Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4CAF05EA143B11F0B4AFF381C4F9AE02.roa
File: 4CAF05EA143B11F0B4AFF381C4F9AE02.roa (raw, json)
Hash identifier: lwcjYodHqPM/vsaimLaXaDc3MdbXbowz5O3QsublQow=
Subject key identifier: 97:82:8E:99:46:BA:99:86:B7:FC:B6:18:55:D4:F8:DE:91:46:FB:07
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: ADCD
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4CAF05EA143B11F0B4AFF381C4F9AE02.roa
Signing time: Tue 08 Apr 2025 05:35:37 +0000
ROA not before: Tue 08 Apr 2025 05:35:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138716
IP address blocks: 103.160.132.0/23 maxlen: 24
103.161.26.0/23 maxlen: 24
2001:df1:4fc0::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44493 (0xadcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 8 05:35:37 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67f4b5a9-d386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cd:72:ff:1a:7c:18:27:24:02:6e:1b:ad:95:
40:dd:78:31:2e:42:4b:8d:56:b8:86:62:f1:92:b6:
f6:a9:d5:15:ec:8c:63:e9:b7:be:1c:bf:d1:d2:e9:
2d:d9:75:f9:a0:27:e6:d6:41:9c:ab:c3:29:68:b8:
0e:dc:7b:aa:f5:ee:37:c1:79:5e:78:df:1d:2f:7b:
a0:73:75:0e:9a:63:94:a5:9c:8d:a6:31:1c:a1:fc:
c7:98:31:38:bb:74:40:38:0a:2f:dd:e9:52:4f:0f:
c3:f8:a6:b8:35:33:c8:24:6c:9c:30:9b:13:49:8a:
92:2f:1a:9a:34:24:25:6f:a6:4a:79:56:64:10:9d:
4e:11:c0:71:16:71:5e:2d:4f:c6:b5:be:40:89:25:
49:74:68:2c:d1:fb:09:d6:60:f0:0f:82:71:a1:95:
f4:f6:4b:48:42:69:7b:d6:24:bc:44:b0:f3:65:35:
f3:22:62:89:2e:97:34:36:6e:db:bd:8f:aa:cd:18:
47:7f:d5:da:ff:23:29:c3:95:b9:5a:55:63:08:e7:
7a:6f:84:63:4c:24:3b:ff:66:8c:cb:f7:b5:2e:16:
aa:7c:c3:ac:d1:d0:e5:de:30:1a:10:9a:2f:c8:11:
25:76:1c:e5:f8:b0:12:fa:fb:8c:5e:33:8d:0d:45:
df:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:82:8E:99:46:BA:99:86:B7:FC:B6:18:55:D4:F8:DE:91:46:FB:07
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4CAF05EA143B11F0B4AFF381C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.160.132.0/23
103.161.26.0/23
IPv6:
2001:df1:4fc0::/48
Signature Algorithm: sha256WithRSAEncryption
11:89:db:60:27:79:b5:c3:e8:f0:21:4b:ee:5d:93:c0:7d:d9:
8d:61:87:54:f4:1e:cc:6f:f3:ee:5d:3b:1e:d0:5b:f6:8d:92:
4e:31:3c:d3:0f:e0:ad:0a:c9:17:c8:9a:1e:90:2c:3a:64:c4:
44:1e:cb:d3:01:96:a2:24:d1:24:7c:6e:e9:2a:3c:3e:ea:3b:
47:9d:22:fd:09:41:a2:a0:67:4c:52:d1:cc:cd:e8:78:2f:04:
5f:4c:5a:4b:e6:1e:66:5b:62:87:65:0f:70:d2:9c:11:da:0e:
dd:f2:4d:f7:5b:53:af:13:d2:8a:08:cd:5b:fb:33:4b:81:de:
e8:fc:7b:57:b7:58:49:1b:68:62:9a:0f:cb:67:46:5e:48:7e:
6b:a0:1e:09:30:39:8c:0b:50:0a:d9:f3:59:8b:93:da:5b:f6:
e1:82:6f:bf:3c:d6:f0:1c:53:51:cb:9a:ee:26:c9:bd:97:cf:
13:59:09:57:41:aa:9e:f9:f8:c2:d6:53:96:49:d1:7e:c9:ba:
36:76:2a:64:f1:40:d1:f4:cd:0f:e4:6c:f3:d0:8c:eb:41:dc:
2a:68:af:42:12:0e:9c:e1:27:3b:8c:36:fa:61:dd:cd:3d:2d:
22:46:52:c4:09:d1:2d:e4:8c:ec:b6:57:c8:7a:e0:24:7a:01:
54:eb:a8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:35:30 2025 by rpki-client