Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8CC99BE6B98911ECB34C3B3AC4F9AE02.roa
File: 8CC99BE6B98911ECB34C3B3AC4F9AE02.roa (raw, json)
Hash identifier: TfNG90/RjUaXMTf0p9pHCbJ2F28Yv+1gGstmUiHuOeA=
Subject key identifier: 16:DE:B2:CB:99:91:FF:98:3B:CD:D9:5D:59:FB:A7:14:95:0A:97:D6
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 4C14
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8CC99BE6B98911ECB34C3B3AC4F9AE02.roa
Signing time: Tue 12 Apr 2022 07:21:31 +0000
ROA not before: Tue 12 Apr 2022 07:21:31 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 133001
IP address blocks: 43.225.160.0/22 maxlen: 24
43.251.216.0/22 maxlen: 24
45.117.220.0/22 maxlen: 24
45.119.44.0/24 maxlen: 24
45.119.45.0/24 maxlen: 24
45.119.46.0/24 maxlen: 24
45.119.47.0/24 maxlen: 24
103.38.36.0/22 maxlen: 24
103.51.132.0/24 maxlen: 24
103.51.133.0/24 maxlen: 24
103.51.134.0/24 maxlen: 24
103.51.135.0/24 maxlen: 24
103.58.8.0/22 maxlen: 24
103.114.0.0/22 maxlen: 24
103.140.26.0/24 maxlen: 24
103.140.27.0/24 maxlen: 24
103.165.68.0/24 maxlen: 24
103.165.69.0/24 maxlen: 24
103.176.210.0/24 maxlen: 24
103.186.46.0/24 maxlen: 24
103.186.47.0/24 maxlen: 24
103.196.76.0/22 maxlen: 24
103.201.148.0/22 maxlen: 24
103.239.168.0/24 maxlen: 24
103.239.169.0/24 maxlen: 24
103.239.170.0/24 maxlen: 24
103.239.171.0/24 maxlen: 24
111.125.225.0/24 maxlen: 24
157.119.202.0/24 maxlen: 24
183.87.251.0/24 maxlen: 24
183.87.252.0/22 maxlen: 24
202.94.160.0/22 maxlen: 24
2401:b240::/32 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19476 (0x4c14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 12 07:21:31 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=6255287b-e1cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:17:5d:23:9d:2d:0d:76:41:c8:a1:cd:29:51:
ba:76:03:67:29:72:0f:f7:49:fd:fc:dc:af:ea:f8:
52:c4:6c:7d:3c:8d:12:a7:c0:af:37:99:7b:2a:00:
44:c3:97:b4:86:c0:70:75:9f:a1:bb:1f:0b:0c:d8:
46:82:83:95:2c:36:44:bd:ea:b1:b7:5a:39:d6:e6:
e1:bf:b3:e0:e1:ab:e6:fd:68:93:3a:43:65:4c:2e:
17:e7:2c:8f:94:ff:64:59:fd:12:ed:8d:aa:03:be:
21:95:8f:67:be:e8:1d:ba:8a:7e:b0:9c:95:b6:dc:
bd:10:9f:3e:26:8f:76:d3:b3:fa:7a:e9:6c:ea:47:
a0:94:36:5d:40:6d:ed:53:ca:08:4f:9e:5a:5c:52:
92:d0:70:e9:23:37:96:e9:51:4f:e3:51:86:b5:47:
f5:7a:71:d8:47:da:a4:2d:1f:09:09:a8:58:a2:73:
6f:bc:d8:38:77:f0:32:44:e9:44:f2:71:5a:cc:c1:
75:34:6c:d6:da:db:9a:3d:f2:6f:ca:f1:d0:23:e3:
0f:db:be:cc:96:43:53:ed:fb:04:73:b9:92:b4:73:
3e:ea:e0:1c:e6:71:ae:fa:ce:4a:f7:d5:31:3e:9e:
00:dd:e1:e4:96:62:48:a9:fd:7b:bd:e6:51:87:00:
93:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DE:B2:CB:99:91:FF:98:3B:CD:D9:5D:59:FB:A7:14:95:0A:97:D6
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8CC99BE6B98911ECB34C3B3AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.160.0/22
43.251.216.0/22
45.117.220.0/22
45.119.44.0/22
103.38.36.0/22
103.51.132.0/22
103.58.8.0/22
103.114.0.0/22
103.140.26.0/23
103.165.68.0/23
103.176.210.0/24
103.186.46.0/23
103.196.76.0/22
103.201.148.0/22
103.239.168.0/22
111.125.225.0/24
157.119.202.0/24
183.87.251.0-183.87.255.255
202.94.160.0/22
IPv6:
2401:b240::/32
Signature Algorithm: sha256WithRSAEncryption
0f:ea:6a:a6:0c:c1:8a:5b:fa:a5:33:02:5d:2f:d4:12:f0:3b:
22:c2:08:9f:b3:ef:4e:e2:ad:6e:2b:a3:24:26:64:4a:61:0b:
6b:15:a8:84:bf:26:ba:b3:a3:2e:05:44:4b:aa:ad:1b:44:a6:
89:b2:48:c6:29:c6:c5:09:79:91:bf:3d:4d:db:62:c2:ca:1e:
ff:91:71:73:0f:29:b4:fe:83:a1:d7:d8:de:35:ff:b1:4a:3f:
b0:1e:c8:8d:f1:00:e1:f3:ac:c9:d8:5d:84:07:0b:01:6e:7e:
85:66:99:ac:42:4e:82:97:b1:b2:8f:c2:7a:70:de:07:bc:fa:
40:ff:97:b3:67:3a:c6:2d:3d:ed:ec:4c:a2:da:5c:75:61:5d:
b7:ea:90:17:8d:f2:49:44:73:11:49:f1:45:e4:a6:d6:36:d5:
b4:a7:0d:5d:7e:bd:f1:a7:f0:31:cd:90:cc:49:6b:cc:94:87:
21:bf:dc:81:b3:68:3f:e6:a7:fb:04:b3:25:9a:ea:1a:dd:13:
7c:02:1e:4d:19:cf:27:c1:3d:04:60:22:29:2a:fd:af:92:86:
b7:b7:e9:5c:22:6c:c6:a9:f7:80:6a:c9:5f:67:33:e7:da:cb:
8d:b3:fe:2e:4a:89:27:45:27:55:74:ad:05:43:82:28:34:aa:
5e:ee:3c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:53 2023 by rpki-client on console-ams.rpki-client.org