Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/7CD1C82EDCF811ED9D16095AC4F9AE02.roa
File: 7CD1C82EDCF811ED9D16095AC4F9AE02.roa (raw, json)
Hash identifier: XMejqiXETan1XacdKRQSn7apPmQmDdE0fui8owtlsAE=
Subject key identifier: 2D:EF:D1:DD:D7:BE:BC:A4:D6:02:2A:22:3F:F3:51:34:3B:49:53:41
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 0A16
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/7CD1C82EDCF811ED9D16095AC4F9AE02.roa
Signing time: Mon 17 Apr 2023 08:18:53 +0000
ROA not before: Mon 17 Apr 2023 08:18:53 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 7018
IP address blocks: 113.203.208.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
113.203.252.0/22 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.151.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.173.0/24 maxlen: 24
180.178.179.0/24 maxlen: 24
223.29.226.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2582 (0xa16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Validity
Not Before: Apr 17 08:18:53 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=643d00ec-de82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:37:b8:54:5e:74:d6:f9:8c:01:bc:8a:1d:73:
14:9f:c9:d3:3e:04:52:42:e2:49:5e:d2:0a:ec:9b:
4b:ab:f6:9f:ea:14:c4:76:68:cb:80:02:4f:9f:01:
13:2c:99:88:1f:17:b9:22:52:82:f1:a7:1a:b5:30:
27:03:20:ab:57:be:c8:68:e5:a8:5c:ae:ba:7c:5a:
a3:be:d0:d6:65:27:de:0b:55:1b:0e:5e:fd:1f:a9:
0e:63:d2:35:3d:5b:e6:f4:32:0a:e4:c8:24:a6:55:
c4:b3:b1:d1:ec:a7:66:e2:fd:3f:3a:78:43:1b:59:
eb:e8:48:06:34:27:44:ca:d4:2a:28:4c:cf:4e:03:
0e:9b:07:a8:41:78:35:43:2b:27:36:7d:48:cb:3e:
8c:59:1d:f7:39:ab:e7:2b:2c:32:7c:2e:26:f1:04:
5b:28:db:55:fe:50:5a:59:19:12:fa:86:c5:d4:4a:
83:35:6d:f8:c1:ed:3b:bd:f2:c6:26:af:80:6e:5d:
77:07:48:7c:0e:43:16:e0:cf:c8:eb:f3:3c:14:a9:
03:cc:26:fd:88:e2:4a:1e:a4:3d:21:0f:42:46:05:
24:09:db:ee:c1:33:56:8a:84:39:9e:24:62:44:08:
d4:5f:0c:ef:59:a1:6a:da:e8:77:0d:9d:ad:36:3a:
29:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:EF:D1:DD:D7:BE:BC:A4:D6:02:2A:22:3F:F3:51:34:3B:49:53:41
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/7CD1C82EDCF811ED9D16095AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.208.0/24
113.203.210.0/24
113.203.218.0/24
113.203.220.0/24
113.203.222.0-113.203.225.255
113.203.227.0/24
113.203.233.0/24
113.203.245.0/24
113.203.252.0/22
180.178.148.0/24
180.178.151.0/24
180.178.162.0/24
180.178.173.0/24
180.178.179.0/24
223.29.226.0/24
223.29.235.0-223.29.238.255
Signature Algorithm: sha256WithRSAEncryption
a1:91:2d:f7:41:16:33:57:5d:e7:82:6e:14:cb:0a:2f:aa:92:
01:89:33:54:f2:2d:39:f3:f1:7b:f1:b2:ca:2d:bb:29:56:a6:
47:72:5d:2a:e6:6a:f7:cf:e7:6e:8a:77:cd:e8:77:b8:47:7c:
3c:b5:7b:c3:03:9d:40:d1:da:ad:87:0f:3a:5f:63:76:9f:62:
71:3d:6b:48:f3:6d:8c:ed:4b:37:d6:2d:d9:bc:fe:7b:dc:42:
f1:e0:c5:2b:4e:c0:62:3b:80:54:96:ea:65:aa:21:0a:ea:9a:
2a:72:4e:e6:9f:f3:bc:c6:46:99:f7:00:be:77:bd:c0:87:f6:
a7:57:a9:b1:36:0d:64:0a:df:0e:a7:a2:3c:f9:26:db:cf:cf:
14:39:ec:ec:7d:86:18:0c:b5:80:94:b8:aa:d1:da:6c:a6:53:
7b:79:f9:6c:4e:42:2e:e1:73:e8:1d:1d:7a:d1:dc:ec:2b:74:
c4:a5:dc:5a:ab:48:fb:49:07:28:79:89:13:ec:2e:82:0d:be:
78:73:ca:bd:ed:ed:b8:33:65:61:40:4d:54:f7:8d:4a:40:cf:
c1:31:16:cc:54:ab:c7:04:3c:ab:01:63:48:cd:fa:a5:14:0d:
1b:41:4a:1f:f9:82:32:96:64:a1:7f:84:c1:1c:51:7f:0c:2c:
5f:9e:be:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:13 2023 by rpki-client on console-ams.rpki-client.org