Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9795958E9CF711EBB057DE2EC4F9AE02.roa
File: 9795958E9CF711EBB057DE2EC4F9AE02.roa (raw, json)
Hash identifier: //PA4cm7Vp5wp9gunnsH6SX8pmws8oQ4kQ7ub0wIAgU=
Subject key identifier: 4A:1C:AB:CB:BC:C5:E8:3B:DE:63:56:D5:5C:62:B8:E1:B5:E4:3D:B6
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5231
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9795958E9CF711EBB057DE2EC4F9AE02.roa
Signing time: Mon 16 May 2022 04:19:25 +0000
ROA not before: Mon 16 May 2022 04:19:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 139504
IP address blocks: 45.250.64.0/24 maxlen: 24
103.75.41.0/24 maxlen: 24
103.144.193.0/24 maxlen: 24
103.151.38.0/24 maxlen: 24
2001:df6:2e80::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21041 (0x5231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 16 04:19:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6281d0cd-2752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d0:47:82:be:c9:06:2e:04:c5:22:ea:e0:65:
20:83:0a:75:5c:2b:c0:c2:3c:d9:dd:49:18:9b:90:
65:cf:ff:ab:14:d9:45:63:e1:49:0b:a1:ad:c2:a5:
8b:11:2d:24:13:a1:cb:47:4d:d0:43:8f:dc:fa:00:
90:55:d0:0b:a7:51:1a:1e:74:1d:77:c7:f0:8f:f0:
0e:7d:4c:b7:9f:4f:49:5d:9a:be:44:5a:ee:3e:38:
cf:07:f0:b1:0c:20:a9:c5:da:ce:5d:29:ab:2b:cf:
12:47:85:61:62:fe:af:1c:48:fa:9b:b2:70:c9:91:
1f:2e:40:83:de:d2:5b:8a:36:5b:fb:fa:6f:ea:a4:
1e:f2:94:c1:14:80:62:80:1e:67:4a:13:da:9d:86:
04:96:20:6e:dd:33:06:d0:d9:96:08:82:1b:90:53:
7f:fd:68:3a:ba:8e:9b:7b:f9:e7:83:9e:3b:f7:9e:
12:54:25:45:85:c8:4c:2f:aa:ef:64:aa:fc:44:80:
67:80:89:13:1b:26:19:bd:14:52:86:e0:b2:12:09:
b5:a4:59:20:d0:01:b4:71:cc:ff:dc:ad:fa:83:cf:
ef:33:9c:56:14:92:f1:86:4c:82:57:29:ad:48:10:
66:f9:5e:90:73:c4:ae:92:d1:44:80:4f:b4:94:c4:
19:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1C:AB:CB:BC:C5:E8:3B:DE:63:56:D5:5C:62:B8:E1:B5:E4:3D:B6
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9795958E9CF711EBB057DE2EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.250.64.0/24
103.75.41.0/24
103.144.193.0/24
103.151.38.0/24
IPv6:
2001:df6:2e80::/48
Signature Algorithm: sha256WithRSAEncryption
7a:d3:1e:27:41:53:08:78:30:5a:df:44:a6:93:96:b1:80:9c:
48:06:6c:75:73:30:72:11:fb:5e:73:80:64:1b:a2:fb:fc:2e:
4a:dd:02:54:8b:f7:be:c0:4e:e3:e1:2b:af:52:f7:11:e2:d0:
fa:e7:a2:39:91:88:2e:9c:d9:cd:4c:9c:23:32:7a:a9:1e:b9:
1b:bc:ac:f7:e5:47:d7:8b:42:08:45:f3:c0:05:05:63:9e:0a:
38:10:6e:86:ac:61:44:f3:92:88:47:b6:1e:bd:c2:13:af:6c:
47:81:cf:9a:e2:bc:a4:31:9d:4b:1f:1e:10:64:b2:56:18:33:
fe:eb:c0:ba:6e:ef:43:9e:70:44:6a:41:fc:6d:f7:4e:26:93:
d9:2a:f7:bb:82:fe:f4:e3:74:93:90:8a:06:f0:ad:70:a3:97:
bf:c7:fd:e7:09:b8:b1:da:ac:c4:76:0d:c1:e1:4f:da:13:3d:
13:ab:38:59:01:8d:94:a9:d7:eb:f8:92:2f:db:08:98:6a:5a:
a5:df:17:de:ae:6f:7b:c7:f7:c6:3d:d3:8e:27:2c:6c:97:a4:
79:bd:a9:7e:c7:44:36:47:78:9c:e8:8e:57:15:55:78:85:a7:
f3:77:df:eb:86:be:f7:6f:27:46:43:cc:23:4b:76:25:c6:44:
c8:bd:bf:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:56 2023 by rpki-client on console-fra.rpki-client.org