Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B46B5/D8A525EA18D511EB81B6E441C4F9AE02/4A8D1A7CFFC211EBBAFAB10BC4F9AE02.roa
File: 4A8D1A7CFFC211EBBAFAB10BC4F9AE02.roa (raw, json)
Hash identifier: 00Nmu5YE1Q0EBlnD/rmcQyHlcLaVPxUvU2/tPW7CaT0=
Subject key identifier: E8:81:A8:0F:E6:B8:88:19:CD:DF:6F:FE:53:C9:8A:72:89:0A:38:47
Certificate issuer: /CN=A91B46B5/serialNumber=1F0F9996977A7AEF84B54F3DAD3B96461EE49CDE
Certificate serial: 04D2
Authority key identifier: 1F:0F:99:96:97:7A:7A:EF:84:B5:4F:3D:AD:3B:96:46:1E:E4:9C:DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hw-Zlpd6eu-EtU89rTuWRh7knN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B46B5/D8A525EA18D511EB81B6E441C4F9AE02/4A8D1A7CFFC211EBBAFAB10BC4F9AE02.roa
Signing time: Tue 28 Jun 2022 11:48:34 +0000
ROA not before: Tue 28 Jun 2022 11:48:34 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 9310
IP address blocks: 45.248.196.0/22 maxlen: 24
103.217.164.0/22 maxlen: 22
103.217.164.0/24 maxlen: 24
103.217.165.0/24 maxlen: 24
103.217.166.0/23 maxlen: 24
202.169.96.0/22 maxlen: 23
202.169.96.0/24 maxlen: 24
202.169.97.0/24 maxlen: 24
202.169.98.0/24 maxlen: 24
202.169.99.0/24 maxlen: 24
202.169.100.0/22 maxlen: 23
202.169.100.0/24 maxlen: 24
202.169.101.0/24 maxlen: 24
202.169.102.0/24 maxlen: 24
202.169.103.0/24 maxlen: 24
202.169.104.0/24 maxlen: 24
202.169.105.0/24 maxlen: 24
202.169.106.0/24 maxlen: 24
202.169.107.0/24 maxlen: 24
202.169.108.0/24 maxlen: 24
202.169.109.0/24 maxlen: 24
202.169.110.0/24 maxlen: 24
202.169.111.0/24 maxlen: 24
202.169.112.0/24 maxlen: 24
202.169.113.0/24 maxlen: 24
202.169.114.0/24 maxlen: 24
202.169.115.0/24 maxlen: 24
202.169.116.0/24 maxlen: 24
202.169.117.0/24 maxlen: 24
202.169.118.0/24 maxlen: 24
202.169.119.0/24 maxlen: 24
202.169.120.0/24 maxlen: 24
202.169.121.0/24 maxlen: 24
202.169.122.0/24 maxlen: 24
202.169.123.0/24 maxlen: 24
202.169.124.0/24 maxlen: 24
202.169.125.0/24 maxlen: 24
202.169.126.0/24 maxlen: 24
202.169.127.0/24 maxlen: 24
2405:180::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1234 (0x4d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B46B5/serialNumber=1F0F9996977A7AEF84B54F3DAD3B96461EE49CDE
Validity
Not Before: Jun 28 11:48:34 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62baea92-7dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6f:3f:b7:b0:c1:2e:17:ae:6d:45:e1:52:fc:
8e:90:07:39:fd:9e:de:98:b3:7f:b1:e7:dc:98:ff:
1d:98:88:69:03:23:89:ad:63:70:46:fe:72:3d:e2:
fd:51:73:c7:dc:36:18:c5:96:6d:1f:ef:2d:67:97:
3b:d5:c7:75:1b:68:7a:03:b6:03:9b:17:9c:dc:50:
30:23:72:f1:6c:c6:5a:44:54:54:0f:5b:c4:1e:57:
78:aa:47:46:58:17:84:68:80:24:f5:9d:c7:47:a6:
8e:e7:ef:26:a3:7a:2f:03:6a:0b:8f:bd:cf:aa:58:
5e:fc:8b:4a:4d:3c:8e:91:d6:74:b4:11:f9:9b:bb:
e2:dd:1f:2f:05:bc:75:d7:3d:fa:20:3c:75:dc:e8:
9e:fa:b5:7e:61:04:6e:06:78:29:f9:84:49:3c:55:
ec:94:81:87:53:2e:d8:3c:eb:e6:86:00:7e:67:c2:
00:2a:1a:92:c1:1c:8b:4d:0e:33:d4:57:78:9e:e5:
fc:32:c3:4c:ed:4c:0f:ae:b6:bf:7a:02:2f:40:c2:
00:50:f6:93:b7:dd:d8:ba:34:74:78:e9:82:af:2b:
45:a5:ce:cc:e3:8d:b0:8a:7d:ad:1b:90:89:6e:63:
3b:21:b1:11:be:4c:a4:7f:c9:cc:6c:e9:a2:d9:b4:
f1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:81:A8:0F:E6:B8:88:19:CD:DF:6F:FE:53:C9:8A:72:89:0A:38:47
