Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/D4E71724A09611ED8E249187C4F9AE02.roa
File: D4E71724A09611ED8E249187C4F9AE02.roa (raw, json)
Hash identifier: DFBj2AHp30l91MPEhSU9F2d9ozyvXkHLlOUK3LAVh7o=
Subject key identifier: E0:48:0F:24:77:2F:49:9B:DF:E3:8C:AB:9F:C9:FC:F6:BB:E2:51:45
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 096A
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/D4E71724A09611ED8E249187C4F9AE02.roa
Signing time: Fri 03 Feb 2023 14:48:20 +0000
ROA not before: Fri 03 Feb 2023 14:48:20 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 9387
IP address blocks: 103.11.60.0/24 maxlen: 24
103.11.61.0/24 maxlen: 24
103.11.62.0/24 maxlen: 24
113.203.208.0/22 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/23 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.218.0/23 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.224.0/22 maxlen: 22
113.203.228.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.234.0/24 maxlen: 24
113.203.235.0/24 maxlen: 24
113.203.236.0/24 maxlen: 24
113.203.237.0/24 maxlen: 24
113.203.238.0/24 maxlen: 24
113.203.239.0/24 maxlen: 24
113.203.240.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
113.203.246.0/24 maxlen: 24
113.203.252.0/22 maxlen: 22
180.178.128.0/24 maxlen: 24
180.178.129.0/24 maxlen: 24
180.178.132.0/24 maxlen: 24
180.178.133.0/24 maxlen: 24
180.178.134.0/24 maxlen: 24
180.178.135.0/24 maxlen: 24
180.178.137.0/24 maxlen: 24
180.178.138.0/24 maxlen: 24
180.178.139.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.151.0/24 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.164.0/22 maxlen: 24
180.178.172.0/24 maxlen: 24
180.178.173.0/24 maxlen: 24
180.178.174.0/24 maxlen: 24
180.178.175.0/24 maxlen: 24
180.178.176.0/24 maxlen: 24
180.178.177.0/24 maxlen: 24
180.178.179.0/24 maxlen: 24
180.178.180.0/22 maxlen: 24
180.178.184.0/22 maxlen: 22
223.29.224.0/24 maxlen: 24
223.29.232.0/22 maxlen: 22
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
2401:4100::/33 maxlen: 33
2401:4100:8000::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2410 (0x96a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Validity
Not Before: Feb 3 14:48:20 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=63dd1eb4-e4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:40:17:ff:ce:c2:fb:08:7f:8a:60:e3:48:e6:
db:18:b8:d9:6e:24:75:df:37:0b:38:d3:b5:2c:bc:
56:c1:7f:77:ac:8f:5d:b5:c2:f9:dc:e3:92:fb:2f:
e5:d9:65:60:7b:9c:38:d4:cc:d8:b6:80:a8:34:0f:
34:09:2e:4a:89:8b:6b:f1:53:6e:87:13:aa:a3:34:
8f:12:15:d3:70:59:ae:af:c5:40:cb:4f:75:fc:a1:
50:6b:db:08:71:5b:d3:37:d8:52:31:2d:33:73:74:
0a:89:b8:a8:9a:0c:ad:f5:9c:b3:c7:64:55:f0:d5:
95:52:29:3e:ea:48:74:4e:93:45:0b:67:d8:1e:48:
17:5b:78:93:87:8e:9e:b6:8b:43:70:aa:dd:0d:d0:
c9:51:59:09:4f:c5:89:e3:46:d5:ed:0a:0e:34:e0:
ef:41:b8:73:cc:c9:bc:e7:88:69:25:20:1e:3f:14:
16:a0:23:95:26:71:55:87:c9:c8:77:56:04:17:8f:
c3:f2:34:95:30:e4:a4:e1:39:b1:6f:e4:a5:0e:b1:
b8:76:9d:71:7f:ee:69:2b:37:7b:fa:b1:26:8f:dc:
8d:77:45:55:90:af:04:5d:34:3e:34:f3:09:a5:0e:
ae:6c:b3:12:bf:1b:95:93:e0:a4:62:bf:45:db:4d:
3f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:48:0F:24:77:2F:49:9B:DF:E3:8C:AB:9F:C9:FC:F6:BB:E2:51:45
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/D4E71724A09611ED8E249187C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.60.0-103.11.62.255
113.203.208.0-113.203.220.255
113.203.222.0-113.203.229.255
113.203.231.0/24
113.203.233.0-113.203.240.255
113.203.243.0-113.203.246.255
113.203.252.0/22
180.178.128.0/23
180.178.132.0/22
180.178.137.0-180.178.139.255
180.178.144.0/24
180.178.149.0/24
180.178.151.0/24
180.178.160.0-180.178.162.255
180.178.164.0/22
180.178.172.0-180.178.177.255
180.178.179.0-180.178.187.255
223.29.224.0/24
223.29.232.0/21
IPv6:
2401:4100::-2401:4100:8000:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
14:3e:85:ab:9f:0a:48:c2:d1:ff:eb:17:30:03:ce:6e:74:90:
85:06:56:dc:15:1f:b3:b4:e6:38:b9:9e:4d:00:5d:14:cb:62:
6c:fb:15:00:c9:3a:e1:01:fa:ec:5a:d1:e5:d5:a5:05:14:cf:
9d:50:99:1d:68:45:de:42:b7:be:43:67:92:4d:5f:b0:0d:8e:
05:34:1d:12:60:bb:8a:36:f7:fe:32:38:86:2f:7b:71:73:1e:
aa:d8:8b:6b:bd:d2:f5:09:66:83:10:34:e3:c3:52:b7:f4:14:
e8:3a:b8:98:69:3e:a2:1d:cf:e4:26:8d:5d:89:93:fc:71:4f:
aa:23:7b:de:79:eb:b6:98:29:50:1d:80:3b:79:2e:c7:f5:af:
68:41:a8:da:aa:cd:f7:b0:50:5c:05:f3:19:d1:41:2c:df:b4:
3b:b5:32:94:a4:e7:1b:42:8a:06:ba:a6:cb:f1:08:2f:ac:55:
ff:3b:50:f6:5d:6a:c5:08:ef:59:c4:50:67:fb:46:4c:75:b4:
72:91:7d:c7:e6:2c:9d:e1:04:c9:d3:46:6d:9b:c3:19:af:c7:
6e:05:ce:a8:07:9d:83:55:ae:77:22:2c:86:7a:58:77:eb:d1:
ca:42:b0:28:6c:d5:c2:97:63:2a:1d:b6:1f:07:da:30:4c:9a:
85:ee:be:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:13 2023 by rpki-client on console-ams.rpki-client.org