Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/9E6A59E8600F11EE98AFFB11C4F9AE02.roa
File: 9E6A59E8600F11EE98AFFB11C4F9AE02.roa (raw, json)
Hash identifier: Ri3P53tKAz/3dz+303C1+C2J/gigAd4Q0B5+W3H/Q/U=
Subject key identifier: A5:63:29:A3:AC:CE:72:62:19:FE:C4:7D:E9:B5:2A:55:A8:F6:20:96
Certificate issuer: /CN=A9194C0D/serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809
Certificate serial: 0B
Authority key identifier: 63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/9E6A59E8600F11EE98AFFB11C4F9AE02.roa
Signing time: Sun 01 Oct 2023 04:04:30 +0000
ROA not before: Sun 01 Oct 2023 04:04:30 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 134090
IP address blocks: 45.249.116.0/22 maxlen: 22
45.249.116.0/23 maxlen: 23
103.51.112.0/22 maxlen: 24
103.85.36.0/22 maxlen: 24
103.95.112.0/22 maxlen: 24
103.106.88.0/22 maxlen: 24
123.253.188.0/22 maxlen: 24
202.128.112.0/21 maxlen: 24
202.128.120.0/21 maxlen: 24
202.179.128.0/22 maxlen: 24
2400:a840::/32 maxlen: 34
2400:a842::/31 maxlen: 32
2400:a844::/31 maxlen: 32
2402:2c80::/32 maxlen: 33
2402:3fc0::/32 maxlen: 33
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194C0D/serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809
Validity
Not Before: Oct 1 04:04:30 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=6518efcd-b68a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c0:7c:dc:d6:68:6b:4d:3d:2d:ba:d2:68:e1:
49:31:cf:81:50:9b:dc:88:c0:03:2b:45:6c:57:f0:
bc:a9:40:98:20:a2:09:07:15:92:04:b6:c6:fb:39:
e7:80:c0:d4:4a:5f:12:23:c5:fe:5c:1f:cd:11:29:
b5:bd:f9:4e:cc:0f:9d:e2:f5:17:6e:76:ae:06:a2:
b2:51:ed:c6:3f:16:e2:d2:fc:14:f4:1a:b1:ef:97:
ad:13:4e:b9:d6:31:60:95:1e:39:91:8d:2f:3c:05:
49:2b:3f:3e:76:fe:82:d8:a9:d0:85:5e:0d:27:b5:
7a:92:3d:ed:64:70:ec:d4:04:d4:97:03:a8:45:45:
45:a4:6f:13:86:a7:d1:31:a0:cd:28:e7:75:a3:30:
8a:de:10:e9:08:15:da:47:24:f3:9a:48:8f:87:3f:
bb:ef:0c:82:57:42:fa:bc:8d:e9:8a:f6:22:b3:96:
d5:7d:7d:57:24:18:fe:bd:07:4d:2b:6d:6f:bd:d6:
00:0a:6f:86:20:61:30:28:74:ff:2c:d1:03:ac:df:
05:c5:d4:92:5b:5f:78:bc:b6:d6:72:4a:3c:5a:be:
47:46:a5:35:36:07:d3:b2:9e:c6:ff:36:02:8f:2e:
f4:36:a5:a7:95:8d:56:78:f5:69:0f:eb:a0:3e:7f:
26:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:63:29:A3:AC:CE:72:62:19:FE:C4:7D:E9:B5:2A:55:A8:F6:20:96
X509v3 Authority Key Identifier:
keyid:63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/9E6A59E8600F11EE98AFFB11C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.249.116.0/22
103.51.112.0/22
103.85.36.0/22
103.95.112.0/22
103.106.88.0/22
123.253.188.0/22
202.128.112.0/20
202.179.128.0/22
IPv6:
2400:a840::/32
2400:a842::-2400:a845:ffff:ffff:ffff:ffff:ffff:ffff
