Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/26758100B28711EDA4273924C4F9AE02.roa
File: 26758100B28711EDA4273924C4F9AE02.roa (raw, json)
Hash identifier: Ls56NHtvCJUdqty6mmWwXGhO91r3YQ+hyWgsaGP1u5E=
Subject key identifier: 38:49:3E:4F:D8:68:B1:3E:0F:F5:E8:6B:05:2B:A1:0F:40:89:95:80
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6581
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/26758100B28711EDA4273924C4F9AE02.roa
Signing time: Wed 22 Feb 2023 08:01:45 +0000
ROA not before: Wed 22 Feb 2023 08:01:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56209
IP address blocks: 43.248.36.0/24 maxlen: 24
43.248.37.0/24 maxlen: 24
43.248.38.0/24 maxlen: 24
43.248.39.0/24 maxlen: 24
45.114.80.0/24 maxlen: 24
45.114.81.0/24 maxlen: 24
45.114.82.0/24 maxlen: 24
45.114.83.0/24 maxlen: 24
103.48.32.0/24 maxlen: 24
103.48.33.0/24 maxlen: 24
103.48.34.0/24 maxlen: 24
103.48.35.0/24 maxlen: 24
103.60.208.0/22 maxlen: 24
103.111.232.0/22 maxlen: 24
103.178.46.0/23 maxlen: 24
103.181.34.0/23 maxlen: 24
103.181.126.0/23 maxlen: 24
103.210.36.0/24 maxlen: 24
103.210.37.0/24 maxlen: 24
103.210.38.0/24 maxlen: 24
103.210.39.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25985 (0x6581)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Feb 22 08:01:45 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63f5cbe9-7b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c8:5a:b1:18:e6:f6:97:dc:8f:fd:64:71:99:
c3:60:00:81:0a:78:27:cf:8e:6e:a6:7f:d2:ec:1b:
f9:7d:2c:1d:89:d0:55:25:39:ad:52:a6:3c:c0:64:
79:42:53:62:c5:26:68:99:f0:43:f4:58:08:f8:6b:
23:56:25:0b:0f:c0:aa:73:a2:6a:eb:9a:5e:89:97:
73:58:a6:ac:3c:73:23:99:11:96:70:a5:65:f6:a5:
8c:55:35:20:d0:70:a7:f6:73:29:e8:13:c4:80:5d:
b9:36:05:fa:63:40:90:20:eb:57:0d:f2:57:3b:53:
92:f6:37:0b:bd:a1:bd:13:a9:9f:0d:b4:1a:74:8f:
4b:99:cc:fc:7f:3e:85:ee:0e:b9:b3:e2:99:e2:4e:
cd:de:c7:80:bb:2d:ad:e6:e2:90:d6:cb:2c:76:05:
b8:50:57:f0:c9:30:c8:5f:98:49:41:c2:76:fd:41:
58:d9:61:13:69:6e:c4:03:58:94:e2:af:f2:8c:d5:
8e:3d:43:a0:01:f6:bd:e6:a2:b7:b2:2c:57:4b:d0:
cf:47:ce:30:b6:8a:24:da:e9:6c:28:9c:dc:fd:51:
d4:83:65:97:a3:06:95:5c:14:6f:27:78:9c:68:f3:
81:65:1e:50:43:13:5e:38:24:ee:61:87:d7:34:df:
6f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:49:3E:4F:D8:68:B1:3E:0F:F5:E8:6B:05:2B:A1:0F:40:89:95:80
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/26758100B28711EDA4273924C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.248.36.0/22
45.114.80.0/22
103.48.32.0/22
103.60.208.0/22
103.111.232.0/22
103.178.46.0/23
103.181.34.0/23
103.181.126.0/23
103.210.36.0/22
Signature Algorithm: sha256WithRSAEncryption
92:e3:ee:a0:76:77:2b:05:5e:dd:74:36:d5:65:70:78:38:83:
e2:c1:28:95:16:ae:4f:af:68:ad:6e:f0:6a:63:f6:4d:c1:eb:
3e:e0:c3:b4:7b:78:e1:d4:9d:bc:23:73:8b:bc:4f:59:34:ea:
b9:6e:64:58:4c:ae:6f:97:f8:55:7b:e1:36:85:f5:75:2d:e1:
89:44:ed:b7:96:d6:c1:62:54:32:65:ca:8d:3a:69:50:2f:0f:
b5:0e:13:8a:5b:5f:be:6a:7d:50:79:99:57:16:53:44:79:26:
c4:73:96:dd:c7:4e:41:cf:3c:38:80:2b:7c:37:e7:c9:aa:fb:
d3:da:6e:38:e4:8d:a9:75:21:1d:32:5f:94:a7:fc:56:e0:48:
f9:d6:ba:ac:3d:a6:92:87:93:fd:51:2e:0d:b3:da:02:1c:03:
65:1b:fe:e6:49:2b:b7:9d:c4:16:9f:a6:2f:af:b1:98:12:d9:
13:fc:e7:6f:f2:7c:61:16:49:49:cf:42:68:29:db:b3:79:d6:
0d:98:2e:27:f9:74:f1:95:c7:5c:c5:92:92:00:29:a4:3a:7b:
4a:f4:7e:ee:85:36:f8:04:24:da:71:84:db:bc:06:8c:81:76:
bb:f2:b5:56:f0:fe:43:97:c7:b5:6d:c8:f9:d7:39:30:02:46:
d5:f2:f3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:51 2023 by rpki-client on console-fra.rpki-client.org