Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0E5F83C084DB11ECB1E0D46AC4F9AE02.roa
File: 0E5F83C084DB11ECB1E0D46AC4F9AE02.roa (raw, json)
Hash identifier: XTOzzaT1XGQUCozn71IB3tsNEtM5MPTvuHb6Mn0q4wc=
Subject key identifier: F5:7D:A6:11:BF:FB:71:BC:13:70:06:52:79:2E:2C:E8:BB:70:57:9D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 49E5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0E5F83C084DB11ECB1E0D46AC4F9AE02.roa
Signing time: Thu 10 Mar 2022 09:01:46 +0000
ROA not before: Thu 10 Mar 2022 09:01:46 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 137166
IP address blocks: 103.87.164.0/22 maxlen: 22
103.87.164.0/24 maxlen: 24
103.87.165.0/24 maxlen: 24
103.87.166.0/24 maxlen: 24
103.87.167.0/24 maxlen: 24
103.120.238.0/24 maxlen: 24
103.120.252.0/24 maxlen: 24
103.120.253.0/24 maxlen: 24
103.120.254.0/24 maxlen: 24
103.120.255.0/24 maxlen: 24
103.135.61.0/24 maxlen: 24
103.135.62.0/24 maxlen: 24
103.135.63.0/24 maxlen: 24
103.158.138.0/23 maxlen: 24
103.172.94.0/23 maxlen: 24
103.198.96.0/22 maxlen: 22
103.198.96.0/24 maxlen: 24
103.198.97.0/24 maxlen: 24
103.198.98.0/24 maxlen: 24
103.198.99.0/24 maxlen: 24
103.251.48.0/22 maxlen: 24
150.242.204.0/22 maxlen: 24
2001:df7:6a80::/48 maxlen: 48
2402:7f40::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18917 (0x49e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Mar 10 09:01:46 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=6229be79-0522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:01:02:e7:a3:cd:32:d9:d5:bc:c9:04:3f:6e:
7f:bf:f5:71:3e:e8:23:9b:76:4b:4a:70:8b:82:3f:
60:02:d5:c9:05:e6:e4:c8:8e:8c:f4:be:66:60:7e:
e9:ea:46:18:2e:82:2c:b7:61:24:95:49:39:92:34:
51:72:47:34:e8:53:93:91:d2:82:14:0d:e9:ad:75:
79:81:46:8a:20:64:06:6a:35:72:1c:2a:fb:05:ae:
dd:46:e3:e5:cd:76:18:a5:2c:6d:3d:12:fc:7b:15:
94:99:40:5c:4f:aa:a0:9b:3c:b4:33:d7:fe:c5:e0:
da:5e:8b:d8:78:55:e3:ac:fe:cd:ed:5d:73:81:57:
53:48:ed:85:1a:34:c1:87:ae:4e:b3:ed:3f:42:c3:
77:6a:89:5b:49:d5:3c:e4:e3:96:63:9a:7f:58:1f:
da:18:ca:5e:75:eb:28:c6:8c:3c:9e:ce:a7:cc:8b:
87:6c:90:c4:cd:32:37:2c:65:f8:8d:69:34:f6:d3:
c5:80:76:0a:62:68:ff:1b:61:c0:97:08:de:51:35:
00:34:af:9a:9a:80:09:57:f3:d3:53:6b:bd:3c:cf:
ba:f0:0e:01:0d:a3:77:55:d5:3a:5a:d7:ea:aa:12:
b0:54:36:76:b0:c2:2e:2b:4b:e2:b4:60:ff:7d:67:
8f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7D:A6:11:BF:FB:71:BC:13:70:06:52:79:2E:2C:E8:BB:70:57:9D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0E5F83C084DB11ECB1E0D46AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.87.164.0/22
103.120.238.0/24
103.120.252.0/22
103.135.61.0-103.135.63.255
103.158.138.0/23
103.172.94.0/23
103.198.96.0/22
103.251.48.0/22
150.242.204.0/22
IPv6:
2001:df7:6a80::/48
2402:7f40::/32
Signature Algorithm: sha256WithRSAEncryption
10:c9:ef:50:81:9a:56:da:d1:59:f8:37:66:f4:e3:b4:0c:ec:
cb:ba:15:90:32:f2:e5:78:4c:bf:16:4d:37:3a:63:86:e6:50:
49:73:31:ad:cd:56:67:b2:33:12:e9:36:06:6b:a1:a9:03:b8:
da:d1:ac:4d:76:74:64:e5:6b:09:d1:f5:e3:29:f6:d2:71:18:
0b:f7:d6:d5:c7:77:c6:26:76:2c:84:42:aa:44:31:04:f6:a7:
39:94:8d:2f:6c:44:73:8d:26:59:e1:50:22:33:27:45:45:d0:
7b:cf:d9:60:57:9c:5e:bf:d3:59:46:d1:7c:52:2c:b7:a3:79:
12:42:20:14:43:97:c8:1b:8a:22:23:36:a8:58:94:3a:e8:01:
2d:27:93:d5:98:7b:78:89:75:d9:53:ee:09:31:f6:6e:5e:a9:
94:dc:95:56:fb:a5:05:f6:ad:14:66:04:d8:30:f6:3b:26:3c:
cb:25:8c:6c:cb:95:02:d8:90:88:17:da:b7:8d:c0:c6:c8:7f:
57:6c:5c:4d:c8:dc:d8:e5:50:9b:b8:ef:8d:99:b8:7e:d8:d2:
06:b7:7d:a0:46:10:10:f8:f1:cb:3e:1b:4f:8e:c9:ee:22:1d:
35:87:fa:a4:f3:17:e4:65:34:0b:a5:4f:80:2e:dd:5a:84:9b:
7a:da:b0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:51 2023 by rpki-client on console-fra.rpki-client.org