Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/25186C92659C11ED95624350C4F9AE02.roa
File: 25186C92659C11ED95624350C4F9AE02.roa (raw, json)
Hash identifier: D/eJsaIgrFsVT6ZL7dsGS+lyho4STxPprHTtSp5JkSk=
Subject key identifier: 4D:4E:2B:2B:34:31:D5:7A:9C:69:9E:76:8A:22:B8:68:6E:05:BD:D7
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 0901
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/25186C92659C11ED95624350C4F9AE02.roa
Signing time: Wed 16 Nov 2022 10:48:03 +0000
ROA not before: Wed 16 Nov 2022 10:48:03 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 9387
IP address blocks: 103.11.60.0/24 maxlen: 24
103.11.61.0/24 maxlen: 24
103.11.62.0/24 maxlen: 24
113.203.208.0/22 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/23 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.218.0/23 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.224.0/22 maxlen: 22
113.203.228.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.234.0/24 maxlen: 24
113.203.235.0/24 maxlen: 24
113.203.236.0/24 maxlen: 24
113.203.237.0/24 maxlen: 24
113.203.238.0/24 maxlen: 24
113.203.239.0/24 maxlen: 24
113.203.240.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
113.203.246.0/24 maxlen: 24
113.203.248.0/22 maxlen: 22
113.203.252.0/22 maxlen: 22
180.178.128.0/24 maxlen: 24
180.178.129.0/24 maxlen: 24
180.178.132.0/24 maxlen: 24
180.178.133.0/24 maxlen: 24
180.178.134.0/24 maxlen: 24
180.178.135.0/24 maxlen: 24
180.178.137.0/24 maxlen: 24
180.178.138.0/24 maxlen: 24
180.178.139.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.151.0/24 maxlen: 24
180.178.152.0/22 maxlen: 24
180.178.156.0/24 maxlen: 24
180.178.158.0/24 maxlen: 24
180.178.159.0/24 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.164.0/22 maxlen: 24
180.178.172.0/24 maxlen: 24
180.178.173.0/24 maxlen: 24
180.178.174.0/24 maxlen: 24
180.178.175.0/24 maxlen: 24
180.178.180.0/22 maxlen: 24
180.178.184.0/22 maxlen: 22
223.29.224.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
223.29.226.0/24 maxlen: 24
223.29.232.0/22 maxlen: 22
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
2401:4100::/33 maxlen: 33
2401:4100:8000::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2305 (0x901)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Validity
Not Before: Nov 16 10:48:03 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=6374bfe3-8840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3d:82:e6:88:d2:74:bd:e6:ba:dc:fc:11:34:
05:09:ae:46:4b:49:12:42:00:80:3e:e0:14:2d:b9:
72:2c:e2:b7:84:f4:7a:c9:2b:5e:31:c8:75:05:45:
72:93:72:0f:07:c8:6b:92:87:b6:b0:f6:0f:9c:ed:
27:ed:a4:99:8b:70:6f:88:da:24:ab:ca:f0:ba:79:
5c:75:07:0b:7a:90:d1:d1:bf:94:19:27:08:9d:fa:
d8:70:b3:60:14:a0:8a:d0:e7:12:36:e0:e3:97:9f:
40:52:61:e1:62:67:7e:bf:4d:ae:6c:12:8e:94:9a:
8b:ea:c6:8a:a3:22:a2:79:d9:20:2c:95:0f:32:bb:
0a:fb:1e:2a:b1:03:00:32:49:c4:b1:bc:91:f3:a0:
5d:5f:40:0e:15:0d:b9:1d:2f:f9:fe:85:c6:29:67:
0e:99:22:f9:56:74:f5:8c:c0:63:64:7c:1f:43:25:
ff:8e:34:7b:fc:42:56:f6:74:65:45:6f:3c:90:37:
fc:b5:bc:e6:65:45:8a:01:84:d6:51:ab:df:22:f5:
de:66:dd:72:81:36:d1:0c:d3:90:57:93:bc:21:23:
29:5e:d2:d9:a0:f9:a5:49:ae:1f:9b:76:ea:0e:a2:
cb:01:83:78:0c:6d:7a:d9:c9:f1:c6:31:99:13:cf:
a5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4E:2B:2B:34:31:D5:7A:9C:69:9E:76:8A:22:B8:68:6E:05:BD:D7
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/25186C92659C11ED95624350C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.60.0-103.11.62.255
113.203.208.0-113.203.219.255
113.203.223.0-113.203.229.255
113.203.231.0/24
113.203.234.0-113.203.240.255
113.203.242.0-113.203.246.255
113.203.248.0/21
180.178.128.0/23
180.178.132.0/22
180.178.137.0-180.178.139.255
180.178.144.0/24
180.178.149.0-180.178.156.255
180.178.158.0-180.178.162.255
180.178.164.0/22
180.178.172.0/22
180.178.180.0-180.178.187.255
223.29.224.0-223.29.226.255
223.29.232.0/21
IPv6:
2401:4100::-2401:4100:8000:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
27:17:72:ee:b0:4b:2a:9a:a2:e0:f4:ee:17:db:a5:38:95:e0:
b9:b2:2d:e8:92:b0:cd:15:8c:00:70:b8:a9:bf:a9:26:a7:8d:
b0:b6:ce:a8:bf:7f:50:61:fc:17:b9:9b:e2:10:00:04:55:56:
7d:6f:dd:51:fe:cb:18:d5:15:19:f9:15:8b:78:ed:ce:68:93:
dc:85:e5:28:80:fe:3b:5a:33:1b:57:48:b6:0c:dc:08:1c:8b:
f2:a7:49:5d:ac:1e:d4:5d:d2:9f:58:3a:b2:b7:12:55:0f:49:
26:fb:60:27:63:4c:44:1f:cd:41:3d:3f:d9:49:12:2f:6a:52:
40:89:2d:71:a6:f0:82:7a:f2:10:d2:c2:ca:39:a6:96:06:8f:
84:29:c6:fc:ad:ad:9f:bc:79:8b:df:7d:2a:f1:80:45:a2:39:
9e:76:8f:45:9d:91:dc:33:26:3a:a2:b9:3f:b2:cd:1a:97:25:
46:c2:bf:41:ca:80:57:bc:14:a4:c3:51:21:a2:83:b6:4f:0d:
d6:ab:80:c0:a0:b3:cb:21:d1:93:89:13:13:67:d7:82:68:b3:
b1:aa:58:21:a8:dc:3a:da:a9:cd:5f:70:73:2a:d2:8b:02:f1:
91:f8:b0:f5:8a:89:12:5d:ec:4a:91:50:04:e5:b8:43:38:3f:
04:66:f3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:14 2023 by rpki-client on console-fra.rpki-client.org