Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/D53023D6328911ED91324B78C4F9AE02.roa
File: D53023D6328911ED91324B78C4F9AE02.roa (raw, json)
Hash identifier: GMx6qHyM49Niz16coB6gUVqj8LqJ6fOPRf1b34JAIFg=
Subject key identifier: 5C:BF:1A:74:74:C9:4D:D3:30:44:78:78:4A:04:EC:3E:93:FF:99:26
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 0880
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/D53023D6328911ED91324B78C4F9AE02.roa
Signing time: Mon 12 Sep 2022 11:38:25 +0000
ROA not before: Mon 12 Sep 2022 11:38:24 +0000
ROA not after: Thu 01 Dec 2022 00:00:00 +0000
asID: 9387
IP address blocks: 103.11.60.0/24 maxlen: 24
103.11.62.0/24 maxlen: 24
103.11.63.0/24 maxlen: 24
113.203.208.0/22 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/23 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.218.0/23 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.228.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.234.0/24 maxlen: 24
113.203.235.0/24 maxlen: 24
113.203.236.0/24 maxlen: 24
113.203.237.0/24 maxlen: 24
113.203.238.0/24 maxlen: 24
113.203.239.0/24 maxlen: 24
113.203.240.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
113.203.246.0/24 maxlen: 24
180.178.128.0/24 maxlen: 24
180.178.129.0/24 maxlen: 24
180.178.132.0/24 maxlen: 24
180.178.133.0/24 maxlen: 24
180.178.134.0/24 maxlen: 24
180.178.135.0/24 maxlen: 24
180.178.137.0/24 maxlen: 24
180.178.138.0/24 maxlen: 24
180.178.139.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.151.0/24 maxlen: 24
180.178.152.0/22 maxlen: 24
180.178.156.0/23 maxlen: 24
180.178.159.0/24 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.164.0/22 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.172.0/24 maxlen: 24
180.178.173.0/24 maxlen: 24
180.178.174.0/24 maxlen: 24
180.178.175.0/24 maxlen: 24
180.178.180.0/22 maxlen: 24
223.29.224.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
223.29.226.0/24 maxlen: 24
223.29.232.0/22 maxlen: 22
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
2401:4100::/33 maxlen: 33
2401:4100:8000::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2176 (0x880)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Validity
Not Before: Sep 12 11:38:24 2022 GMT
Not After : Dec 1 00:00:00 2022 GMT
Subject: CN=631f1a30-9f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b3:db:b4:79:f8:2c:e4:11:bf:6e:e9:79:37:
09:ec:9e:44:2e:7e:a1:dc:bb:80:a0:7c:4d:51:d5:
dd:07:88:81:d5:04:3b:07:05:30:70:a8:02:20:bd:
b8:1c:af:9f:da:63:33:0a:22:4e:0a:10:7c:b2:e3:
90:b9:d4:cd:d7:bb:6d:33:2d:b5:2e:8b:c3:5f:cf:
f1:3f:b1:58:87:52:7d:e2:ca:17:9d:17:04:a5:99:
14:de:5e:bf:54:d8:75:9d:a1:d0:dd:39:95:0c:63:
78:97:2f:f9:0a:b4:a9:38:96:4f:bd:d7:27:8b:14:
38:7e:27:44:34:65:02:7e:3c:57:0f:cf:13:f6:10:
14:26:83:43:25:5f:be:78:e8:8b:b7:97:fc:14:83:
7c:c8:ca:d6:06:35:7d:27:37:0e:68:b8:84:fa:d9:
ce:3e:c9:83:39:31:20:c7:de:48:06:a0:b3:65:71:
40:44:d2:88:f1:bf:db:ba:60:29:c3:9b:05:e0:32:
67:bf:cf:f6:82:3d:a0:6b:1d:9f:2c:7f:34:37:12:
e8:5f:f9:37:7b:b8:bc:b7:66:1b:4f:0d:7e:0e:90:
f6:a8:37:68:07:35:d7:b0:db:5a:8d:e1:3a:fb:ae:
71:9a:e0:eb:68:cd:d3:90:7d:bd:a4:15:5d:15:cd:
e0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:BF:1A:74:74:C9:4D:D3:30:44:78:78:4A:04:EC:3E:93:FF:99:26
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/D53023D6328911ED91324B78C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.60.0/24
103.11.62.0/23
113.203.208.0-113.203.219.255
113.203.223.0/24
113.203.228.0/23
113.203.231.0/24
113.203.234.0-113.203.240.255
113.203.242.0-113.203.246.255
180.178.128.0/23
180.178.132.0/22
180.178.137.0-180.178.139.255
180.178.144.0/24
180.178.149.0-180.178.157.255
180.178.159.0-180.178.162.255
180.178.164.0-180.178.168.255
180.178.172.0/22
180.178.180.0/22
223.29.224.0-223.29.226.255
223.29.232.0/21
IPv6:
2401:4100::-2401:4100:8000:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9e:18:50:4f:19:2d:18:8e:20:e4:6e:11:b4:f9:e0:cc:5b:e8:
fa:6d:9d:b9:ad:e7:23:ef:af:9f:86:e3:db:87:75:fc:8d:22:
6c:85:15:52:7e:86:46:8a:b0:ee:47:9c:73:2b:87:18:4e:d3:
60:4f:a6:91:04:3f:05:af:b8:63:5f:71:fe:85:ef:da:f2:54:
6f:ed:ec:a3:af:d3:a7:66:99:92:50:1e:f2:8e:cc:c0:71:75:
c5:a8:c2:00:ee:f3:aa:e3:1a:24:51:88:0a:03:5e:e2:c5:13:
6c:e1:45:de:4d:e9:51:32:5a:01:6f:4b:55:88:66:a3:cd:bd:
ab:e8:99:32:57:61:97:14:ba:a1:f2:6d:e8:40:a9:c5:ea:7f:
10:b8:03:cf:e2:b9:b4:f5:30:fe:87:be:7f:4e:24:75:6d:23:
a5:34:88:98:e2:22:e3:1e:67:a2:39:20:5a:e3:b6:16:6a:22:
2e:15:2a:5a:6c:c9:b2:68:e1:e9:4b:5d:7d:44:bd:5d:7b:bc:
79:6b:ff:bc:02:69:78:56:6d:d9:e1:4d:cc:70:56:3c:54:af:
ef:bc:56:d9:d4:ab:2a:4e:ad:a1:c5:dd:87:d1:30:2a:bd:57:
a9:8c:f5:ad:23:e8:b1:01:07:14:5b:f1:e0:5b:94:2c:a6:13:
3b:69:44:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:13 2023 by rpki-client on console-ams.rpki-client.org