Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/0677E49440A411EBAFF45C70C4F9AE02.roa
File: 0677E49440A411EBAFF45C70C4F9AE02.roa (raw, json)
Hash identifier: LlDnnuV0kHmN9P66UI+20fVU8Dl1YCEBCBp7tRYcbg4=
Subject key identifier: E1:F7:D2:71:6A:2E:1A:8F:BC:0F:07:1D:01:18:47:0C:01:4A:A4:18
Certificate issuer: /CN=A916C128/serialNumber=B5642732265D40BF75CA94A9EC8119211C1B9B32
Certificate serial: 25D1
Authority key identifier: B5:64:27:32:26:5D:40:BF:75:CA:94:A9:EC:81:19:21:1C:1B:9B:32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/0677E49440A411EBAFF45C70C4F9AE02.roa
Signing time: Sat 01 May 2021 04:11:39 +0000
ROA not before: Sat 01 May 2021 04:11:39 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 45177
IP address blocks: 14.1.32.0/19 maxlen: 24
45.65.12.0/22 maxlen: 24
103.9.238.0/23 maxlen: 23
103.9.238.0/24 maxlen: 24
103.11.52.0/24 maxlen: 24
103.11.54.0/24 maxlen: 24
103.12.9.0/24 maxlen: 24
103.13.116.0/22 maxlen: 24
103.15.178.0/24 maxlen: 24
103.230.76.0/22 maxlen: 22
103.241.120.0/22 maxlen: 22
103.248.191.0/24 maxlen: 24
103.255.248.0/24 maxlen: 24
113.197.96.0/22 maxlen: 23
116.93.128.0/20 maxlen: 24
120.136.0.0/21 maxlen: 24
150.107.32.0/22 maxlen: 23
163.47.204.0/22 maxlen: 24
163.53.232.0/22 maxlen: 24
202.74.192.0/19 maxlen: 24
203.211.64.0/18 maxlen: 24
2400:7180:2::/48 maxlen: 48
2400:7180:3::/48 maxlen: 48
2400:7180:9::/48 maxlen: 48
2400:ee80::/32 maxlen: 48
2401:7000::/32 maxlen: 32
2401:7000::/32 maxlen: 64
2402:3500::/32 maxlen: 48
2402:3500::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9681 (0x25d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C128/serialNumber=B5642732265D40BF75CA94A9EC8119211C1B9B32
Validity
Not Before: May 1 04:11:39 2021 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=608cd4fa-7d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:58:64:bf:20:3c:14:c2:1e:ff:b0:11:83:d8:
c7:ec:15:8e:88:ca:4d:42:01:db:42:a9:45:9d:89:
06:bc:15:2f:4e:60:65:89:08:15:9c:53:41:65:81:
b5:58:5a:48:7e:ce:e2:78:15:34:04:65:95:e6:93:
a2:79:c9:8a:4a:7c:95:38:f4:bc:68:63:87:af:52:
a3:ff:27:68:99:23:22:69:fc:f4:51:39:42:9d:40:
45:b5:8c:f9:04:27:36:ee:61:90:76:94:d4:7d:18:
7a:0e:78:ed:dd:2a:1f:5d:79:e4:20:f5:5f:7f:75:
4c:6f:b0:8f:08:bd:b9:d0:eb:17:7c:15:b8:72:5d:
db:28:0b:b1:e0:4b:8f:4c:89:0f:2f:1e:23:6d:7a:
01:ce:48:48:d4:ab:97:cc:40:8a:5d:7a:87:b2:bf:
76:6b:1a:3e:d7:5f:f0:53:77:64:7a:27:9b:df:78:
e1:3e:e2:38:d9:c2:3b:30:aa:25:be:26:43:51:d9:
24:0b:3a:81:6f:e4:9a:f4:4d:4a:d9:35:e4:95:95:
7d:9a:2d:6c:73:9a:9b:74:37:e5:fa:c6:2c:b2:9e:
5b:95:00:a3:1e:e7:db:99:f0:2e:0f:1e:a2:b5:54:
cd:c5:fa:2f:bb:1d:0a:2f:e3:0d:b6:ef:d6:bf:57:
80:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F7:D2:71:6A:2E:1A:8F:BC:0F:07:1D:01:18:47:0C:01:4A:A4:18
X509v3 Authority Key Identifier:
keyid:B5:64:27:32:26:5D:40:BF:75:CA:94:A9:EC:81:19:21:1C:1B:9B:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/0677E49440A411EBAFF45C70C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.1.32.0/19
45.65.12.0/22
103.9.238.0/23
103.11.52.0/24
103.11.54.0/24
103.12.9.0/24
103.13.116.0/22
103.15.178.0/24
103.230.76.0/22
103.241.120.0/22
103.248.191.0/24
103.255.248.0/24
113.197.96.0/22
116.93.128.0/20
120.136.0.0/21
150.107.32.0/22
163.47.204.0/22
163.53.232.0/22
202.74.192.0/19
203.211.64.0/18
IPv6:
2400:7180:2::/47
2400:7180:9::/48
2400:ee80::/32
2401:7000::/32
2402:3500::/32
Signature Algorithm: sha256WithRSAEncryption
54:43:b5:ba:1e:b1:73:3f:05:7f:6e:5f:7c:a9:64:05:55:39:
29:90:40:61:1c:8f:d6:10:30:20:92:59:23:af:79:4b:c4:fd:
70:26:25:bc:c1:e1:d2:e9:94:5c:3b:c7:72:19:c7:2c:c7:37:
6a:60:8e:ea:61:03:da:bf:53:36:bd:ee:b9:94:23:60:3d:c0:
c0:7f:e6:d5:da:b9:a3:fb:67:c3:6a:94:a5:ea:62:ad:3a:63:
df:13:86:61:d1:2b:51:ea:99:54:55:e6:29:ef:4a:85:82:67:
22:1d:01:7d:b5:ca:2f:8e:02:0f:7e:a3:9c:f6:34:e5:a7:f2:
b1:c3:11:a7:8f:02:29:8c:3a:b1:3b:2c:bd:9a:4c:3d:09:3b:
c8:6d:be:a8:a6:d0:e2:56:be:92:13:0e:20:d3:64:1c:6a:5c:
a0:42:38:be:79:fc:0a:90:a4:1c:5c:6f:3e:6b:8d:80:61:29:
30:d0:ed:7b:bd:45:68:29:60:ba:5a:2b:57:1f:85:e2:a9:46:
0d:49:ce:a6:ba:8d:0b:2f:b3:63:de:1e:55:7b:20:66:da:ab:
1e:58:0f:65:e9:5b:06:73:5e:d0:84:91:a5:fd:a3:91:2c:e3:
94:0b:d2:1b:8c:3c:44:02:40:16:66:d5:b8:a3:97:75:10:f2:
97:7c:c3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:20 2024 by rpki-client on console-ams.rpki-client.org