Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B23F6938D53511EC9A928417C4F9AE02.roa
File: B23F6938D53511EC9A928417C4F9AE02.roa (raw, json)
Hash identifier: jMN5nRu6l2gSieLzyj2E6vsDQ/dHHcJKSAQaWWYsrE4=
Subject key identifier: 0F:46:6A:B8:B5:D8:41:12:7D:56:10:C7:4C:FE:DF:22:2D:44:99:6E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 554B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B23F6938D53511EC9A928417C4F9AE02.roa
Signing time: Mon 16 May 2022 16:31:54 +0000
ROA not before: Mon 16 May 2022 16:31:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 141875
IP address blocks: 45.125.252.0/22 maxlen: 22
45.125.252.0/24 maxlen: 24
45.125.253.0/24 maxlen: 24
45.125.254.0/24 maxlen: 24
45.125.255.0/24 maxlen: 24
103.162.192.0/23 maxlen: 24
103.165.72.0/23 maxlen: 24
103.165.76.0/23 maxlen: 24
103.165.88.0/23 maxlen: 24
103.169.242.0/23 maxlen: 24
103.241.132.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21835 (0x554b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 16 16:31:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62827c7a-4d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:64:e5:c3:d8:09:a9:f9:f4:91:6b:47:c7:ed:
f3:ff:b6:93:5b:bf:57:3a:1f:4f:32:00:7e:58:36:
29:96:e8:32:57:9f:ac:13:39:cd:2a:a8:ee:71:cf:
23:20:17:c5:69:e9:f7:8c:6f:47:cf:28:c7:1d:c7:
1a:5f:65:35:f4:cb:a0:99:7e:39:01:6d:56:14:92:
87:a9:a5:f3:eb:74:7d:cc:ea:66:d5:11:23:a6:db:
5e:0d:30:35:a7:a3:9f:50:5f:cc:84:2c:ed:68:cb:
d7:8e:67:6b:32:f9:37:5e:a2:b6:ff:2b:d2:d8:d4:
47:2d:eb:43:ea:f2:79:46:29:51:ea:ad:f0:4c:c7:
45:2e:b1:5d:4e:ca:db:47:0c:b8:f1:8d:ce:90:bf:
d8:14:05:9a:4e:2f:2c:1d:2d:d3:c4:29:c8:ed:07:
4b:15:44:9c:9c:75:55:e6:53:e3:c4:c4:27:24:c3:
65:00:13:03:08:21:1c:3b:68:c7:9d:64:00:5e:17:
d5:69:1a:9e:0c:1d:0a:5b:13:74:70:0e:2e:60:cd:
9c:10:f3:da:74:d0:95:48:13:ef:ae:99:88:28:38:
b5:3d:ff:89:c3:0e:c3:03:db:1f:27:7b:c0:6b:9c:
bf:93:ec:29:8b:e5:b4:25:97:ff:03:d8:d0:55:97:
16:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:46:6A:B8:B5:D8:41:12:7D:56:10:C7:4C:FE:DF:22:2D:44:99:6E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B23F6938D53511EC9A928417C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.125.252.0/22
103.162.192.0/23
103.165.72.0/23
103.165.76.0/23
103.165.88.0/23
103.169.242.0/23
103.241.132.0/24
Signature Algorithm: sha256WithRSAEncryption
55:0f:cf:20:a5:85:cc:5b:bc:7f:25:5a:e7:1e:34:4d:2c:27:
03:3c:d3:e4:aa:d2:14:a2:6c:2e:cc:60:a2:8b:81:1e:b8:06:
d6:43:0b:58:da:03:cf:81:58:3f:c6:81:51:3d:14:ba:e8:cc:
e3:6a:bd:a4:92:7e:de:9f:47:40:37:7d:3f:c0:17:e7:bc:8f:
e1:0c:c8:c8:c1:d9:93:e3:b0:7b:da:a8:fa:87:bf:84:13:d7:
95:d4:5d:e0:d5:42:66:ba:dd:c5:b0:c6:ce:c8:d0:de:f9:82:
aa:1e:3f:5b:de:17:66:c7:11:3a:70:19:17:af:5a:ff:e9:c3:
80:9b:9e:20:c0:5c:0d:1a:22:6d:cd:d4:c3:e6:1e:f6:f0:d9:
85:ba:01:1e:88:34:e7:c9:7d:19:ab:8b:32:44:92:88:8e:60:
79:fa:19:cc:98:a4:88:5c:94:e8:49:dc:21:a9:e9:7e:f0:76:
e5:84:38:e9:1c:c8:bf:2c:ee:83:08:89:e6:57:61:95:32:b1:
ce:f7:18:18:ce:64:1e:39:08:ed:f4:d0:d2:2b:66:9f:b4:51:
a7:eb:65:2d:98:30:33:9d:e0:6a:a9:3f:80:a0:4f:94:88:85:
72:fc:20:f3:36:6e:dc:5d:84:d1:d4:65:19:f0:70:39:40:81:
15:b0:a1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:54 2023 by rpki-client on console-ams.rpki-client.org