Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3B4D59FA20C511F08BB0281FC4F9AE02.roa
File: 3B4D59FA20C511F08BB0281FC4F9AE02.roa (raw, json)
Hash identifier: HJt6aA6+om/AiQ/H2PofIbvSBqcRojRHQ9c7ijS3SIA=
Subject key identifier: BB:EF:76:32:CC:FC:36:11:13:AF:4B:00:7E:72:D2:6F:57:32:C5:4E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: B47D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3B4D59FA20C511F08BB0281FC4F9AE02.roa
Signing time: Thu 08 May 2025 16:09:16 +0000
ROA not before: Thu 08 May 2025 16:09:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137145
IP address blocks: 103.139.88.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46205 (0xb47d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:09:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=681cd72c-645b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b0:df:3f:03:6d:1b:fe:4f:49:c7:91:b6:9e:
bb:a0:fe:86:f3:91:03:d1:2a:f8:cf:ae:22:d3:c2:
7c:43:2d:aa:21:d6:66:b5:66:09:90:c2:9c:86:b0:
26:4a:bc:01:ce:bc:f7:bc:0e:db:a8:c1:41:64:c1:
0e:23:c1:ac:51:5d:9b:e0:87:0a:fb:ee:19:23:bd:
96:de:d2:80:23:d1:a9:01:69:37:3b:69:b8:f6:bd:
24:cb:4b:b1:d2:ee:bf:39:1c:02:62:82:4b:e2:41:
8f:f2:64:73:79:56:e1:bf:70:0e:53:be:36:10:51:
8e:2d:4c:c3:61:d6:92:bb:66:95:d0:8b:73:17:7d:
1e:68:12:bb:04:d6:29:21:e3:ca:94:59:ad:63:11:
fd:3c:4e:f2:7d:be:68:b5:e3:9d:7e:f5:b3:b1:5c:
33:82:01:f0:86:f3:3d:38:c4:16:b5:aa:d2:dd:7b:
27:00:50:61:fe:7f:fd:a5:6a:16:04:7c:d2:6a:46:
dc:96:08:3b:7e:69:82:cf:2f:39:93:3a:46:37:94:
c5:ec:1c:f3:d5:ab:c3:69:48:e7:cd:13:5f:15:cd:
fd:1f:3d:75:5c:70:9c:05:78:ba:bd:fe:7c:df:85:
a1:0f:1a:0f:a6:f4:c8:80:b5:3e:e9:74:e2:71:4a:
93:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EF:76:32:CC:FC:36:11:13:AF:4B:00:7E:72:D2:6F:57:32:C5:4E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3B4D59FA20C511F08BB0281FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.88.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:a5:86:14:1e:ee:83:35:e3:d3:3c:09:a4:ed:2a:6f:ad:ba:
f7:ac:09:a4:88:99:05:b7:2a:c3:b7:ea:1c:14:eb:ce:39:4e:
9c:b3:a4:58:92:4a:88:6c:69:38:40:08:ec:1e:9c:2d:ba:30:
80:24:f8:38:0b:dd:98:ac:2b:01:64:95:13:52:c6:0a:c0:f8:
d0:a0:57:5c:aa:db:cd:88:e4:08:b1:78:45:65:8f:ec:ab:68:
4e:77:20:2f:40:f8:2f:97:65:e8:4e:3e:ec:68:f1:84:66:35:
bb:a0:93:08:b2:91:c4:70:8b:e0:14:02:53:1f:6b:9d:4b:6a:
21:9f:7a:09:cf:d8:df:37:c3:e4:28:22:c2:89:a7:e3:60:9c:
a7:d2:a8:e6:19:77:10:65:38:a6:03:de:c9:fa:ec:70:5d:d9:
3d:8d:c4:d3:94:22:00:af:48:94:61:22:28:c0:ae:6c:12:73:
0a:36:77:f8:1d:e8:85:6e:e1:dc:e1:59:a0:0e:56:20:03:21:
3c:9c:22:a1:1d:d5:3e:41:cc:44:1c:ee:36:16:c1:95:6d:48:
7d:f0:8e:b4:79:59:d8:f6:6c:ab:0a:f6:aa:bd:58:90:26:fc:
f2:4d:50:bb:07:a2:eb:7d:bd:b0:b3:b2:05:08:71:30:d7:f8:
55:05:b3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:24:49 2025 by rpki-client