Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/14970E7ABF3111ED8F8E260BC4F9AE02.roa
File: 14970E7ABF3111ED8F8E260BC4F9AE02.roa (raw, json)
Hash identifier: qAv8T6tZIfZP4TxZbKGT8xQlPUSHdM8dMxL9oZm7qio=
Subject key identifier: 02:DF:89:8F:BE:02:A7:11:EC:16:86:A2:6E:7C:FA:B4:28:1C:FC:D4
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 09AD
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/14970E7ABF3111ED8F8E260BC4F9AE02.roa
Signing time: Fri 10 Mar 2023 10:48:24 +0000
ROA not before: Fri 10 Mar 2023 10:48:24 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 9387
IP address blocks: 103.11.60.0/22 maxlen: 22
103.11.60.0/24 maxlen: 24
103.11.62.0/24 maxlen: 24
113.203.209.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/23 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.226.0/24 maxlen: 24
113.203.234.0/24 maxlen: 24
113.203.235.0/24 maxlen: 24
113.203.236.0/24 maxlen: 24
113.203.237.0/24 maxlen: 24
113.203.238.0/24 maxlen: 24
113.203.239.0/24 maxlen: 24
113.203.240.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.246.0/24 maxlen: 24
180.178.128.0/21 maxlen: 21
180.178.128.0/22 maxlen: 22
180.178.128.0/24 maxlen: 24
180.178.129.0/24 maxlen: 24
180.178.132.0/24 maxlen: 24
180.178.133.0/24 maxlen: 24
180.178.134.0/24 maxlen: 24
180.178.135.0/24 maxlen: 24
180.178.136.0/21 maxlen: 21
180.178.137.0/24 maxlen: 24
180.178.138.0/24 maxlen: 24
180.178.139.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.160.0/20 maxlen: 20
180.178.160.0/24 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.172.0/24 maxlen: 24
180.178.174.0/24 maxlen: 24
180.178.175.0/24 maxlen: 24
180.178.178.0/24 maxlen: 24
180.178.180.0/22 maxlen: 24
180.178.184.0/22 maxlen: 22
223.29.224.0/20 maxlen: 20
223.29.224.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
2401:4100::/32 maxlen: 32
2401:4100::/33 maxlen: 33
2401:4100:8000::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2477 (0x9ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Validity
Not Before: Mar 10 10:48:24 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=640b0af8-de4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8f:f0:dd:58:e3:52:19:9a:a2:4a:b6:f5:e2:
be:48:50:7e:5e:c1:3c:4a:40:0b:7c:3b:03:56:70:
1b:3f:97:3a:60:4f:66:4b:a0:6d:d7:c5:71:a6:68:
19:02:e0:eb:1c:fb:6f:79:6a:74:83:fa:1f:9f:61:
fe:7f:2b:b6:65:d2:cb:f5:32:2e:db:cc:81:a8:27:
5a:f1:33:28:9d:18:f8:cf:93:75:ee:20:56:d1:8d:
b0:3a:a2:fe:5f:a9:c5:80:95:0d:c0:d0:48:b4:3a:
98:e7:3b:27:2b:99:3e:da:8a:0c:dd:5a:2a:e8:27:
61:00:ba:3e:ba:96:8a:68:c4:6f:ed:a3:68:aa:ba:
3b:f4:34:6f:91:35:b7:db:6f:d1:fa:4f:13:8a:9c:
1c:62:2b:85:ee:73:65:8c:59:d0:74:b9:f9:11:d0:
b0:3d:2a:eb:2c:89:12:4b:d6:60:41:1c:51:55:8d:
f7:87:dc:04:70:11:18:e1:3d:c0:37:39:9a:86:c1:
fc:20:19:6c:fc:f6:4d:e4:d0:d3:44:fd:43:71:f8:
1c:d0:9a:f8:98:5a:5c:60:b7:6b:79:51:f0:0d:53:
ff:ac:7b:d8:e7:8a:24:75:da:3a:df:f3:d6:a8:36:
13:8f:5c:3f:f5:90:e8:4d:c1:3f:b3:4f:02:f5:61:
98:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DF:89:8F:BE:02:A7:11:EC:16:86:A2:6E:7C:FA:B4:28:1C:FC:D4
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/14970E7ABF3111ED8F8E260BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.60.0/22
