Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A8B3B688F4A311EDBDE6276DC4F9AE02.roa
File: A8B3B688F4A311EDBDE6276DC4F9AE02.roa (raw, json)
Hash identifier: SIpa+c6hgmZ31lHInfkdQbCKKabhbCYcpBXjt+Es/x8=
Subject key identifier: 93:67:77:17:7B:4E:D7:9D:54:B4:4A:B8:FC:58:95:AF:C3:D1:2C:B8
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7243
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A8B3B688F4A311EDBDE6276DC4F9AE02.roa
Signing time: Wed 17 May 2023 11:12:07 +0000
ROA not before: Wed 17 May 2023 11:12:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 132752
IP address blocks: 103.77.20.0/24 maxlen: 24
103.77.21.0/24 maxlen: 24
103.77.22.0/24 maxlen: 24
103.77.23.0/24 maxlen: 24
103.114.67.0/24 maxlen: 24
103.163.14.0/23 maxlen: 24
103.168.60.0/24 maxlen: 24
103.171.108.0/24 maxlen: 24
103.179.121.0/24 maxlen: 24
103.180.177.0/24 maxlen: 24
103.229.209.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29251 (0x7243)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 17 11:12:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6464b686-4181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:72:cf:27:55:52:ff:53:99:54:ec:76:1f:85:
4e:5b:a9:bf:42:4c:58:56:9b:f9:d7:10:8a:58:88:
c2:8c:ed:d4:fe:65:23:41:9a:08:cd:64:df:78:0d:
3f:b1:31:1b:34:c6:65:b0:a6:ba:dc:f6:66:0e:6b:
84:ff:61:e6:c5:cb:a6:2e:1d:0c:dd:3d:d1:04:45:
9d:76:bb:78:bd:20:0c:b9:07:f7:84:cb:b7:38:fe:
32:ce:ca:89:be:ef:48:8f:6b:2b:6f:7b:03:1d:77:
b2:64:b7:27:fa:31:c3:d4:01:59:f5:c0:d5:e0:24:
18:04:90:47:e2:d2:03:a6:0f:cb:50:ef:43:ba:7d:
5a:29:19:10:1d:57:04:d1:e6:e1:68:32:21:8f:37:
f7:5a:94:34:3f:c1:13:95:d1:36:fe:19:be:33:cc:
e6:28:be:62:6e:c3:49:2e:5f:d8:61:b7:2c:67:1b:
51:36:6c:2d:08:73:b6:6f:b8:50:88:51:1d:37:25:
05:2e:ae:0e:a2:dc:71:bb:ea:49:11:0d:ab:a3:ae:
eb:5f:a9:1d:66:67:42:3a:43:86:7f:88:9b:fd:09:
c7:a8:58:2e:d5:ac:86:f6:1f:2e:b4:b0:16:ee:77:
f3:40:03:21:65:07:6b:f7:ea:2e:ef:73:27:13:9e:
7c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:67:77:17:7B:4E:D7:9D:54:B4:4A:B8:FC:58:95:AF:C3:D1:2C:B8
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A8B3B688F4A311EDBDE6276DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.77.20.0/22
103.114.67.0/24
103.163.14.0/23
103.168.60.0/24
103.171.108.0/24
103.179.121.0/24
103.180.177.0/24
103.229.209.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:fd:eb:78:d7:73:cc:c8:91:e1:a1:8e:4c:45:05:e1:2c:34:
9f:d6:bc:b8:f1:e2:1f:f3:81:1e:ff:c7:53:fb:78:d2:07:dc:
4f:13:0f:98:a9:df:93:5e:01:80:a6:0a:3e:d8:15:85:4a:6e:
f1:ec:e4:96:29:42:27:80:a9:ea:eb:13:03:ab:97:c6:e4:75:
e2:36:72:9f:21:3e:8c:1b:3b:52:bd:cb:d8:d3:0f:1e:a0:ac:
20:3a:92:c2:bc:dc:78:77:71:e9:ae:d9:db:77:7e:04:60:54:
5e:f0:3c:0c:d9:bc:75:dd:ff:ff:62:5e:91:3a:72:82:93:48:
f4:9a:e3:25:cb:d7:04:a2:2d:52:35:63:27:4c:f6:94:9e:de:
a6:b4:35:e8:8f:a7:f0:96:75:d4:d8:ac:c1:4b:0b:ef:28:54:
bf:de:15:76:e7:be:6a:a9:fc:5b:67:ac:51:52:4a:5c:96:21:
06:1f:5e:26:23:3e:b5:a6:e0:c4:9f:a0:94:3e:ae:4d:f5:06:
05:53:c6:3e:c4:41:13:61:44:56:b3:3a:b4:e6:92:f7:37:a5:
79:85:5c:9a:56:fd:cd:d5:7a:cf:58:2f:1c:32:a4:4d:5a:39:
36:c9:95:4e:fb:14:76:5e:c4:21:90:0c:c9:53:1e:d4:32:14:
bd:c3:30:56
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:54 2023 by rpki-client on console-ams.rpki-client.org