Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0C227A2E8A9111EDA4336377C4F9AE02.roa
File: 0C227A2E8A9111EDA4336377C4F9AE02.roa (raw, json)
Hash identifier: qYWfe7/fumHAaMk7h3tnRHEed/enF8Ms/n4o1LwRZpk=
Subject key identifier: 58:5F:0B:61:D2:CB:09:38:A0:9F:45:9F:E4:76:9B:4D:B8:24:8D:7A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6338
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0C227A2E8A9111EDA4336377C4F9AE02.roa
Signing time: Tue 17 Jan 2023 08:21:38 +0000
ROA not before: Tue 17 Jan 2023 08:21:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 103.53.55.0/24 maxlen: 24
103.54.236.0/24 maxlen: 24
103.71.98.0/24 maxlen: 24
103.162.192.0/23 maxlen: 24
103.166.180.0/24 maxlen: 24
103.167.152.0/23 maxlen: 24
103.175.106.0/23 maxlen: 23
103.181.194.0/24 maxlen: 24
103.233.120.0/24 maxlen: 24
203.78.131.0/24 maxlen: 24
2001:df6:9580::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25400 (0x6338)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jan 17 08:21:38 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63c65a92-b68c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a6:f8:a9:97:29:6d:2d:ee:c2:96:39:54:a2:
c9:57:41:b7:69:97:6c:bf:4a:82:0b:7e:d1:29:99:
2f:b5:24:f6:9b:0f:31:2b:e4:a4:32:c4:d1:42:cc:
76:83:34:6e:6c:76:c7:99:32:de:41:b6:12:60:b1:
b5:a1:12:44:c3:e5:43:4f:c0:6f:f0:03:f6:ce:33:
13:8f:81:39:db:c0:16:f3:cd:46:77:0e:54:bf:1d:
dc:d1:82:c0:8f:d9:94:3d:78:5b:e3:c8:d7:ab:44:
a4:fb:52:84:ad:90:37:f9:b9:ab:04:00:ad:76:f5:
1d:bb:8a:23:3d:5a:dd:f3:63:c9:29:82:f2:e7:d7:
40:36:57:5b:df:22:4f:44:95:2e:3c:c7:13:db:4e:
61:0c:d3:ee:3c:c1:7b:b5:4c:01:55:2a:7c:5c:5b:
a8:b7:b4:91:45:b4:1f:f0:6a:42:e3:e6:91:99:86:
2a:be:c0:f8:66:4f:76:d8:b0:87:4e:a1:bd:d9:0f:
77:be:af:c2:1f:54:db:24:32:a5:a5:cf:96:f1:f8:
f3:ef:b6:fe:0d:3b:b7:13:ac:74:9a:05:ed:ed:48:
51:3d:46:a9:5d:99:67:db:89:ba:05:7e:b4:32:4e:
16:aa:2d:cc:21:aa:3c:91:b8:8b:3b:e3:06:9d:6c:
0e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5F:0B:61:D2:CB:09:38:A0:9F:45:9F:E4:76:9B:4D:B8:24:8D:7A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0C227A2E8A9111EDA4336377C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.53.55.0/24
103.54.236.0/24
103.71.98.0/24
103.162.192.0/23
103.166.180.0/24
103.167.152.0/23
103.175.106.0/23
103.181.194.0/24
103.233.120.0/24
203.78.131.0/24
IPv6:
2001:df6:9580::/48
Signature Algorithm: sha256WithRSAEncryption
5f:8d:d6:8d:78:49:d2:25:ca:21:3a:33:9b:91:22:c0:3e:67:
0b:fd:b0:6c:b4:48:fe:73:a7:44:5f:da:ab:d0:95:9e:2a:cd:
96:8b:27:8c:92:53:55:64:c6:13:ff:e3:94:7a:81:1b:02:04:
f1:4d:0d:43:24:0d:65:c1:2d:44:e5:34:bc:d8:79:7a:c2:53:
c8:06:84:28:9b:16:c2:f2:ad:74:8c:f8:0b:ad:81:c4:b5:4f:
da:4c:ab:8e:23:43:64:f1:67:95:46:eb:8d:19:6d:2a:d7:8a:
78:f6:a0:20:58:2d:9c:38:31:99:97:97:7e:8a:b4:5c:7a:6c:
96:42:ff:28:71:0b:e6:ae:72:4e:ea:c7:49:97:4a:8b:3f:a7:
d7:b2:47:45:1b:fe:b0:31:a1:41:81:d8:69:8d:02:25:88:f4:
ab:f4:65:0e:59:25:ab:0c:d7:9d:55:0b:5a:ee:f1:d8:be:f6:
04:38:0d:d6:0b:2f:7b:41:b5:d6:8a:eb:6e:41:ab:78:09:f2:
55:91:1f:44:56:18:c0:27:55:72:40:84:07:17:0b:a4:4c:16:
dc:25:ad:94:28:eb:2d:dc:cc:65:90:95:95:5f:70:2e:26:aa:
d6:38:42:a1:42:fd:dc:a8:71:59:69:b6:a3:e7:70:05:cc:00:
86:77:ac:0e
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgICYzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwMTE3MDgyMTM4WhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2M2NWE5Mi1iNjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxab4qZcpbS3uwpY5VKLJV0G3aZdsv0qCC37RKZkvtST2mw8xK+SkMsTRQsx2
gzRubHbHmTLeQbYSYLG1oRJEw+VDT8Bv8AP2zjMTj4E528AW881Gdw5Uvx3c0YLA
j9mUPXhb48jXq0Sk+1KErZA3+bmrBACtdvUdu4ojPVrd82PJKYLy59dANldb3yJP
RJUuPMcT205hDNPuPMF7tUwBVSp8XFuot7SRRbQf8GpC4+aRmYYqvsD4Zk922LCH
TqG92Q93vq/CH1TbJDKlpc+W8fjz77b+DTu3E6x0mgXt7UhRPUapXZln24m6BX60
Mk4Wqi3MIao8kbiLO+MGnWwOqQIDAQABo4IC3DCCAtgwHQYDVR0OBBYEFFhfC2HS
ywk4oJ9Fn+R2m024JI16MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMEMyMjdBMkU4
QTkxMTFFREE0MzM2Mzc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwZgYIKwYBBQUHAQcBAf8E
VzBVMEIEAgABMDwDBABnNTcDBABnNuwDBABnR2IDBAFnosADBABnprQDBAFnp5gD
BAFnr2oDBABntcIDBABn6XgDBADLToMwDwQCAAIwCQMHACABDfaVgDANBgkqhkiG
9w0BAQsFAAOCAQEAX43WjXhJ0iXKITozm5EiwD5nC/2wbLRI/nOnRF/aq9CVnirN
losnjJJTVWTGE//jlHqBGwIE8U0NQyQNZcEtROU0vNh5esJTyAaEKJsWwvKtdIz4
C62BxLVP2kyrjiNDZPFnlUbrjRltKteKePagIFgtnDgxmZeXfoq0XHpslkL/KHEL
5q5yTurHSZdKiz+n17JHRRv+sDGhQYHYaY0CJYj0q/RlDlklqwzXnVULWu7x2L72
BDgN1gsve0G11orrbkGreAnyVZEfRFYYwCdVckCEBxcLpEwW3CWtlCjrLdzMZZCV
lV9wLiaq1jhCoUL93KhxWWm2o+dwBcwAhnesDg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:51 2023 by rpki-client on console-fra.rpki-client.org