Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/C1C604C0C4E011ED93F6CA4BC4F9AE02.roa
File: C1C604C0C4E011ED93F6CA4BC4F9AE02.roa (raw, json)
Hash identifier: A+gbE7bzFzT5BH5MIu4Q0cjczFuEb0J4sxIcDGldYa4=
Subject key identifier: 6E:CF:36:AB:C2:69:E6:D2:EF:3B:8F:31:C5:82:1D:31:BF:9F:6C:F6
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 09C1
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/C1C604C0C4E011ED93F6CA4BC4F9AE02.roa
Signing time: Fri 17 Mar 2023 16:28:32 +0000
ROA not before: Fri 17 Mar 2023 16:28:32 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 9387
IP address blocks: 103.11.60.0/22 maxlen: 22
103.11.60.0/24 maxlen: 24
103.11.62.0/24 maxlen: 24
113.203.209.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/23 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.226.0/24 maxlen: 24
113.203.234.0/24 maxlen: 24
113.203.235.0/24 maxlen: 24
113.203.236.0/24 maxlen: 24
113.203.237.0/24 maxlen: 24
113.203.238.0/24 maxlen: 24
113.203.239.0/24 maxlen: 24
113.203.240.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
180.178.128.0/21 maxlen: 21
180.178.128.0/22 maxlen: 22
180.178.128.0/24 maxlen: 24
180.178.129.0/24 maxlen: 24
180.178.132.0/24 maxlen: 24
180.178.133.0/24 maxlen: 24
180.178.134.0/24 maxlen: 24
180.178.135.0/24 maxlen: 24
180.178.136.0/21 maxlen: 21
180.178.137.0/24 maxlen: 24
180.178.138.0/24 maxlen: 24
180.178.139.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.160.0/20 maxlen: 20
180.178.160.0/24 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.172.0/24 maxlen: 24
180.178.174.0/24 maxlen: 24
180.178.175.0/24 maxlen: 24
180.178.178.0/24 maxlen: 24
180.178.180.0/22 maxlen: 24
223.29.224.0/20 maxlen: 20
223.29.224.0/24 maxlen: 24
2401:4100::/32 maxlen: 32
2401:4100::/33 maxlen: 33
2401:4100:8000::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2497 (0x9c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7
Validity
Not Before: Mar 17 16:28:32 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=64149530-6eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6c:ba:7d:7e:6c:57:e4:c3:fb:de:5e:4c:3b:
b2:dc:f1:ae:f3:c6:a0:35:16:4e:9c:c5:b5:25:be:
6a:41:5d:98:39:01:dc:fc:43:77:f2:9e:f2:66:b3:
28:d2:a0:ef:ca:05:7b:4f:01:c5:f1:4a:a8:3a:af:
52:ff:c6:19:77:09:39:c6:4f:83:f9:f1:79:3a:7a:
e3:a1:a4:aa:83:2e:2e:c7:a4:04:25:2f:89:08:0c:
df:a1:b4:ce:32:90:fc:8a:87:24:25:ab:aa:5f:be:
cf:8f:3b:9f:28:35:23:2b:01:13:16:aa:4f:8d:20:
ea:96:ce:d8:e9:94:c7:4b:ea:6d:7a:de:98:f8:58:
e8:89:16:9e:43:9b:9c:cc:75:cb:a5:5f:a8:4d:95:
cc:be:b7:c5:47:60:04:76:81:ac:54:17:c1:71:0f:
2f:86:c7:fa:29:3a:5a:dd:07:bb:f3:65:8f:b8:5f:
88:68:8d:33:64:55:8e:71:20:cd:28:47:9f:4f:53:
58:44:29:00:41:3c:ac:a5:a6:bd:fd:66:34:49:de:
68:63:00:62:56:14:11:45:bf:b9:75:62:21:cb:47:
d7:51:ef:d6:1a:74:38:7a:c9:81:ec:87:86:aa:a5:
fb:cb:e3:bb:87:16:c8:a0:bd:d2:4a:8c:98:fe:33:
32:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CF:36:AB:C2:69:E6:D2:EF:3B:8F:31:C5:82:1D:31:BF:9F:6C:F6
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/C1C604C0C4E011ED93F6CA4BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.60.0/22
113.203.209.0/24
113.203.211.0-113.203.217.255
113.203.219.0/24
113.203.226.0/24
113.203.234.0-113.203.240.255
113.203.243.0-113.203.244.255
180.178.128.0-180.178.144.255
180.178.149.0/24
180.178.160.0/20
180.178.178.0/24
180.178.180.0/22
223.29.224.0/20
IPv6:
2401:4100::/32
Signature Algorithm: sha256WithRSAEncryption
2c:00:8c:d2:9b:1e:82:70:60:8a:fe:2f:b1:59:d9:12:3f:c8:
ee:fd:5a:76:ec:04:76:84:44:bf:58:43:a2:0c:7b:df:84:61:
d2:26:98:f5:95:e5:8f:15:33:8a:72:94:79:0c:91:6b:25:13:
9c:9c:d3:5f:eb:a0:bf:f5:9a:7d:1e:03:cc:3c:f2:3d:51:95:
62:fb:9f:10:88:72:47:65:06:8c:5d:3f:f1:d1:d4:38:c3:a1:
60:2c:a5:fb:21:20:86:f4:82:c4:ac:3e:5c:7c:fa:e4:b7:6a:
34:7f:31:14:e2:55:ae:02:83:5f:a9:3d:49:53:06:e2:c9:97:
36:79:08:f6:fc:4a:6d:c3:dd:fa:0c:81:4a:57:e7:f7:f1:7c:
df:c8:38:3b:42:35:77:05:12:55:98:d3:ae:54:77:a0:95:39:
af:48:82:d7:d6:86:64:4b:dc:8a:60:2d:4e:be:a3:bb:1e:f7:
e4:59:e0:ad:fc:75:25:7b:23:18:6d:a6:be:37:27:af:a5:79:
0f:a4:10:d7:1a:24:55:74:c6:a9:5d:c8:ee:2f:2f:09:75:51:
04:77:64:41:ee:c5:ab:b9:bb:bb:68:bc:28:23:af:59:2e:10:
53:9b:be:a4:c3:5e:4b:10:3f:e0:13:24:9b:b6:c5:82:50:e1:
6b:b6:01:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 06:08:52 2025 by rpki-client