Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/77342D0A3B6511EEBD7EDC20C4F9AE02.roa
File: 77342D0A3B6511EEBD7EDC20C4F9AE02.roa (raw, json)
Hash identifier: gjuWH0MAfA5VE8bOdncYFOcDsHGY9UwsRt1PF5q7Gig=
Subject key identifier: E0:B5:77:41:B7:7E:A0:29:37:6D:DB:7A:27:79:7E:D4:CC:56:E5:4C
Certificate issuer: /CN=A91B5486/serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17
Certificate serial: 07DF
Authority key identifier: 2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/77342D0A3B6511EEBD7EDC20C4F9AE02.roa
Signing time: Tue 15 Aug 2023 12:21:31 +0000
ROA not before: Tue 15 Aug 2023 12:21:31 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 41095
IP address blocks: 45.248.200.0/22 maxlen: 24
103.6.128.0/22 maxlen: 23
103.6.130.0/23 maxlen: 24
103.23.168.0/22 maxlen: 22
103.23.168.0/24 maxlen: 24
103.23.169.0/24 maxlen: 24
103.23.170.0/24 maxlen: 24
103.23.171.0/24 maxlen: 24
103.217.160.0/22 maxlen: 22
103.217.160.0/24 maxlen: 24
103.217.161.0/24 maxlen: 24
103.217.162.0/24 maxlen: 24
103.217.163.0/24 maxlen: 24
103.242.72.0/22 maxlen: 24
220.158.132.0/22 maxlen: 24
2401:47c0::/32 maxlen: 32
2401:47c0:1000::/36 maxlen: 36
2401:47c0:1000::/40 maxlen: 40
2401:47c0:1100::/40 maxlen: 40
2401:47c0:1200::/40 maxlen: 40
2401:47c0:1300::/40 maxlen: 40
2401:47c0:1400::/40 maxlen: 40
2401:47c0:1500::/40 maxlen: 40
2401:47c0:1600::/40 maxlen: 40
2401:47c0:1700::/40 maxlen: 40
2401:47c0:1800::/40 maxlen: 40
2401:47c0:1a00::/40 maxlen: 40
2401:47c0:1b00::/40 maxlen: 40
2401:47c0:1c00::/40 maxlen: 40
2401:47c0:1d00::/40 maxlen: 40
2401:47c0:f000::/36 maxlen: 40
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2015 (0x7df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5486, serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17
Validity
Not Before: Aug 15 12:21:31 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=64db6dca-4c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e1:d7:b4:b8:8c:aa:3f:61:cb:90:e7:9f:d1:
33:bd:34:d8:b2:3b:94:cb:43:ee:bb:ee:7b:16:da:
28:ee:a8:5c:c6:fb:be:35:b1:f5:e6:b6:46:1a:6d:
eb:16:89:cf:1b:e6:ec:a7:a9:19:d5:3e:d7:61:9a:
4b:2c:c8:36:92:2b:22:e5:dd:c4:83:3d:4e:ed:f1:
93:84:e2:4f:f8:5c:91:d6:69:c5:ae:08:0c:85:d8:
55:7d:ee:61:c8:b1:02:4b:90:cf:b3:82:29:02:1e:
de:9d:a6:da:c3:28:b8:7c:cb:bd:f8:5a:ed:6d:1a:
3a:ad:25:c7:5c:20:00:f9:f3:62:50:7b:b5:8c:53:
19:18:2b:50:2a:9d:cb:03:71:68:bd:d9:54:75:88:
de:9c:e3:b0:64:10:90:52:52:dd:bc:f6:fc:53:a8:
1b:56:99:ac:e9:23:00:5e:55:0f:47:c8:f0:ae:1c:
3c:fb:bf:88:64:39:84:7f:70:6b:16:77:61:bc:c8:
5a:c5:b5:7e:75:5d:90:b4:b2:93:08:ab:5f:df:86:
db:bc:56:c2:9b:eb:01:5c:e0:8b:87:80:5c:de:ef:
08:ee:3c:ef:99:49:83:95:37:68:1e:45:c6:09:12:
fc:00:26:ab:45:4f:84:4e:6c:7b:2c:96:90:1e:bd:
e6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B5:77:41:B7:7E:A0:29:37:6D:DB:7A:27:79:7E:D4:CC:56:E5:4C
X509v3 Authority Key Identifier:
keyid:2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/77342D0A3B6511EEBD7EDC20C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.248.200.0/22
103.6.128.0/22
103.23.168.0/22
103.217.160.0/22
103.242.72.0/22
220.158.132.0/22
IPv6:
2401:47c0::/32
Signature Algorithm: sha256WithRSAEncryption
04:1f:3f:5b:55:13:75:7c:18:41:8c:b0:42:36:d8:9d:67:c6:
67:4b:0b:8a:34:df:75:68:39:30:df:fa:8a:57:ad:2c:9a:cd:
2a:c5:b4:79:b7:31:14:22:8d:20:c5:88:e5:f4:95:18:ee:17:
84:81:89:f1:3b:bc:41:36:38:4c:b2:ea:ca:62:9f:56:56:2b:
9c:a3:cc:3c:00:fd:2e:cf:59:3b:c5:22:48:fa:33:c4:03:d0:
60:0b:8d:77:9e:5b:0f:0a:5b:6a:d7:c8:5e:8b:98:1d:c2:99:
01:ce:22:59:36:fc:a1:b4:9a:ce:c4:f5:6b:6c:21:dd:ff:f3:
26:cf:20:a9:18:6e:12:46:44:5c:3f:16:de:ce:d7:87:d0:42:
10:52:92:32:82:69:38:19:ff:8d:4f:16:32:56:dc:64:de:b0:
25:b2:e3:78:f6:8d:a2:67:27:c9:ab:32:59:84:b4:0b:cd:7e:
b7:64:f3:5b:26:14:9a:39:64:db:cf:f7:a1:4f:16:8e:28:66:
4f:1d:32:29:93:f8:aa:a5:9e:47:54:db:c9:4f:9f:d2:f2:b2:
d7:89:a3:e6:34:c7:9d:53:a4:f9:05:b3:52:61:28:3c:0e:1b:
92:8e:25:65:8e:c0:a2:91:bf:52:17:d6:12:5b:4e:01:e7:ef:
d8:44:cf:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 06:30:49 2025 by rpki-client