Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/95AE0E7CC24D11EDBE412F0AC4F9AE02.roa
File: 95AE0E7CC24D11EDBE412F0AC4F9AE02.roa (raw, json)
Hash identifier: KIaJ6kIL/qdG0oMl67/b4U8+ehik1cSA/AbRxC5Uvcg=
Subject key identifier: E0:8B:23:99:39:D1:0D:BD:8D:E0:DB:F7:49:0A:3F:11:EC:63:4B:68
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 09B5
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/95AE0E7CC24D11EDBE412F0AC4F9AE02.roa
Signing time: Tue 14 Mar 2023 09:50:00 +0000
ROA not before: Tue 14 Mar 2023 09:50:00 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 9387
IP address blocks: 103.11.60.0/22 maxlen: 22
103.11.60.0/24 maxlen: 24
103.11.62.0/24 maxlen: 24
113.203.209.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/23 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.226.0/24 maxlen: 24
113.203.234.0/24 maxlen: 24
113.203.235.0/24 maxlen: 24
113.203.236.0/24 maxlen: 24
113.203.237.0/24 maxlen: 24
113.203.238.0/24 maxlen: 24
113.203.239.0/24 maxlen: 24
113.203.240.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.246.0/24 maxlen: 24
180.178.128.0/21 maxlen: 21
180.178.128.0/22 maxlen: 22
180.178.128.0/24 maxlen: 24
180.178.129.0/24 maxlen: 24
180.178.132.0/24 maxlen: 24
180.178.133.0/24 maxlen: 24
180.178.134.0/24 maxlen: 24
180.178.135.0/24 maxlen: 24
180.178.136.0/21 maxlen: 21
180.178.137.0/24 maxlen: 24
180.178.138.0/24 maxlen: 24
180.178.139.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.160.0/20 maxlen: 20
180.178.160.0/24 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.172.0/24 maxlen: 24
180.178.174.0/24 maxlen: 24
180.178.175.0/24 maxlen: 24
180.178.178.0/24 maxlen: 24
180.178.180.0/22 maxlen: 24
180.178.184.0/22 maxlen: 22
223.29.224.0/20 maxlen: 20
223.29.224.0/24 maxlen: 24
2401:4100::/32 maxlen: 32
2401:4100::/33 maxlen: 33
2401:4100:8000::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2485 (0x9b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Validity
Not Before: Mar 14 09:50:00 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=64104348-2c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7e:6b:96:66:45:d3:49:72:0b:f2:be:b4:fe:
be:49:19:ca:ef:37:fe:57:c3:31:44:87:ec:3e:9e:
5b:e8:76:d0:2f:b7:8e:e3:04:44:a5:ae:32:46:83:
7d:c2:c9:8b:74:3d:bc:6a:19:72:6b:af:5a:02:f6:
64:ab:7b:48:f5:f4:5f:2a:32:ee:78:fb:e1:25:e7:
2b:42:06:f4:26:0e:df:27:47:95:71:58:24:ce:5b:
77:e6:71:88:15:44:33:0e:d4:cc:ef:17:da:c6:0e:
c4:47:59:6d:18:e3:aa:aa:d7:48:f3:28:cb:c3:88:
a3:c9:9b:bc:4e:cc:8e:54:07:d4:3a:70:b6:3b:da:
1f:5b:b7:f8:e9:42:e4:c7:6d:84:4e:1e:e5:36:b0:
92:f0:a1:5c:26:8a:bf:ee:4c:c0:41:ed:dd:75:e7:
e5:78:e2:e5:0b:ab:73:0f:1a:fa:ed:7a:a7:13:30:
aa:c4:1e:ba:6e:f5:4d:44:a7:e1:74:11:2a:2d:9b:
82:e2:ce:14:e8:a6:22:fb:18:b7:ee:5b:c2:38:4e:
8e:3f:73:ad:ee:0e:1c:4b:7a:79:43:a3:8c:bb:4b:
16:70:2c:b9:30:a4:43:a3:3f:f8:05:09:03:85:d8:
94:51:b5:05:04:c7:a5:82:4e:d7:8c:9b:e0:dc:c2:
2b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8B:23:99:39:D1:0D:BD:8D:E0:DB:F7:49:0A:3F:11:EC:63:4B:68
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/95AE0E7CC24D11EDBE412F0AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.60.0/22
113.203.209.0/24
113.203.211.0-113.203.217.255
113.203.219.0/24
113.203.226.0/24
113.203.234.0-113.203.240.255
113.203.243.0-113.203.244.255
113.203.246.0/24
180.178.128.0-180.178.144.255
180.178.149.0/24
180.178.160.0/20
180.178.178.0/24
180.178.180.0-180.178.187.255
223.29.224.0/20
IPv6:
2401:4100::/32
Signature Algorithm: sha256WithRSAEncryption
a1:58:4f:fa:e9:ec:56:1c:64:1f:35:57:83:18:f2:11:fc:02:
45:66:8f:37:15:4e:4c:c8:e6:8c:4f:20:37:ed:4d:6c:94:cc:
c1:81:b4:8b:2d:f1:61:d3:ab:3b:67:ee:1c:61:3e:07:8a:73:
fe:78:36:8f:1c:8f:64:05:33:2f:f6:c9:9c:3e:5b:e6:d9:52:
9a:83:e6:9f:f8:15:0b:0a:26:90:04:bf:19:09:4d:29:4a:02:
b0:1c:c1:27:40:80:6d:74:89:25:2b:c3:fe:35:15:76:40:b7:
13:f0:a6:8a:72:21:ff:e2:6b:10:c1:a7:33:71:92:60:aa:04:
97:cd:99:73:3c:29:55:1d:de:d3:5d:23:34:4d:75:8a:ac:06:
71:c9:5a:df:98:3d:ce:c3:b3:1c:a4:51:2b:6c:6e:95:75:f4:
cb:43:5d:92:02:2f:ef:f0:68:93:af:2d:2f:05:05:5b:ca:8d:
03:cd:e8:53:9d:4c:f2:13:31:0a:40:ec:fc:d8:23:d0:a2:6d:
76:cc:c5:32:8d:6a:4b:6b:c2:5e:7b:e0:64:8e:b6:97:a5:d0:
30:ae:50:f8:72:be:47:19:5f:5c:80:dd:48:98:6c:b5:f0:a6:
c3:fe:38:f6:bd:9a:ca:7e:d2:bb:92:23:e7:de:24:c9:c4:16:
7b:2a:32:ce
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:13 2023 by rpki-client on console-ams.rpki-client.org