Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/16CA19CAED5911EDAD131C0AC4F9AE02.roa
File: 16CA19CAED5911EDAD131C0AC4F9AE02.roa (raw, json)
Hash identifier: rLdaQoBvzHu2ZbG8nnkt76yW/zuApukO5Egi8DwJk5g=
Subject key identifier: A8:D9:CC:35:B1:C3:B7:34:E1:83:1B:A7:14:C3:1A:4A:2F:C9:5B:30
Certificate issuer: /CN=A9111318/serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64
Certificate serial: 3397
Authority key identifier: 80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/16CA19CAED5911EDAD131C0AC4F9AE02.roa
Signing time: Mon 08 May 2023 04:30:41 +0000
ROA not before: Mon 08 May 2023 04:30:41 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 38022
IP address blocks: 163.7.128.0/17 maxlen: 17
163.7.129.0/24 maxlen: 24
163.7.134.0/24 maxlen: 24
163.7.135.0/24 maxlen: 24
163.7.138.0/24 maxlen: 24
163.7.139.0/24 maxlen: 24
163.7.143.0/24 maxlen: 24
163.7.144.0/24 maxlen: 24
163.7.160.0/20 maxlen: 20
163.7.176.0/22 maxlen: 22
163.7.176.0/24 maxlen: 24
163.7.177.0/24 maxlen: 24
163.7.178.0/24 maxlen: 24
163.7.179.0/24 maxlen: 24
210.7.32.0/20 maxlen: 20
2404:138::/32 maxlen: 32
2404:138:204::/48 maxlen: 48
2404:138:205::/48 maxlen: 48
2404:138:206::/48 maxlen: 48
2404:138:207::/48 maxlen: 48
2404:138:1306::/48 maxlen: 48
2404:139::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13207 (0x3397)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111318/serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64
Validity
Not Before: May 8 04:30:41 2023 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=64587af1-c104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f1:03:61:7d:dd:a1:e0:7a:44:25:0e:71:4c:
55:8b:97:be:e6:8b:cb:11:bd:7f:24:cf:d1:83:59:
5a:6f:54:76:4c:6f:7d:80:aa:36:4c:9b:f4:24:1d:
41:4c:12:46:50:a4:c6:60:ca:65:f5:16:d2:31:61:
ed:26:b5:31:0e:dd:27:7e:9e:0f:16:a6:33:6e:05:
8c:b4:09:50:c0:fd:49:cd:61:96:0c:d9:c8:c2:91:
17:03:ee:f0:eb:00:84:b2:e4:51:aa:71:26:16:75:
35:12:ea:05:e8:95:34:d5:4e:7f:d6:3d:0f:8d:22:
32:dc:f9:82:8e:aa:3b:3c:55:ce:02:5a:00:ab:d4:
3e:cb:5e:d9:c7:f7:88:2c:d7:e9:fe:e3:8d:69:84:
67:20:14:35:58:c5:46:b8:1b:48:6b:c0:13:1a:76:
a2:c6:18:ce:96:1f:3a:95:18:4a:0a:8e:70:1f:b6:
33:95:2e:fe:59:41:65:7f:c1:2a:c4:b5:e5:a9:c1:
78:2e:54:91:da:13:5a:0c:7a:d4:79:fd:42:8e:ab:
c2:10:53:4f:7e:7c:03:78:70:20:4a:4e:d5:83:74:
d1:26:3e:fa:30:ac:ab:d5:08:8a:d8:8d:2a:f0:9b:
8a:0d:39:86:a9:d9:32:43:49:85:7d:4e:f5:47:fa:
0a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D9:CC:35:B1:C3:B7:34:E1:83:1B:A7:14:C3:1A:4A:2F:C9:5B:30
X509v3 Authority Key Identifier:
keyid:80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/16CA19CAED5911EDAD131C0AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.7.128.0/17
210.7.32.0/20
IPv6:
2404:138::/31
Signature Algorithm: sha256WithRSAEncryption
06:8b:4e:74:96:1e:9a:5f:62:8d:8e:15:80:10:8a:a7:bc:b4:
c1:40:b4:94:b4:53:ed:35:ff:ff:53:fa:88:e9:2d:9e:4b:77:
21:08:e1:3b:21:f9:d3:b3:90:b7:f1:e6:4f:52:e2:78:17:b6:
f7:85:cf:0c:d4:9e:2e:d1:35:da:4b:67:a4:3a:bf:c8:ad:10:
40:75:bc:21:b9:67:00:34:9f:c2:14:d9:dc:8b:5e:eb:de:90:
6f:98:96:6a:4e:97:c9:63:c3:c9:72:a2:d1:e2:ef:1b:98:d9:
8b:f0:8a:5f:1a:42:ca:88:ce:00:f8:a6:20:dd:70:30:34:a5:
77:e9:dd:a9:06:f2:04:7f:42:7d:81:a1:2d:e6:7e:0c:e6:9c:
70:2c:ec:39:87:82:02:f3:97:ec:25:32:48:46:22:5e:a3:2a:
b3:0a:8e:aa:54:fa:ff:aa:4b:6e:e8:29:e2:73:13:88:a6:87:
f7:3b:4f:04:03:fb:d4:20:fd:6c:dd:5c:ed:e8:3f:03:fc:7b:
6b:36:02:83:8d:49:37:f4:dc:a0:6b:f8:39:09:ef:75:0b:2e:
05:b9:2c:ba:ce:6d:76:43:53:e2:7d:80:4a:db:98:b8:78:30:
77:19:41:c0:7f:67:d5:d4:18:2a:2e:bf:e9:61:df:82:e7:c5:
44:2d:81:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:35 2023 by rpki-client on console-fra.rpki-client.org