Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FE51B2508B2911EC87ED112AC4F9AE02.roa
File: FE51B2508B2911EC87ED112AC4F9AE02.roa (raw, json)
Hash identifier: io3/64QGj0eMLUv3NM21HJy6Magy+n2JSSxX2L7rMg0=
Subject key identifier: 81:B5:2F:29:02:E9:F0:43:DF:AE:BE:72:EC:A3:45:5C:7F:B0:3A:2F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 4953
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FE51B2508B2911EC87ED112AC4F9AE02.roa
Signing time: Wed 02 Mar 2022 05:41:38 +0000
ROA not before: Wed 02 Mar 2022 05:41:38 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 133676
IP address blocks: 43.230.196.0/22 maxlen: 24
43.240.4.0/24 maxlen: 24
43.240.6.0/24 maxlen: 24
43.240.7.0/24 maxlen: 24
45.64.8.0/24 maxlen: 24
45.64.10.0/24 maxlen: 24
45.64.11.0/24 maxlen: 24
45.248.24.0/24 maxlen: 24
45.248.26.0/23 maxlen: 24
103.42.88.0/22 maxlen: 24
103.47.12.0/23 maxlen: 24
103.47.15.0/24 maxlen: 24
103.47.56.0/22 maxlen: 24
103.47.74.0/23 maxlen: 24
103.47.127.0/24 maxlen: 24
103.47.172.0/23 maxlen: 24
103.47.174.0/23 maxlen: 24
103.49.232.0/23 maxlen: 24
103.101.116.0/24 maxlen: 24
103.101.118.0/23 maxlen: 24
103.173.218.0/24 maxlen: 24
103.177.202.0/23 maxlen: 24
103.178.58.0/23 maxlen: 24
103.204.168.0/22 maxlen: 24
103.225.205.0/24 maxlen: 24
103.225.206.0/23 maxlen: 24
103.248.121.0/24 maxlen: 24
139.5.16.0/23 maxlen: 24
139.5.18.0/23 maxlen: 24
2405:5540::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18771 (0x4953)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Mar 2 05:41:38 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=621f0391-aa94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e6:2e:fe:47:9b:36:82:45:31:1b:2b:dc:28:
04:1c:39:10:eb:43:ce:1d:35:b0:8c:85:cf:33:c6:
8f:6e:e0:0b:97:15:43:51:e7:46:cf:e0:44:8a:6d:
42:fa:b9:73:23:c7:4d:2b:98:a6:30:fc:44:a8:36:
a6:a2:bb:49:e7:de:1a:41:5c:ab:a2:aa:b2:e3:9b:
1c:ec:08:02:8e:9f:da:87:68:cf:e6:60:36:ed:bb:
4d:43:7c:46:2b:93:c7:20:5c:a8:de:70:2d:44:ef:
04:74:f3:9f:63:83:77:a7:b8:f4:3b:80:60:41:03:
33:d2:05:dd:02:82:b4:77:13:82:ca:20:59:6b:8f:
23:b2:a8:67:e4:77:c3:00:4c:13:0d:91:9e:de:f4:
39:0e:55:7c:5e:a5:0d:5a:85:8a:c7:7f:62:71:76:
7b:39:a5:97:fe:9c:93:fa:15:21:c2:ec:96:47:5a:
2f:78:12:34:42:31:44:3e:f1:dd:11:9f:2b:68:1f:
bd:e3:cc:6b:a0:52:dd:ef:2b:9d:33:37:60:e7:56:
53:57:30:4c:64:57:53:c1:90:01:5f:3c:1d:23:14:
de:fd:91:76:b5:5e:30:f0:a7:1e:9a:0f:79:4f:22:
c2:1c:3e:b9:33:d9:53:03:7c:e6:f3:e0:da:47:96:
bb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B5:2F:29:02:E9:F0:43:DF:AE:BE:72:EC:A3:45:5C:7F:B0:3A:2F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FE51B2508B2911EC87ED112AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.230.196.0/22
43.240.4.0/24
43.240.6.0/23
45.64.8.0/24
45.64.10.0/23
45.248.24.0/24
45.248.26.0/23
103.42.88.0/22
103.47.12.0/23
103.47.15.0/24
103.47.56.0/22
103.47.74.0/23
103.47.127.0/24
103.47.172.0/22
103.49.232.0/23
103.101.116.0/24
103.101.118.0/23
103.173.218.0/24
103.177.202.0/23
103.178.58.0/23
103.204.168.0/22
103.225.205.0-103.225.207.255
103.248.121.0/24
139.5.16.0/22
IPv6:
2405:5540::/32
Signature Algorithm: sha256WithRSAEncryption
a7:d6:f1:81:0e:ee:13:48:67:7f:c9:13:0a:8d:3b:a9:18:82:
25:12:1d:a5:62:cb:72:62:95:f0:7d:e1:2f:09:1d:95:48:76:
b9:50:12:62:ea:b4:ec:29:ae:4a:46:3c:0f:49:bb:9f:f2:50:
fc:fa:f2:41:dd:e2:24:11:5d:50:51:27:f7:ed:cf:a0:3b:76:
4d:ce:8b:1d:3b:66:9f:d1:b3:18:a8:7b:bb:a1:86:0f:90:fb:
8c:4f:6f:c0:92:73:ef:f9:f7:a1:17:0f:7d:6d:8c:6c:6f:08:
7c:81:98:ac:45:09:e5:42:44:9b:a0:d6:1f:0d:cd:74:4d:83:
a8:ba:f9:7c:2f:25:1d:51:0f:ba:29:94:be:ae:8e:66:28:d9:
a2:74:bb:13:ed:96:69:5e:60:ed:17:06:ee:62:9d:b6:6a:47:
fb:43:37:98:eb:81:25:c6:87:e7:a6:1b:b2:d2:07:50:62:71:
df:8d:c6:ea:0c:e1:ae:18:e9:4a:f0:a2:f8:27:68:6f:a1:4a:
38:bb:26:d3:6b:1a:92:a2:6b:4a:42:23:30:ab:02:c3:4a:eb:
84:e8:14:e7:2c:46:0a:e2:dd:83:38:b8:41:b3:5e:47:50:9d:
96:77:a9:93:a1:5d:9d:e4:1f:b1:c4:99:15:21:df:5d:13:fc:
e0:85:ee:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:55 2023 by rpki-client on console-ams.rpki-client.org