2402:2c80::/32
2402:3fc0::/32
Signature Algorithm: sha256WithRSAEncryption
e7:44:2c:df:53:96:41:2b:6c:a7:76:eb:3b:bf:79:01:da:cf:
64:4e:bb:ed:9b:1c:c7:ed:a1:a8:17:45:6d:bd:65:bd:54:07:
de:de:6f:55:b5:8b:54:e7:3a:01:78:fd:8f:2c:51:b5:81:8d:
12:b4:87:49:9e:52:98:d4:fb:d2:4d:c2:e1:ce:8d:bd:d1:91:
1d:0b:4d:78:08:14:46:3f:1c:29:56:f6:9b:c7:32:4a:1c:26:
dc:e9:86:28:5b:fe:3b:6f:d7:5e:6c:9e:95:2c:18:f6:62:89:
b9:25:ba:b0:30:f6:3d:a6:73:54:df:e0:14:99:c4:8e:69:97:
ca:71:f6:e6:29:18:86:11:52:85:b3:64:ae:04:a0:35:b9:13:
95:b6:f6:b7:67:db:94:28:7c:fa:0b:dc:41:22:2c:e1:be:7e:
3a:79:77:82:16:b9:66:10:98:a2:ee:d6:8a:1b:02:16:ac:69:
c7:d9:3f:55:ce:6c:30:6c:0f:70:ef:28:21:73:05:12:14:f3:
14:f1:17:6f:35:a1:98:ad:00:38:08:98:4b:16:5e:ec:62:8e:
11:37:13:da:f4:b6:c3:93:d9:44:8c:18:46:59:64:b4:ec:16:
ef:89:0f:fc:7b:b0:ec:8d:87:eb:87:5b:f9:7f:dc:e6:3d:68:
4f:c8:d2:65
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
NEMwRDExMC8GA1UEBRMoNjM0RTI4QjEwMDJFNTU2RThFQjE0Rjk1M0VBRDYzQjZE
Njc3NTgwOTAeFw0yMzEwMDEwNDA0MzBaFw0yNDEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY1MThlZmNkLWI2OGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDPwHzc1mhrTT0tutJo4Ukxz4FQm9yIwAMrRWxX8LypQJggogkHFZIEtsb7OeeA
wNRKXxIjxf5cH80RKbW9+U7MD53i9Rdudq4GorJR7cY/FuLS/BT0GrHvl60TTrnW
MWCVHjmRjS88BUkrPz52/oLYqdCFXg0ntXqSPe1kcOzUBNSXA6hFRUWkbxOGp9Ex
oM0o53WjMIreEOkIFdpHJPOaSI+HP7vvDIJXQvq8jemK9iKzltV9fVckGP69B00r
bW+91gAKb4YgYTAodP8s0QOs3wXF1JJbX3i8ttZySjxavkdGpTU2B9Oynsb/NgKP
LvQ2paeVjVZ49WkP66A+fybzAgMBAAGjggLsMIIC6DAdBgNVHQ4EFgQUpWMpo6zO
cmIZ/sR96bUqVaj2IJYwHwYDVR0jBBgwFoAUY04osQAuVW6OsU+VPq1jttZ3WAkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0QzBEL0FEMjU4ODkwNTc1
NDExRUU5NDBDRDk1NEM0RjlBRTAyL1kwNG9zUUF1Vlc2T3NVLVZQcTFqdHRaM1dB
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWTA0b3NRQXVWVzZPc1UtVlBxMWp0dFozV0FrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NEMwRC9BRDI1ODg5MDU3NTQxMUVFOTQwQ0Q5NTRDNEY5QUUwMi85RTZBNTlFODYw
MEYxMUVFOThBRkZCMTFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDB2BggrBgEFBQcBBwEB/wRn
MGUwNgQCAAEwMAMEAi35dAMEAmczcAMEAmdVJAMEAmdfcAMEAmdqWAMEAnv9vAME
BMqAcAMEAsqzgDArBAIAAjAlAwUAJACoQDAOAwUBJACoQgMFASQAqEQDBQAkAiyA
AwUAJAI/wDANBgkqhkiG9w0BAQsFAAOCAQEA50Qs31OWQStsp3brO795AdrPZE67
7Zscx+2hqBdFbb1lvVQH3t5vVbWLVOc6AXj9jyxRtYGNErSHSZ5SmNT70k3C4c6N
vdGRHQtNeAgURj8cKVb2m8cyShwm3OmGKFv+O2/XXmyelSwY9mKJuSW6sDD2PaZz
VN/gFJnEjmmXynH25ikYhhFShbNkrgSgNbkTlbb2t2fblCh8+gvcQSIs4b5+Onl3
gha5ZhCYou7WihsCFqxpx9k/Vc5sMGwPcO8oIXMFEhTzFPEXbzWhmK0AOAiYSxZe
7GKOETcT2vS2w5PZRIwYRllktOwW74kP/Huw7I2H64db+X/c5j1oT8jSZQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:47 2024 by rpki-client on console-ams.rpki-client.org