X509v3 Authority Key Identifier:
keyid:1F:0F:99:96:97:7A:7A:EF:84:B5:4F:3D:AD:3B:96:46:1E:E4:9C:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B46B5/D8A525EA18D511EB81B6E441C4F9AE02/Hw-Zlpd6eu-EtU89rTuWRh7knN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hw-Zlpd6eu-EtU89rTuWRh7knN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B46B5/D8A525EA18D511EB81B6E441C4F9AE02/4A8D1A7CFFC211EBBAFAB10BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.248.196.0/22
103.217.164.0/22
202.169.96.0/19
IPv6:
2405:180::/32
Signature Algorithm: sha256WithRSAEncryption
75:5a:91:74:10:b3:13:3b:f4:2d:e2:73:e3:35:a3:93:38:de:
ed:64:8b:ca:b7:7e:51:9a:ae:eb:d7:66:d0:45:44:d9:f6:2b:
2f:e7:c1:1c:cc:6a:92:0a:02:38:de:ab:72:ee:37:13:23:76:
73:2c:83:6d:a9:4a:86:a7:e1:34:f2:4a:c8:1c:8c:fb:7f:6e:
8e:25:5e:44:66:4f:5e:7a:cb:ad:cf:18:be:c7:e7:b0:15:f7:
5b:4f:e1:cc:97:80:70:89:67:b5:9a:84:c2:3b:91:ef:62:34:
25:66:9f:b2:43:df:01:f1:af:00:22:5c:c5:5c:a0:af:8a:41:
66:81:17:07:1d:62:33:d9:4b:b4:11:88:5b:79:25:e7:13:77:
15:a8:76:0a:75:b6:60:7d:0e:b2:fd:0d:dc:2b:40:3d:0d:5d:
f8:2d:29:9c:36:75:18:4b:01:85:ab:23:c9:aa:c2:53:8f:b1:
5d:94:e5:d7:42:46:01:9d:7d:5d:bd:6f:38:c3:1b:1b:90:74:
6c:d9:ae:c0:b0:7b:37:d6:22:68:06:d5:4c:9d:c1:be:a6:42:
60:ba:19:61:6d:72:76:0f:c4:ff:a3:73:3d:3a:23:f7:2d:2d:
d0:22:bd:0c:aa:c8:76:2f:64:d7:88:e9:d2:13:05:ed:01:cc:
72:24:7b:37
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgICBNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjQ2QjUxMTAvBgNVBAUTKDFGMEY5OTk2OTc3QTdBRUY4NEI1NEYzREFEM0I5NjQ2
MUVFNDlDREUwHhcNMjIwNjI4MTE0ODM0WhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmJhZWE5Mi03ZGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7m8/t7DBLheubUXhUvyOkAc5/Z7emLN/sefcmP8dmIhpAyOJrWNwRv5yPeL9
UXPH3DYYxZZtH+8tZ5c71cd1G2h6A7YDmxec3FAwI3LxbMZaRFRUD1vEHld4qkdG
WBeEaIAk9Z3HR6aO5+8mo3ovA2oLj73Pqlhe/ItKTTyOkdZ0tBH5m7vi3R8vBbx1
1z36IDx13Oie+rV+YQRuBngp+YRJPFXslIGHUy7YPOvmhgB+Z8IAKhqSwRyLTQ4z
1Fd4nuX8MsNM7UwPrra/egIvQMIAUPaTt93YujR0eOmCrytFpc7M442win2tG5CJ
bmM7IbERvkykf8nMbOmi2bTxlwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFOiBqA/m
uIgZzd9v/lPJinKJCjhHMB8GA1UdIwQYMBaAFB8PmZaXenrvhLVPPa07lkYe5Jze
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDZCNS9EOEE1MjVFQTE4
RDUxMUVCODFCNkU0NDFDNEY5QUUwMi9Idy1abHBkNmV1LUV0VTg5clR1V1JoN2tu
TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0h3LVpscGQ2ZXUtRXRVODlyVHVXUmg3a25ONC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjQ2QjUvRDhBNTI1RUExOEQ1MTFFQjgxQjZFNDQxQzRGOUFFMDIvNEE4RDFBN0NG
RkMyMTFFQkJBRkFCMTBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E
KzApMBgEAgABMBIDBAIt+MQDBAJn2aQDBAXKqWAwDQQCAAIwBwMFACQFAYAwDQYJ
KoZIhvcNAQELBQADggEBAHVakXQQsxM79C3ic+M1o5M43u1ki8q3flGaruvXZtBF
RNn2Ky/nwRzMapIKAjjeq3LuNxMjdnMsg22pSoan4TTySsgcjPt/bo4lXkRmT156
y63PGL7H57AV91tP4cyXgHCJZ7WahMI7ke9iNCVmn7JD3wHxrwAiXMVcoK+KQWaB
FwcdYjPZS7QRiFt5JecTdxWodgp1tmB9DrL9DdwrQD0NXfgtKZw2dRhLAYWrI8mq
wlOPsV2U5ddCRgGdfV29bzjDGxuQdGzZrsCwezfWImgG1Uydwb6mQmC6GWFtcnYP
xP+jcz06I/ctLdAivQyqyHYvZNeI6dITBe0BzHIkezc=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:04 2023 by rpki-client on console-fra.rpki-client.org