Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CDF4300EEDF011EC830C1744C4F9AE02.roa
File: CDF4300EEDF011EC830C1744C4F9AE02.roa (raw, json)
Hash identifier: lbvXmTfTCjBLCNNtIfDn3sLHAdRFXahDKud0Vk0CNZE=
Subject key identifier: 2E:DC:0B:85:59:0A:DD:06:83:00:1F:46:B2:4E:BD:B1:98:38:4B:55
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5803
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CDF4300EEDF011EC830C1744C4F9AE02.roa
Signing time: Mon 27 Jun 2022 04:02:06 +0000
ROA not before: Mon 27 Jun 2022 04:02:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 135718
IP address blocks: 36.255.156.0/24 maxlen: 24
36.255.157.0/24 maxlen: 24
36.255.158.0/24 maxlen: 24
36.255.159.0/24 maxlen: 24
103.66.112.0/24 maxlen: 24
103.66.114.0/24 maxlen: 24
103.66.115.0/24 maxlen: 24
103.68.46.0/24 maxlen: 24
103.92.120.0/22 maxlen: 24
103.101.56.0/23 maxlen: 24
103.101.58.0/24 maxlen: 24
103.103.132.0/23 maxlen: 24
103.113.35.0/24 maxlen: 24
103.119.245.0/24 maxlen: 24
103.119.246.0/24 maxlen: 24
103.119.247.0/24 maxlen: 24
103.145.8.0/23 maxlen: 24
103.148.164.0/24 maxlen: 24
103.159.201.0/24 maxlen: 24
103.165.87.0/24 maxlen: 24
103.172.10.0/24 maxlen: 24
103.174.144.0/23 maxlen: 24
103.182.110.0/23 maxlen: 24
103.204.188.0/24 maxlen: 24
103.204.189.0/24 maxlen: 24
103.204.190.0/24 maxlen: 24
103.204.191.0/24 maxlen: 24
2001:df5:f680::/48 maxlen: 48
2402:6a40::/48 maxlen: 48
2402:6a40:1::/48 maxlen: 48
2402:6a40:2::/48 maxlen: 48
2402:6a40:3::/48 maxlen: 48
2402:6a40:4::/48 maxlen: 48
2402:6a40:5::/48 maxlen: 48
2402:6a40:6::/48 maxlen: 48
2402:6a40:7::/48 maxlen: 48
2402:6a40:8::/48 maxlen: 48
2402:6a40:9::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22531 (0x5803)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 27 04:02:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62b92bbd-c906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f6:ed:10:db:02:bf:8c:dc:94:9a:b4:e5:32:
aa:fb:72:f2:d4:a4:35:63:dc:2e:23:00:69:df:10:
ce:77:a1:f8:fd:40:d0:5f:f9:6f:44:56:e2:cc:b3:
24:8f:b4:e7:76:e9:15:df:45:03:8b:8a:02:55:81:
d4:6b:ce:5f:ae:a3:c9:ef:aa:bc:06:d4:f8:8d:02:
76:7a:c9:d1:09:94:6a:9d:94:cb:de:87:85:c7:9f:
33:cb:79:03:92:44:d2:33:b1:af:8c:f5:0f:8c:a4:
51:5e:54:52:f0:0c:28:89:f3:8c:6d:6f:50:60:ef:
45:9b:d1:61:31:c6:6a:a1:96:b9:2a:76:e8:2f:d5:
8c:a6:09:83:8f:79:61:b6:3a:63:a4:4c:13:3c:cd:
fc:5e:77:fb:9b:0f:5b:0f:71:d2:c6:7a:b4:99:99:
10:53:0f:73:2b:7a:3d:13:d1:99:03:d5:62:58:57:
0c:04:c3:fc:66:7d:06:5e:b5:d2:4a:0f:65:de:31:
f1:d2:c7:de:0d:2b:e4:5e:90:e3:7a:14:27:f3:15:
e6:f9:78:67:af:31:03:d7:27:7d:6b:09:2f:4c:0c:
ae:85:25:31:5c:97:1c:ae:bf:85:4b:9b:68:2a:73:
c5:7e:11:fa:1c:37:ac:33:3b:5c:11:f5:70:4f:14:
75:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DC:0B:85:59:0A:DD:06:83:00:1F:46:B2:4E:BD:B1:98:38:4B:55
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CDF4300EEDF011EC830C1744C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.156.0/22
103.66.112.0/24
103.66.114.0/23
103.68.46.0/24
103.92.120.0/22
103.101.56.0-103.101.58.255
103.103.132.0/23
103.113.35.0/24
103.119.245.0-103.119.247.255
103.145.8.0/23
103.148.164.0/24
103.159.201.0/24
103.165.87.0/24
103.172.10.0/24
103.174.144.0/23
103.182.110.0/23
103.204.188.0/22
IPv6:
2001:df5:f680::/48
2402:6a40::-2402:6a40:9:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
01:b5:39:e6:4b:6f:0f:7e:56:de:3a:b4:49:65:89:d5:3a:6a:
40:06:81:5a:b2:06:6e:e1:4b:64:5a:df:19:a9:ca:3a:6d:b8:
43:aa:87:34:0a:4d:7e:8c:2b:7c:b9:56:1b:7e:90:b5:27:89:
69:23:5b:f1:9d:9b:cc:3d:52:de:49:6c:9c:4e:83:38:71:77:
9f:55:09:a7:28:9b:4a:b0:be:de:d5:b1:4a:93:1d:86:98:93:
43:1e:3e:3c:14:00:db:d9:d6:06:68:51:8d:21:ea:1c:e6:07:
98:0e:29:6e:83:4f:cb:0a:c2:30:a1:05:5d:4a:69:5d:0d:24:
2b:b0:61:b9:89:a8:38:15:2a:83:0a:2d:18:c9:9d:9b:ac:63:
0f:5a:45:72:f8:de:d5:d9:53:97:e1:b3:c6:14:29:3e:74:f3:
91:12:38:4b:c7:19:fb:f5:05:ad:10:de:b9:71:22:4d:6f:ce:
18:75:55:6e:ee:6b:73:d1:73:da:c7:e7:92:18:20:a8:a0:d3:
b6:95:37:e6:82:ae:27:b9:35:bb:5b:7e:c1:d3:7d:71:37:5a:
41:d6:94:21:e6:79:af:27:c7:01:51:53:a2:fa:6b:39:b2:4a:
86:c2:f3:e6:a3:62:f6:67:7c:fc:79:1e:e0:2a:58:71:67:f9:
cb:9f:0a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:57 2023 by rpki-client on console-fra.rpki-client.org