1 00:00:00 2022 GMT
Subject: CN=62f3c521-714b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0b:24:be:68:dc:0a:c2:6f:be:89:a4:b0:5d:
5d:0b:6b:8a:10:89:42:45:21:b2:45:52:95:44:8a:
3e:b7:a7:49:49:79:f1:d2:19:33:31:66:fb:77:0d:
4e:4b:12:a4:b4:46:3d:2a:26:78:12:56:ed:c1:59:
1f:30:a0:b5:8d:0f:bd:7b:a1:9d:46:60:01:6f:2e:
aa:6c:8f:3a:18:cc:81:36:f1:f9:56:8f:55:3f:d3:
7d:82:2f:27:f3:dd:d0:9c:d0:93:22:8c:e4:42:82:
4b:82:ec:c1:b3:66:58:64:08:c2:13:97:7a:8d:25:
d9:64:7e:b8:63:64:1f:b8:a6:e8:80:e3:b8:66:02:
ca:a1:6a:ce:b5:41:20:ad:62:df:02:4e:11:f8:ab:
f7:c2:b1:fe:89:b2:e1:48:41:d6:c1:40:b7:f3:07:
f1:c2:08:86:05:10:55:91:c8:6b:20:a3:f1:20:a4:
f7:e6:87:44:c9:5c:82:52:85:ad:d9:ce:1b:a4:ec:
0d:37:54:b7:0d:17:86:77:f3:25:e1:d9:30:9f:f6:
3c:c8:a3:d3:57:bf:0e:41:94:57:32:4e:16:fa:31:
1d:06:02:4e:c8:96:3e:7c:7e:aa:59:46:d1:c7:8d:
10:03:ab:3a:93:86:67:1b:f0:78:ce:dc:5d:78:71:
17:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:05:A6:22:B1:50:AF:14:50:63:70:DC:74:B3:CD:6D:CF:A5:84:94
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/9A021EE8074D11ED99CF6642C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.60.0/24
103.11.62.0/23
113.203.208.0-113.203.219.255
113.203.223.0/24
113.203.228.0/23
113.203.231.0/24
113.203.234.0-113.203.240.255
113.203.242.0-113.203.247.255
180.178.128.0/23
180.178.132.0/22
180.178.137.0-180.178.145.255
180.178.149.0-180.178.157.255
180.178.159.0-180.178.162.255
180.178.164.0-180.178.168.255
180.178.172.0-180.178.183.255
223.29.224.0/23
223.29.227.0/24
223.29.232.0/21
IPv6:
2401:4100::-2401:4100:8000:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1e:ae:fc:6c:94:91:ef:9e:32:d0:b1:17:b8:2c:25:f4:fd:36:
53:b8:e8:dc:34:3a:e2:aa:db:05:c5:e1:82:73:74:f2:42:80:
d0:c9:98:2c:1c:c3:78:50:aa:18:11:80:41:a0:13:7c:65:35:
85:62:73:0f:f9:73:79:a7:58:a0:8a:22:13:38:86:8d:14:0a:
53:5a:8c:f8:14:26:a3:56:4d:02:6f:54:bd:21:b6:a3:5c:5f:
36:93:76:8d:20:4d:6e:10:82:77:07:41:45:ec:c5:26:83:04:
62:2e:88:36:1d:a7:4d:21:b8:4f:1b:be:f4:ed:62:a2:ee:e3:
2e:ea:47:19:61:cb:3b:0f:1c:aa:6a:51:e9:6b:01:c7:d2:42:
f8:76:44:f9:3f:3e:76:69:a8:3b:88:1f:14:1f:dd:70:af:e0:
0d:bb:8b:04:f5:34:82:3c:06:b0:37:b9:4a:dc:ff:9f:55:8f:
82:e2:81:38:77:b8:76:f8:40:42:fc:1d:5c:47:61:a1:72:16:
f5:ea:76:49:b7:b8:5e:8f:1f:45:e0:be:2e:45:41:6f:e7:98:
7a:ee:7c:13:22:12:56:f2:80:f5:25:89:34:13:df:c5:70:08:
13:20:9b:2a:38:5a:57:5b:76:e9:e0:8d:d6:11:1e:2c:33:59:
98:cc:bc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:59:29 2025 by rpki-client