Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C2A18330A7B011ED93516E58C4F9AE02.roa
File: C2A18330A7B011ED93516E58C4F9AE02.roa (raw, json)
Hash identifier: 5PCqfgCCyfhXIxYPvQMqg7CjxztkEdx01H3UGj81IGc=
Subject key identifier: D9:EF:70:EC:1F:3C:23:DE:24:BB:19:84:9E:25:6D:D3:B5:9D:94:9A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 648D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C2A18330A7B011ED93516E58C4F9AE02.roa
Signing time: Wed 08 Feb 2023 13:01:54 +0000
ROA not before: Wed 08 Feb 2023 13:01:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137166
IP address blocks: 103.87.164.0/22 maxlen: 22
103.87.164.0/24 maxlen: 24
103.87.165.0/24 maxlen: 24
103.87.166.0/24 maxlen: 24
103.87.167.0/24 maxlen: 24
103.120.238.0/24 maxlen: 24
103.120.252.0/24 maxlen: 24
103.120.254.0/24 maxlen: 24
103.120.255.0/24 maxlen: 24
103.135.61.0/24 maxlen: 24
103.135.62.0/24 maxlen: 24
103.135.63.0/24 maxlen: 24
103.158.138.0/23 maxlen: 24
103.172.94.0/23 maxlen: 24
103.198.96.0/22 maxlen: 22
103.198.96.0/24 maxlen: 24
103.198.97.0/24 maxlen: 24
103.198.98.0/24 maxlen: 24
103.198.99.0/24 maxlen: 24
103.251.48.0/22 maxlen: 24
150.242.204.0/22 maxlen: 24
2001:df7:6a80::/48 maxlen: 48
2402:7f40::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25741 (0x648d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Feb 8 13:01:54 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63e39d42-524f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d6:df:51:a0:43:7d:f4:98:ef:ba:7c:16:37:
e8:c1:d8:e5:88:5c:56:a1:41:a5:a3:91:7c:fa:e5:
be:d3:41:44:0e:6f:e0:6f:f6:62:fd:cc:98:35:ff:
5a:f2:13:a3:d4:08:af:99:28:47:9c:c4:3c:0b:5a:
14:4e:30:6f:e3:8d:ab:e9:c0:06:63:59:d5:f0:d7:
38:cb:40:2f:f1:07:15:07:e3:dc:a3:c1:9f:3d:bc:
dc:be:51:e6:2a:7e:2c:a6:ae:b3:5f:db:d6:45:23:
ac:a6:5d:48:e6:a9:cd:f2:3d:97:03:e7:ae:f8:32:
67:33:fb:e5:1c:17:35:7e:45:3b:ee:e0:e8:c9:84:
81:f1:cc:71:da:e7:7c:9a:9e:0e:6e:d8:cb:96:f3:
84:ac:7e:9a:ab:eb:c1:3c:99:fd:80:8c:23:ac:7c:
f6:81:e5:ec:eb:8c:dc:45:0a:ad:e4:d1:4e:85:f8:
00:31:b2:9b:7c:2c:f7:16:6f:0d:2a:6a:81:5d:69:
c5:4e:66:b4:c1:22:17:4b:d7:ae:10:c7:79:ac:62:
f5:1d:4c:26:b0:7e:6d:74:98:35:f4:41:5b:f2:ec:
81:45:b0:b9:2a:a3:0e:f6:2f:1f:b5:df:3a:07:62:
88:cb:63:fb:c7:35:3f:44:e4:ba:f4:da:f8:69:95:
56:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:EF:70:EC:1F:3C:23:DE:24:BB:19:84:9E:25:6D:D3:B5:9D:94:9A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C2A18330A7B011ED93516E58C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.87.164.0/22
103.120.238.0/24
103.120.252.0/24
103.120.254.0/23
103.135.61.0-103.135.63.255
103.158.138.0/23
103.172.94.0/23
103.198.96.0/22
103.251.48.0/22
150.242.204.0/22
IPv6:
2001:df7:6a80::/48
2402:7f40::/32
Signature Algorithm: sha256WithRSAEncryption
b0:1f:ee:48:0a:60:73:df:b3:b4:9e:e5:24:61:c4:84:c3:75:
52:56:9b:9b:62:66:ce:f2:59:8b:b6:75:8e:93:3a:7a:ad:09:
88:c2:d7:bd:62:c0:a7:0c:51:9e:71:9b:8b:76:8d:e7:c0:3e:
dd:27:74:6b:ca:9f:10:48:0f:b2:f9:67:2f:75:85:f8:33:c4:
d6:57:37:28:43:95:5f:75:12:88:a3:90:61:e8:39:61:db:18:
30:44:60:66:66:6d:00:4a:7c:30:9d:c4:ba:71:43:06:cb:cb:
4d:3a:2a:c6:d1:16:d7:1e:7d:9b:be:94:4c:86:d8:02:05:19:
a3:4c:c9:94:67:5e:d4:98:c7:1e:25:d5:d9:d8:81:ee:dd:14:
9f:6b:52:3e:94:8f:cb:1e:e9:0c:a5:98:78:d0:88:34:f3:38:
6e:1f:41:af:8e:59:ff:18:46:cb:18:3a:1f:2f:20:21:56:0d:
94:45:99:93:8a:3e:70:f5:f5:b1:db:2f:da:c5:de:c9:8e:60:
d1:28:72:de:1d:e7:ce:db:81:52:8f:b3:fa:80:87:85:9d:52:
1e:29:96:dc:39:85:bc:53:a8:46:f4:e1:1e:2f:c6:72:e6:94:
3e:50:6f:aa:95:f5:71:fc:96:1c:1d:73:12:8f:24:0b:55:59:
34:a8:f0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:57 2023 by rpki-client on console-fra.rpki-client.org