113.203.209.0/24
113.203.211.0-113.203.217.255
113.203.219.0/24
113.203.223.0-113.203.226.255
113.203.234.0-113.203.240.255
113.203.243.0-113.203.244.255
113.203.246.0/24
180.178.128.0-180.178.144.255
180.178.149.0/24
180.178.160.0/20
180.178.178.0/24
180.178.180.0-180.178.187.255
223.29.224.0/20
IPv6:
2401:4100::/32
Signature Algorithm: sha256WithRSAEncryption
09:7b:47:5f:80:d3:fb:da:7f:fa:9c:3b:8b:b7:d3:ee:1c:3e:
6b:48:f0:b4:f0:58:89:70:4a:58:97:5d:d0:4d:fa:61:10:b4:
67:2c:56:5a:88:64:d5:de:34:dc:d1:f2:5b:62:b8:9d:8c:a0:
cf:07:ed:c7:8b:f0:ed:f1:ab:32:22:64:89:d2:ae:aa:88:27:
4a:a5:4d:d0:68:ca:2b:6b:c1:6d:f6:07:32:dd:d4:01:a7:cd:
47:56:05:be:cb:8b:ec:41:19:0a:05:cb:77:d3:61:66:9e:0d:
5a:4a:03:43:8c:37:93:4e:42:9e:ff:f5:2c:33:a8:7f:d0:d7:
bd:5a:e6:dc:b1:17:ab:fb:1d:0b:d1:14:dd:73:c8:61:f8:cb:
95:d3:3b:c1:ad:1d:b4:8b:12:35:c4:c7:29:bd:78:3b:42:fb:
00:4f:61:ad:a9:08:46:61:d1:64:73:d5:c6:38:c2:85:5a:1a:
5d:4a:e1:8d:bb:3d:62:d0:c0:05:48:aa:c5:08:1d:c2:e3:29:
8b:c8:c0:fa:75:f0:2c:6c:f4:a2:df:0d:2e:35:2b:a5:9f:85:
9d:71:03:17:0e:8a:00:aa:80:a5:e2:24:4d:65:7d:65:80:52:
eb:ad:12:44:ec:04:2c:fd:87:61:97:9a:31:52:49:a2:b2:ae:
fd:73:60:1c
-----BEGIN CERTIFICATE-----
MIIGAzCCBOugAwIBAgICCa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjY5RTcxMTAvBgNVBAUTKDVFMTA1RTBFRjkwRDE4QjlGQTRCODhGQUUzNDEwQzZB
MURFRjcxOTAwHhcNMjMwMzEwMTA0ODI0WhcNMjMxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDBiMGFmOC1kZTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwY/w3VjjUhmaokq29eK+SFB+XsE8SkALfDsDVnAbP5c6YE9mS6Bt18VxpmgZ
AuDrHPtveWp0g/ofn2H+fyu2ZdLL9TIu28yBqCda8TMonRj4z5N17iBW0Y2wOqL+
X6nFgJUNwNBItDqY5zsnK5k+2ooM3Voq6CdhALo+upaKaMRv7aNoqro79DRvkTW3
22/R+k8TipwcYiuF7nNljFnQdLn5EdCwPSrrLIkSS9ZgQRxRVY33h9wEcBEY4T3A
NzmahsH8IBls/PZN5NDTRP1Dcfgc0Jr4mFpcYLdreVHwDVP/rHvY54okddo63/PW
qDYTj1w/9ZDoTcE/s08C9WGY6QIDAQABo4IDJzCCAyMwHQYDVR0OBBYEFALfiY++
AqcR7BaGom58+rQoHPzUMB8GA1UdIwQYMBaAFF4QXg75DRi5+kuI+uNBDGod73GQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjlFNy80NkFBRDZCMjkw
NDAxMUVBQTY4OEJFNDVDNEY5QUUwMi9YaEJlRHZrTkdMbjZTNGo2NDBFTWFoM3Zj
WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hoQmVEdmtOR0xuNlM0ajY0MEVNYWgzdmNaQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjY5RTcvNDZBQUQ2QjI5MDQwMTFFQUE2ODhCRTQ1QzRGOUFFMDIvMTQ5NzBFN0FC
RjMxMTFFRDhGOEUyNjBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgbAGCCsGAQUFBwEHAQH/
BIGgMIGdMIGLBAIAATCBhAMEAmcLPAMEAHHL0TAMAwQAccvTAwQBccvYAwQAccvb
MAwDBABxy98DBABxy+IwDAMEAXHL6gMEAHHL8DAMAwQAccvzAwQAccv0AwQAccv2
MAwDBAe0soADBAC0spADBAC0spUDBAS0sqADBAC0srIwDAMEArSytAMEArSyuAME
BN8d4DANBAIAAjAHAwUAJAFBADANBgkqhkiG9w0BAQsFAAOCAQEACXtHX4DT+9p/
+pw7i7fT7hw+a0jwtPBYiXBKWJdd0E36YRC0ZyxWWohk1d403NHyW2K4nYygzwft
x4vw7fGrMiJkidKuqognSqVN0GjKK2vBbfYHMt3UAafNR1YFvsuL7EEZCgXLd9Nh
Zp4NWkoDQ4w3k05Cnv/1LDOof9DXvVrm3LEXq/sdC9EU3XPIYfjLldM7wa0dtIsS
NcTHKb14O0L7AE9hrakIRmHRZHPVxjjChVoaXUrhjbs9YtDABUiqxQgdwuMpi8jA
+nXwLGz0ot8NLjUrpZ+FnXEDFw6KAKqApeIkTWV9ZYBS660SROwELP2HYZeaMVJJ
orKu/XNgHA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:12 2023 by rpki-client on console-ams.rpki-client.org