Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/816EF04AC7A111ECA9C8F883C4F9AE02.roa
File: 816EF04AC7A111ECA9C8F883C4F9AE02.roa (raw, json)
Hash identifier: sOxCyFIFNwPiwqliQJiX3BQy+mIBKPAyARZPwtI1PpA=
Subject key identifier: B7:61:86:0D:54:FB:59:33:60:20:DA:8D:33:1E:06:0E:42:33:EB:F3
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 077B
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/816EF04AC7A111ECA9C8F883C4F9AE02.roa
Signing time: Fri 03 Jun 2022 10:22:36 +0000
ROA not before: Fri 03 Jun 2022 10:22:36 +0000
ROA not after: Thu 01 Dec 2022 00:00:00 +0000
asID: 9387
IP address blocks: 103.11.60.0/24 maxlen: 24
103.11.62.0/24 maxlen: 24
103.11.63.0/24 maxlen: 24
113.203.208.0/22 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.221.0/24 maxlen: 24
113.203.228.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.234.0/24 maxlen: 24
113.203.235.0/24 maxlen: 24
113.203.236.0/24 maxlen: 24
113.203.237.0/24 maxlen: 24
113.203.238.0/24 maxlen: 24
113.203.239.0/24 maxlen: 24
113.203.240.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
113.203.246.0/24 maxlen: 24
180.178.128.0/24 maxlen: 24
180.178.129.0/24 maxlen: 24
180.178.132.0/24 maxlen: 24
180.178.133.0/24 maxlen: 24
180.178.134.0/24 maxlen: 24
180.178.135.0/24 maxlen: 24
180.178.137.0/24 maxlen: 24
180.178.138.0/24 maxlen: 24
180.178.139.0/24 maxlen: 24
180.178.140.0/22 maxlen: 22
180.178.144.0/23 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.151.0/24 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.164.0/22 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.172.0/24 maxlen: 24
180.178.173.0/24 maxlen: 24
180.178.174.0/24 maxlen: 24
180.178.175.0/24 maxlen: 24
180.178.176.0/21 maxlen: 24
223.29.224.0/23 maxlen: 24
223.29.227.0/24 maxlen: 24
223.29.232.0/22 maxlen: 22
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
2401:4100::/33 maxlen: 33
2401:4100:8000::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1915 (0x77b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Validity
Not Before: Jun 3 10:22:36 2022 GMT
Not After : Dec 1 00:00:00 2022 GMT
Subject: CN=6299e0ec-fc15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3f:eb:c3:2c:0d:84:55:28:8e:8c:a7:c5:63:
34:d5:21:93:8d:31:ae:bf:51:04:9e:c4:95:4d:a6:
23:aa:9e:cd:df:4c:02:d2:58:7b:98:9c:bb:b9:14:
75:6a:b8:55:e0:6f:d4:22:8c:15:33:dd:31:2a:8d:
c7:2e:d3:71:16:16:ec:52:0a:39:21:3b:36:8d:b4:
98:c2:c8:07:0f:ee:6f:34:c2:70:e3:87:db:47:bd:
56:b8:e6:15:3b:a0:9d:e6:62:1f:96:4c:01:55:14:
b8:3f:af:13:e8:06:51:00:04:5c:eb:34:70:cf:cb:
9d:65:79:75:ae:0c:23:9a:5a:80:f9:86:89:2c:eb:
10:a9:37:f1:e1:b8:bf:6c:16:7c:dc:47:af:9a:1b:
a3:33:9d:3d:b5:d9:63:d1:18:2b:97:c5:c7:6e:c4:
61:81:3f:34:22:2e:80:e7:53:c9:a8:38:05:1d:1f:
e8:bf:26:c5:88:e4:4b:3d:a6:11:2b:d9:4d:9a:5f:
bf:73:ab:e9:5d:3f:a0:cb:ae:94:e4:74:df:3d:6a:
04:87:75:0e:cf:96:17:62:94:c8:68:09:c9:f6:0e:
9f:a2:fc:06:22:3e:43:5a:b3:2b:68:91:80:5e:ab:
9f:18:eb:43:ec:61:50:e7:89:de:91:e0:fc:ea:42:
3f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:61:86:0D:54:FB:59:33:60:20:DA:8D:33:1E:06:0E:42:33:EB:F3
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/816EF04AC7A111ECA9C8F883C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.60.0/24
103.11.62.0/23
113.203.208.0-113.203.212.255
113.203.216.0/24
113.203.221.0/24
113.203.228.0/24
113.203.231.0/24
113.203.234.0-113.203.240.255
113.203.242.0-113.203.246.255
180.178.128.0/23
180.178.132.0/22
180.178.137.0-180.178.145.255
180.178.150.0/23
180.178.161.0-180.178.162.255
180.178.164.0-180.178.168.255
180.178.172.0-180.178.183.255
223.29.224.0/23
223.29.227.0/24
223.29.232.0/21
IPv6:
2401:4100::-2401:4100:8000:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2a:3b:33:42:51:bb:9b:c1:5d:e5:4b:54:6a:a9:5c:6a:2d:36:
db:10:8f:9f:86:00:78:a0:ef:89:32:fd:38:14:42:64:82:38:
79:b1:bc:ad:95:6a:33:30:e3:29:1d:7d:ea:fd:ce:67:09:75:
c1:b6:ba:f9:8a:8b:a1:fd:fe:fa:76:e1:7c:40:be:3e:d8:5a:
5b:fe:b2:0c:b2:3d:0f:4d:6c:7b:d6:e0:b8:0e:56:1f:2b:3a:
d9:f8:ca:86:d0:6e:06:04:8c:12:97:7d:f3:73:6f:7d:0a:d3:
82:af:2f:7c:81:b0:42:1e:4e:1b:a0:46:f4:bd:19:2b:30:b9:
d3:89:7e:57:c0:11:22:2b:b1:85:2e:14:d5:99:ec:79:14:05:
ae:84:29:48:a0:7f:82:ce:eb:c9:47:2b:c9:b7:52:6a:c2:d1:
1a:7d:c8:a5:4f:30:ba:28:01:90:75:c0:2d:9c:44:5e:75:35:
d2:8c:57:db:85:0d:53:93:98:04:ec:71:f1:31:75:de:5d:95:
7c:12:b0:2d:c8:ed:1a:04:0c:2c:d0:2c:a1:2d:e5:ff:5f:ce:
ee:b3:4c:97:f2:05:5f:12:19:c0:d3:02:b7:5c:62:52:78:e3:
39:f2:60:6c:af:46:af:a2:c0:8a:74:a1:d2:c4:65:f1:07:8d:
2e:a5:eb:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:14 2023 by rpki-client on console-fra.rpki-client.org