Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/B5D6CC842E0A11ED8128767CC4F9AE02.roa
File: B5D6CC842E0A11ED8128767CC4F9AE02.roa (raw, json)
Hash identifier: EaMO3PuqHJ3oZOZjlFwDd61Czdvy7VoGO5sA/6aE924=
Subject key identifier: 5B:8E:F3:3F:B9:2B:48:EC:CA:73:F8:2D:E6:2B:0C:42:73:0D:87:F1
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 0870
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/B5D6CC842E0A11ED8128767CC4F9AE02.roa
Signing time: Tue 06 Sep 2022 17:38:26 +0000
ROA not before: Tue 06 Sep 2022 17:38:26 +0000
ROA not after: Thu 01 Dec 2022 00:00:00 +0000
asID: 9387
IP address blocks: 103.11.60.0/24 maxlen: 24
103.11.62.0/24 maxlen: 24
103.11.63.0/24 maxlen: 24
113.203.208.0/22 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/23 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.218.0/23 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.228.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.234.0/24 maxlen: 24
113.203.235.0/24 maxlen: 24
113.203.236.0/24 maxlen: 24
113.203.237.0/24 maxlen: 24
113.203.238.0/24 maxlen: 24
113.203.239.0/24 maxlen: 24
113.203.240.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
113.203.246.0/24 maxlen: 24
180.178.128.0/24 maxlen: 24
180.178.129.0/24 maxlen: 24
180.178.132.0/24 maxlen: 24
180.178.133.0/24 maxlen: 24
180.178.134.0/24 maxlen: 24
180.178.135.0/24 maxlen: 24
180.178.137.0/24 maxlen: 24
180.178.138.0/24 maxlen: 24
180.178.139.0/24 maxlen: 24
180.178.140.0/22 maxlen: 22
180.178.144.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.151.0/24 maxlen: 24
180.178.152.0/22 maxlen: 24
180.178.156.0/23 maxlen: 24
180.178.159.0/24 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.164.0/22 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.172.0/24 maxlen: 24
180.178.173.0/24 maxlen: 24
180.178.174.0/24 maxlen: 24
180.178.175.0/24 maxlen: 24
180.178.180.0/22 maxlen: 24
223.29.224.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
223.29.232.0/22 maxlen: 22
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
2401:4100::/33 maxlen: 33
2401:4100:8000::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2160 (0x870)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7
Validity
Not Before: Sep 6 17:38:26 2022 GMT
Not After : Dec 1 00:00:00 2022 GMT
Subject: CN=63178591-4dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cc:de:95:6f:ed:c3:8a:41:df:74:9e:ab:e0:
82:79:23:5a:53:95:1f:57:94:2a:be:1f:ce:d7:95:
7d:08:a0:6d:4d:c8:85:45:cc:62:3e:29:91:c6:a2:
4a:67:93:46:bb:33:b2:90:b7:62:a9:c6:53:e5:b2:
bb:46:82:23:71:2f:91:b6:6c:35:4b:bb:ff:c8:15:
4f:e6:93:15:65:05:4f:dc:92:31:77:53:0e:e5:39:
73:9c:3b:58:9b:e3:9e:48:54:2f:77:bc:b5:a2:1e:
a9:e6:4e:ff:17:86:1c:6d:f7:12:4f:d0:eb:fa:2e:
bc:25:a4:bf:14:34:7e:73:21:1f:a7:d1:57:a0:62:
dd:b3:58:d3:5a:ac:c9:d0:63:6e:61:fa:48:cc:f1:
f9:d4:27:63:91:5e:aa:27:8d:ec:36:41:97:2e:ff:
82:ad:21:ea:ac:62:30:80:42:cb:e1:14:63:23:2a:
ce:4f:1f:fb:6f:8a:c3:b8:38:50:f3:e3:87:7e:79:
f9:1a:3c:0d:45:be:f5:b1:8a:c4:53:19:16:2b:f3:
49:92:90:50:86:31:a4:04:8d:f1:cb:49:15:c7:bd:
9b:a7:2a:f5:fc:f6:5b:b3:c0:a4:1e:4c:5a:61:6e:
0f:fa:a3:5b:03:26:0e:bd:48:83:56:ce:78:22:d6:
e8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8E:F3:3F:B9:2B:48:EC:CA:73:F8:2D:E6:2B:0C:42:73:0D:87:F1
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/B5D6CC842E0A11ED8128767CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.60.0/24
103.11.62.0/23
113.203.208.0-113.203.219.255
113.203.223.0/24
113.203.228.0/23
113.203.231.0/24
113.203.234.0-113.203.240.255
113.203.242.0-113.203.246.255
180.178.128.0/23
180.178.132.0/22
180.178.137.0-180.178.144.255
180.178.149.0-180.178.157.255
180.178.159.0-180.178.162.255
180.178.164.0-180.178.168.255
180.178.172.0/22
180.178.180.0/22
223.29.224.0/23
223.29.232.0/21
IPv6:
2401:4100::-2401:4100:8000:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
48:af:91:92:30:16:a5:e3:b5:5c:db:0c:13:74:95:89:49:1a:
66:90:98:ff:5d:9e:34:d9:90:f4:d5:c9:73:b5:db:0d:52:67:
cb:9f:8b:da:d7:95:f5:72:18:21:df:82:90:6d:2c:1b:1a:19:
06:0c:62:5f:82:36:f4:29:33:c3:cc:42:b0:25:d6:17:cd:b7:
b5:35:02:3a:b1:58:52:ee:ba:81:69:b9:3d:e5:8c:01:08:70:
26:32:56:1a:98:cd:fa:25:31:9d:9c:f7:cb:4f:38:b4:0d:14:
ad:d8:db:47:b7:6f:e9:2c:b4:31:95:3b:ec:88:11:fb:85:e2:
af:a9:22:3a:c0:57:5f:19:b9:e3:a5:c0:2e:22:68:7b:b3:1c:
97:de:e5:c7:0a:a3:1e:63:ca:cb:ab:cf:0b:27:03:c7:1e:60:
55:7d:7e:e5:ea:ea:21:b9:66:ed:16:48:c3:5d:3a:da:7d:ab:
52:36:73:ae:41:6c:cf:a2:7f:29:ef:62:43:2a:a6:e8:e5:28:
07:30:47:c0:e9:1e:9d:74:1a:13:1e:0b:b2:b3:48:cd:96:c1:
14:be:71:45:e9:d1:0a:6c:00:e2:9b:ea:e3:52:71:4b:e6:69:
62:9a:92:fd:c1:46:d2:4c:a3:ce:2f:4a:2c:98:e0:f2:12:05:
a6:85:5b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 06:08:51 2025 by rpki-client