Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/69F15B78211711ECB18EF521C4F9AE02.roa
File: 69F15B78211711ECB18EF521C4F9AE02.roa (raw, json)
Hash identifier: c+eH4Ly07UTql8vuCDNcnUiXPd+eIAQDf2Oa1zt3RwQ=
Subject key identifier: 59:7A:88:5F:8C:79:39:86:82:95:DE:E4:0F:19:04:EC:7F:52:A0:77
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 438A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/69F15B78211711ECB18EF521C4F9AE02.roa
Signing time: Wed 15 Dec 2021 08:31:28 +0000
ROA not before: Wed 15 Dec 2021 08:31:28 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 133676
IP address blocks: 43.230.196.0/22 maxlen: 24
43.240.4.0/24 maxlen: 24
43.240.6.0/24 maxlen: 24
43.240.7.0/24 maxlen: 24
45.64.8.0/24 maxlen: 24
45.64.10.0/24 maxlen: 24
45.64.11.0/24 maxlen: 24
45.248.24.0/24 maxlen: 24
45.248.26.0/23 maxlen: 24
103.42.88.0/22 maxlen: 24
103.47.12.0/23 maxlen: 24
103.47.15.0/24 maxlen: 24
103.47.56.0/22 maxlen: 24
103.47.74.0/23 maxlen: 24
103.47.127.0/24 maxlen: 24
103.47.172.0/23 maxlen: 24
103.47.174.0/23 maxlen: 24
103.49.232.0/23 maxlen: 24
103.101.116.0/24 maxlen: 24
103.101.118.0/23 maxlen: 24
103.177.202.0/23 maxlen: 24
103.204.168.0/22 maxlen: 24
103.225.205.0/24 maxlen: 24
103.225.206.0/23 maxlen: 24
103.248.121.0/24 maxlen: 24
139.5.16.0/23 maxlen: 24
139.5.18.0/23 maxlen: 24
2405:5540::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17290 (0x438a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Dec 15 08:31:28 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=61b9a7e0-34cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ba:74:6e:95:7e:8c:d3:16:14:d5:8a:cd:d7:
09:72:ec:a8:7e:b0:b4:01:bc:cf:b5:52:9a:42:4a:
9e:72:e8:37:9c:ab:a4:b0:e5:04:bb:d1:18:fd:36:
d2:b2:0f:8a:99:ae:80:73:ad:aa:db:7b:0b:23:28:
29:eb:66:8b:1d:b3:11:28:8d:58:26:41:3e:d1:ea:
cd:f7:37:65:3f:73:43:4c:56:71:71:28:fe:4b:2e:
5d:97:51:e7:43:c6:89:c5:4e:fb:a1:ee:0b:ed:73:
13:ef:f9:4c:4c:35:bd:31:87:11:ce:4b:9c:a8:d5:
3f:9f:46:d6:77:02:9d:a7:fd:a7:55:f5:bf:18:ee:
e5:1d:fc:2d:2c:aa:db:84:ab:25:9e:12:60:04:09:
7d:12:b8:f0:7a:bb:b3:ed:41:48:e5:8b:76:c3:7b:
97:95:11:23:27:f7:a2:e3:a1:7e:bb:6d:3e:f0:a3:
7a:1a:39:ba:62:70:1c:f5:f6:ec:76:05:e1:91:ff:
a9:d1:70:be:91:a9:d6:4b:de:7b:09:53:4b:8a:c1:
53:ca:83:b7:17:4b:aa:ed:ca:5f:5f:ee:54:6e:1c:
af:9a:c1:3c:0c:e4:d7:34:f6:c5:d9:44:fc:66:dc:
af:8c:9e:22:6b:4f:3a:85:5f:05:58:d6:ec:f1:43:
71:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7A:88:5F:8C:79:39:86:82:95:DE:E4:0F:19:04:EC:7F:52:A0:77
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/69F15B78211711ECB18EF521C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.230.196.0/22
43.240.4.0/24
43.240.6.0/23
45.64.8.0/24
45.64.10.0/23
45.248.24.0/24
45.248.26.0/23
103.42.88.0/22
103.47.12.0/23
103.47.15.0/24
103.47.56.0/22
103.47.74.0/23
103.47.127.0/24
103.47.172.0/22
103.49.232.0/23
103.101.116.0/24
103.101.118.0/23
103.177.202.0/23
103.204.168.0/22
103.225.205.0-103.225.207.255
103.248.121.0/24
139.5.16.0/22
IPv6:
2405:5540::/32
Signature Algorithm: sha256WithRSAEncryption
43:fc:27:1a:bb:2b:a6:a4:4f:12:db:f8:67:48:b4:69:7b:4d:
51:4d:45:6f:42:81:00:d2:ed:b2:e8:1a:72:14:92:6e:b8:d1:
d1:22:d7:9b:25:7a:37:86:5e:92:5a:a0:c2:d2:4c:03:83:23:
e2:3b:fa:47:78:3f:14:7c:02:97:b2:63:0f:ba:16:79:29:37:
31:7a:58:de:31:f7:dc:7d:00:16:d1:bf:03:9e:d0:ae:b4:9c:
0e:d8:0a:a9:aa:ac:38:13:2b:15:77:55:95:55:6c:10:72:06:
45:d7:b0:8b:ec:94:8c:2b:a2:f6:81:19:56:55:95:38:4c:23:
63:c6:74:53:ba:e5:38:10:d3:49:f4:a8:73:53:58:42:84:b0:
83:29:23:88:b9:a5:33:3e:42:02:58:5c:5a:47:65:29:a5:15:
8e:d5:d6:86:50:f1:11:f3:de:01:a8:8e:f5:df:ea:34:90:43:
2e:1d:49:0a:f2:37:b5:4d:bf:4b:f5:75:c6:76:2c:af:f6:4c:
8e:21:26:52:08:3a:29:9d:2f:44:40:ad:13:b1:81:91:f2:58:
ac:bb:7e:5c:c2:2c:62:e6:1e:7e:b4:4e:c3:96:e5:34:df:1d:
e9:c5:f4:28:cb:9a:44:da:10:ae:74:f2:8e:9a:9e:08:1c:71:
87:3d:94:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:52 2023 by rpki-client on console-ams.rpki-client.org