Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/D3743568DDE811ED9A573F36C4F9AE02.roa
File: D3743568DDE811ED9A573F36C4F9AE02.roa (raw, json)
Hash identifier: oYW60sOb94yHAdOG+YPoc2/yCsmtgXy8zoYoeAOJU6s=
Subject key identifier: 7C:C6:15:21:BC:B1:E0:55:B1:1C:8F:E8:4F:A6:50:A8:C0:E6:BE:A4
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 0A22
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/D3743568DDE811ED9A573F36C4F9AE02.roa
Signing time: Tue 18 Apr 2023 12:59:17 +0000
ROA not before: Tue 18 Apr 2023 12:59:17 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 9387
IP address blocks: 113.203.209.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/23 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.226.0/24 maxlen: 24
113.203.234.0/24 maxlen: 24
113.203.235.0/24 maxlen: 24
113.203.236.0/24 maxlen: 24
113.203.237.0/24 maxlen: 24
113.203.238.0/24 maxlen: 24
113.203.239.0/24 maxlen: 24
113.203.240.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.160.0/20 maxlen: 20
180.178.160.0/24 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.164.0/22 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.172.0/24 maxlen: 24
180.178.174.0/24 maxlen: 24
180.178.175.0/24 maxlen: 24
180.178.178.0/24 maxlen: 24
180.178.180.0/22 maxlen: 24
223.29.224.0/20 maxlen: 20
2401:4100::/32 maxlen: 32
2401:4100::/33 maxlen: 33
2401:4100:8000::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2594 (0xa22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Validity
Not Before: Apr 18 12:59:17 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=643e9425-8319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e2:a6:e2:e0:75:73:d5:47:5e:1e:08:70:a5:
f5:d6:0c:4c:27:b4:58:03:c0:ed:bd:0d:b1:9b:c8:
33:5d:be:5c:8f:d5:ea:ec:e1:34:a3:f2:e3:8b:ab:
76:2d:6b:07:b1:2d:51:e6:2b:a4:d6:56:f8:75:50:
88:38:5a:f8:8e:61:dd:ec:1a:0a:ec:84:65:0d:a0:
3c:a5:6d:43:8a:75:4e:43:c9:eb:f4:dd:fc:ea:e0:
15:bb:09:48:ec:c4:8d:37:60:fe:80:13:8d:56:f4:
08:6f:46:2b:a9:8d:dc:dc:2a:8e:66:03:ac:f3:b6:
96:77:7c:9f:67:95:89:91:01:72:aa:29:40:cd:e7:
b8:12:9d:77:7c:7a:d9:8b:7b:1f:df:91:f2:db:13:
f5:fb:35:fe:f1:96:7c:6b:5a:54:51:5f:a9:a8:c9:
a4:7f:40:e3:32:83:28:16:7b:9a:fe:58:29:36:75:
21:03:bc:ee:b7:e2:3e:02:ed:2a:ba:3c:fa:d7:35:
2f:18:43:25:04:c6:b1:91:2d:5f:1e:72:5b:71:f7:
b0:f1:5c:de:8e:50:06:42:09:77:77:75:08:ed:77:
b2:2f:8b:8d:82:b9:4d:3e:1e:5d:f3:1c:fe:09:1f:
4f:9e:bd:ba:76:16:93:ba:fa:06:e8:64:60:93:1b:
75:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C6:15:21:BC:B1:E0:55:B1:1C:8F:E8:4F:A6:50:A8:C0:E6:BE:A4
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/D3743568DDE811ED9A573F36C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.209.0/24
113.203.211.0-113.203.216.255
113.203.219.0/24
113.203.226.0/24
113.203.234.0-113.203.240.255
113.203.244.0/24
180.178.144.0/24
180.178.149.0/24
180.178.160.0/20
180.178.178.0/24
180.178.180.0/22
223.29.224.0/20
IPv6:
2401:4100::/32
Signature Algorithm: sha256WithRSAEncryption
48:34:32:63:35:d5:83:7f:30:10:f9:c2:26:a6:79:43:a7:6b:
63:ed:48:9c:05:8f:af:09:d6:c8:1e:7f:f1:fa:f0:14:88:8a:
ac:8b:a2:fe:bc:b6:42:f8:5a:80:50:7d:03:7c:21:4b:fb:84:
27:3a:a5:60:da:2d:34:a7:42:1a:82:2a:c1:31:7d:a5:e2:12:
c0:ca:bf:96:6d:46:e0:3b:c2:b4:67:a6:c0:3d:92:2c:a5:3a:
8a:44:65:53:ed:1d:ca:ab:bc:a7:13:e0:76:05:6d:36:13:49:
2f:24:2d:12:8d:9a:cb:9a:35:fb:13:1f:4a:c4:69:a2:3a:61:
38:a3:70:38:88:d5:4f:ae:59:d6:60:2f:c5:9c:87:18:e0:ca:
73:9a:be:fb:20:2a:40:a0:b2:d4:f6:18:74:fc:98:28:44:97:
f5:15:e3:85:9f:01:4a:c0:ad:7b:93:f8:f6:1b:01:4c:39:50:
a8:92:0d:fa:c2:49:23:65:16:46:24:94:1c:f7:db:c4:52:e2:
a2:4d:32:29:24:d8:3b:fc:f1:46:08:51:ac:3b:af:d9:08:84:
86:a3:5b:08:42:41:96:26:b7:e0:cf:58:c9:3b:1d:3f:31:60:
2b:c8:2f:de:e6:c6:1e:e7:45:f1:7a:e2:37:e6:0a:0a:d0:a6:
89:53:63:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:13 2023 by rpki-client on console-ams.rpki-client.org