Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/467000E2F0EC11EB9D0B176AC4F9AE02.roa
File: 467000E2F0EC11EB9D0B176AC4F9AE02.roa (raw, json)
Hash identifier: bsDCPG8aREBXpusasT9ofxedS7E9bifJOBdOINYcX7w=
Subject key identifier: BB:16:68:7C:44:71:10:6B:2C:97:47:5F:09:6D:C1:DF:FB:7B:61:ED
Certificate issuer: /CN=A916C128/serialNumber=B5642732265D40BF75CA94A9EC8119211C1B9B32
Certificate serial: 2918
Authority key identifier: B5:64:27:32:26:5D:40:BF:75:CA:94:A9:EC:81:19:21:1C:1B:9B:32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/467000E2F0EC11EB9D0B176AC4F9AE02.roa
Signing time: Tue 07 Jun 2022 04:22:28 +0000
ROA not before: Tue 07 Jun 2022 04:22:28 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 45177
IP address blocks: 14.1.32.0/19 maxlen: 24
45.65.12.0/22 maxlen: 24
103.9.238.0/23 maxlen: 23
103.9.238.0/24 maxlen: 24
103.11.52.0/24 maxlen: 24
103.11.54.0/24 maxlen: 24
103.12.9.0/24 maxlen: 24
103.13.116.0/22 maxlen: 24
103.15.178.0/24 maxlen: 24
103.230.76.0/22 maxlen: 22
103.241.120.0/22 maxlen: 22
103.248.191.0/24 maxlen: 24
103.255.248.0/24 maxlen: 24
113.197.96.0/22 maxlen: 23
116.93.128.0/20 maxlen: 24
120.136.0.0/21 maxlen: 24
150.107.32.0/22 maxlen: 23
163.47.204.0/22 maxlen: 24
163.53.232.0/22 maxlen: 24
202.74.192.0/19 maxlen: 24
203.211.64.0/18 maxlen: 24
2400:7180:2::/48 maxlen: 48
2400:7180:3::/48 maxlen: 48
2400:7180:9::/48 maxlen: 48
2400:ee80::/32 maxlen: 48
2401:7000::/32 maxlen: 32
2401:7000::/32 maxlen: 64
2402:3500::/32 maxlen: 48
2402:3500::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10520 (0x2918)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C128/serialNumber=B5642732265D40BF75CA94A9EC8119211C1B9B32
Validity
Not Before: Jun 7 04:22:28 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=629ed283-1074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a2:5f:bf:ed:8e:8e:c9:b6:05:4f:b4:20:d1:
1d:5d:51:ec:7d:56:30:61:d4:51:c6:8d:10:f1:08:
36:b2:ba:61:e0:3f:ab:47:0a:f7:a8:66:f4:c2:23:
1b:66:5e:c9:17:1d:46:bd:1d:c5:71:d6:76:23:c7:
3c:b3:b3:3e:b0:15:d7:8b:4b:43:78:34:83:73:95:
cf:dc:2c:26:bb:10:5c:a4:53:d1:76:f1:79:cb:23:
17:1b:8c:8e:e9:a0:fa:ef:bf:73:d1:15:bc:62:d2:
12:35:14:45:ff:18:c2:9a:5d:9b:d5:3e:a3:74:20:
51:a6:c0:27:c1:9f:ca:ad:45:f1:93:30:c3:4b:da:
6b:35:65:61:43:cf:92:f8:8b:5e:5a:fc:26:71:ae:
fc:33:7b:bd:9d:39:9e:8e:2c:6a:2d:dd:4e:6d:e3:
77:86:b4:fb:ce:16:1b:89:42:52:87:d0:e6:54:f0:
3d:15:ea:b1:65:cb:60:12:c9:c5:78:34:7c:57:92:
df:51:81:24:48:bc:9a:be:1b:60:f1:ab:a6:d9:1c:
3e:c5:83:35:b5:4b:a6:7c:d6:f1:cd:be:b7:35:84:
f1:9a:3e:66:8a:b2:af:3b:03:63:9b:1f:03:c9:b1:
79:a3:ce:2b:65:42:91:6b:f3:43:81:b7:5b:cc:23:
30:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:16:68:7C:44:71:10:6B:2C:97:47:5F:09:6D:C1:DF:FB:7B:61:ED
X509v3 Authority Key Identifier:
keyid:B5:64:27:32:26:5D:40:BF:75:CA:94:A9:EC:81:19:21:1C:1B:9B:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/467000E2F0EC11EB9D0B176AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.1.32.0/19
45.65.12.0/22
103.9.238.0/23
103.11.52.0/24
103.11.54.0/24
103.12.9.0/24
103.13.116.0/22
103.15.178.0/24
103.230.76.0/22
103.241.120.0/22
103.248.191.0/24
103.255.248.0/24
113.197.96.0/22
116.93.128.0/20
120.136.0.0/21
150.107.32.0/22
163.47.204.0/22
163.53.232.0/22
202.74.192.0/19
203.211.64.0/18
IPv6:
2400:7180:2::/47
2400:7180:9::/48
2400:ee80::/32
2401:7000::/32
2402:3500::/32
Signature Algorithm: sha256WithRSAEncryption
a4:83:b0:5b:98:79:90:ef:66:e0:62:e0:2e:8f:2c:8c:16:67:
a4:b8:f8:ba:1e:79:19:11:55:2c:df:f7:99:02:be:26:c2:88:
52:9d:60:3e:38:c3:69:d8:e4:88:5a:fc:79:56:5c:43:4b:35:
ba:fd:8f:65:d6:7a:9b:3d:3c:f1:c2:28:95:65:c4:1f:21:d1:
67:83:19:ef:03:96:ee:bf:49:c6:e4:ea:53:65:74:e8:09:1e:
78:ee:f0:c0:2e:6c:28:36:45:07:ec:95:bb:11:8f:5a:a0:68:
f6:74:e2:5c:93:29:29:49:6b:85:36:8d:b6:ca:c1:e0:9a:19:
cc:84:37:4a:2e:1a:0a:c9:f2:da:2b:20:1d:15:15:14:8f:3e:
47:68:4c:59:88:49:40:a1:2b:d4:0f:09:0b:f0:9a:82:b0:e1:
5d:da:75:e9:b7:90:fc:04:40:03:d7:52:b8:5f:bc:23:1e:33:
96:f4:24:f0:7c:e7:df:7d:2c:c5:28:04:67:57:57:e2:06:61:
10:2c:dc:5a:ef:39:19:b3:21:c7:b7:24:60:fa:fb:c6:af:93:
60:2f:44:98:d3:75:52:87:fb:c0:0c:49:b7:50:89:11:7f:21:
56:c9:83:60:f2:54:ba:9a:10:66:47:be:44:6f:a3:73:d6:77:
2d:08:4d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:20 2024 by rpki-client on console-ams.rpki-client.org