Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0FAADB92EC6B11EC8F12E311C4F9AE02.roa
File: 0FAADB92EC6B11EC8F12E311C4F9AE02.roa (raw, json)
Hash identifier: 9xoSLrxwCKx8XZWWVbVXvhnSwOeTrGY/mns8voRpx4g=
Subject key identifier: 07:3A:34:9B:6D:15:91:89:D3:52:47:12:56:A1:4B:D9:29:68:07:29
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5746
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0FAADB92EC6B11EC8F12E311C4F9AE02.roa
Signing time: Wed 15 Jun 2022 05:21:51 +0000
ROA not before: Wed 15 Jun 2022 05:21:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 103.18.158.0/24 maxlen: 24
103.18.159.0/24 maxlen: 24
103.110.248.0/22 maxlen: 24
103.162.192.0/23 maxlen: 24
103.163.14.0/23 maxlen: 24
103.165.72.0/23 maxlen: 24
103.165.76.0/23 maxlen: 24
103.165.88.0/23 maxlen: 24
103.166.180.0/24 maxlen: 24
103.167.152.0/23 maxlen: 24
103.167.238.0/23 maxlen: 24
103.170.38.0/23 maxlen: 24
103.178.166.0/23 maxlen: 24
103.180.176.0/23 maxlen: 24
103.181.4.0/23 maxlen: 24
103.181.84.0/23 maxlen: 24
103.181.86.0/23 maxlen: 24
103.181.151.0/24 maxlen: 24
103.181.194.0/24 maxlen: 24
103.189.82.0/23 maxlen: 24
103.217.82.0/24 maxlen: 24
103.217.83.0/24 maxlen: 24
103.225.180.0/23 maxlen: 24
103.225.182.0/24 maxlen: 24
103.225.183.0/24 maxlen: 24
103.229.210.0/24 maxlen: 24
103.229.211.0/24 maxlen: 24
103.241.135.0/24 maxlen: 24
2001:df6:9580::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22342 (0x5746)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 15 05:21:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62a96c6f-d045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:de:6d:48:44:fc:e8:e7:99:31:7e:db:e3:75:
4c:ca:b9:e0:cf:8d:ce:85:ad:d0:53:74:8e:86:10:
49:16:7e:71:55:60:28:cc:8f:01:20:87:43:5c:f8:
e1:c1:17:bf:d0:f5:2b:95:30:d3:17:39:5b:1c:ab:
d2:30:05:5e:88:fa:6b:73:27:76:01:6f:9d:17:04:
e5:20:5b:ab:9c:71:e7:d5:5a:e7:7f:93:9d:92:f6:
4a:b3:32:d8:27:5f:3c:d1:92:f9:20:35:91:76:24:
85:af:7d:74:10:1e:c5:dc:10:de:06:ca:46:71:1d:
3c:4e:a4:e3:10:fe:e2:7d:7d:42:0e:b4:74:1e:5d:
f1:d4:ee:63:cd:31:ca:2c:5b:b0:9a:14:01:60:54:
27:43:c5:ba:11:70:07:ee:f2:71:4b:73:fe:66:25:
d0:60:2d:69:f4:f7:f0:be:34:f9:7e:45:c3:58:a7:
af:c2:6a:a1:7f:87:ee:ee:4b:2d:3c:68:cd:89:5e:
ac:16:35:ab:28:cd:ce:a4:98:9e:c2:1a:c9:bf:35:
f0:c3:4d:2b:e9:c9:5e:f2:aa:18:de:fa:2b:c1:78:
2e:4e:60:4c:93:18:59:b2:c1:4b:0e:36:ea:e5:f3:
f9:2d:c5:07:b8:8e:ca:79:5f:e8:08:9d:7b:4d:ec:
90:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3A:34:9B:6D:15:91:89:D3:52:47:12:56:A1:4B:D9:29:68:07:29
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0FAADB92EC6B11EC8F12E311C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.18.158.0/23
103.110.248.0/22
103.162.192.0/23
103.163.14.0/23
103.165.72.0/23
103.165.76.0/23
103.165.88.0/23
103.166.180.0/24
103.167.152.0/23
103.167.238.0/23
103.170.38.0/23
103.178.166.0/23
103.180.176.0/23
103.181.4.0/23
103.181.84.0/22
103.181.151.0/24
103.181.194.0/24
103.189.82.0/23
103.217.82.0/23
103.225.180.0/22
103.229.210.0/23
103.241.135.0/24
IPv6:
2001:df6:9580::/48
Signature Algorithm: sha256WithRSAEncryption
81:70:6b:bd:90:96:84:aa:6d:1c:ce:77:58:6a:80:35:c6:59:
d8:14:6a:bb:88:fb:cf:a6:63:b3:e5:13:a8:63:cd:8c:14:2e:
cf:28:74:85:27:23:10:bf:2a:25:20:45:63:fa:ce:51:bf:eb:
4b:a7:10:ba:f4:8e:33:e9:2d:d5:7d:5e:c8:ce:2e:48:3c:a5:
03:9e:22:47:9c:dc:76:d6:ed:08:b8:b0:bc:eb:63:9f:95:37:
ae:06:90:6a:57:f9:09:e5:07:99:9c:40:5d:a1:c6:2e:07:9b:
92:bc:45:60:9b:f6:84:1f:2f:a7:f7:54:8c:e1:b6:0e:15:81:
47:bb:59:3e:2f:15:71:e2:2b:6e:ee:6a:4c:02:a4:61:03:bb:
fb:24:d9:3b:b6:c2:7f:19:97:f1:7a:1e:f5:99:33:7e:e2:fc:
70:a6:d6:cf:c2:31:07:a5:82:a3:8f:cf:b2:0d:e5:25:94:f4:
fc:4e:66:fd:21:1b:73:f1:e8:ba:05:48:05:cf:5c:be:8f:dc:
90:10:d8:4c:0e:fe:f8:cf:96:15:89:4b:b7:35:d9:5a:f5:fb:
e8:79:b0:2f:11:01:d7:29:a9:b8:81:b7:ec:82:e0:d4:49:a7:
45:8c:05:dd:07:f6:f3:25:3d:f6:0b:82:82:16:03:50:e4:12:
5e:9a:d0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:47 2023 by rpki-client on console-ams.rpki-client.org