Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/654062D4D1B311EC90FF6813C4F9AE02.roa
File: 654062D4D1B311EC90FF6813C4F9AE02.roa (raw, json)
Hash identifier: zDhKT6DYn9J/yQrYDKaTz2mqJwka7KFldJmo54jAKv0=
Subject key identifier: 81:82:D2:32:8B:27:71:02:17:95:84:94:4D:A9:96:9F:07:8E:E3:81
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 4E62
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/654062D4D1B311EC90FF6813C4F9AE02.roa
Signing time: Thu 12 May 2022 05:21:37 +0000
ROA not before: Thu 12 May 2022 05:21:37 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 141875
IP address blocks: 45.125.252.0/22 maxlen: 22
45.125.252.0/24 maxlen: 24
45.125.253.0/24 maxlen: 24
45.125.254.0/24 maxlen: 24
45.125.255.0/24 maxlen: 24
103.162.192.0/23 maxlen: 24
103.165.72.0/23 maxlen: 24
103.165.76.0/23 maxlen: 24
103.165.88.0/23 maxlen: 24
103.169.242.0/23 maxlen: 24
103.217.82.0/24 maxlen: 24
103.217.83.0/24 maxlen: 24
103.241.132.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20066 (0x4e62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 12 05:21:37 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=627c9961-ca6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:03:18:e9:47:6a:b3:04:41:6a:67:61:4d:07:
71:72:1c:b6:51:45:3a:be:7e:ca:33:93:ea:f2:07:
59:b9:9c:be:37:86:9b:41:e9:ea:a5:ef:f7:81:43:
64:ea:be:4d:52:77:fd:2b:9a:dd:f5:3d:f0:f4:be:
90:33:cb:31:9f:d6:d5:97:bf:23:7f:45:53:a2:87:
7b:d0:8c:e3:87:69:3f:ae:de:d9:db:67:3c:7a:89:
f3:a9:78:40:f2:ec:7a:87:74:12:6c:42:60:01:74:
90:c0:60:b2:d4:97:5e:e0:fc:79:d5:29:c4:bf:d0:
71:3a:c4:98:24:d6:70:94:e4:4c:05:9e:fd:fe:f4:
40:a5:f6:09:4e:00:92:cc:cd:ec:0d:55:8d:a0:36:
d5:35:83:9b:70:ba:5a:0b:9d:37:18:79:55:b1:b1:
24:fd:fd:6e:8f:d7:54:ca:4f:77:60:cd:c2:39:e3:
cb:3b:b8:47:0d:b8:34:75:87:3a:f6:31:b2:42:ca:
1d:22:e8:45:db:eb:0b:b7:7c:78:4e:8b:70:45:e8:
da:c7:ea:88:83:05:48:1a:6f:5b:d5:fe:dd:33:48:
f1:a9:89:aa:1d:9b:23:d2:8e:81:0a:a5:d3:67:59:
80:5b:8b:dc:d5:7c:62:a0:e5:e3:96:99:d6:b1:ad:
af:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:82:D2:32:8B:27:71:02:17:95:84:94:4D:A9:96:9F:07:8E:E3:81
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/654062D4D1B311EC90FF6813C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.125.252.0/22
103.162.192.0/23
103.165.72.0/23
103.165.76.0/23
103.165.88.0/23
103.169.242.0/23
103.217.82.0/23
103.241.132.0/24
Signature Algorithm: sha256WithRSAEncryption
20:ea:b0:1a:35:b1:98:ab:b0:6e:c1:0a:b9:97:0c:6b:45:88:
83:07:63:21:c2:7c:37:11:74:a2:36:5f:fc:37:fc:0f:0e:5f:
fc:e3:48:69:da:1c:12:3c:86:db:97:ae:5c:04:55:61:f5:99:
35:a7:bb:76:42:06:81:45:58:f9:06:33:51:23:e2:cd:df:6f:
a1:03:81:95:95:f6:1d:d0:ec:85:b9:00:11:9e:7f:f7:8f:8e:
92:05:b8:33:c7:e6:84:ed:c8:c7:43:d7:a6:a5:23:06:02:39:
f7:2c:af:33:6d:a2:65:2a:8d:1b:97:d7:21:d7:fe:24:6a:b3:
87:a7:a2:87:ee:82:cf:36:db:e6:cd:93:7e:1c:86:d7:04:8a:
3f:c4:c2:7f:48:88:fb:cf:9f:8a:0f:9b:ed:55:db:7c:0f:3c:
85:81:6e:99:7e:96:0b:ce:f8:93:e7:2b:36:26:8a:67:0d:dd:
e8:02:09:bb:c7:0b:2a:42:9f:d6:1d:33:2d:88:ed:41:12:93:
9c:5f:b1:91:96:83:41:18:15:5c:6a:fe:41:c6:e8:ae:61:63:
36:b6:e8:88:58:3f:78:75:86:18:e5:38:b3:f9:74:8d:5c:6e:
86:9e:7a:32:69:5c:47:22:64:76:82:6a:94:e6:23:27:d6:ad:
e5:2a:55:18
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:52 2023 by rpki-client on console-ams.rpki-client.org