Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/9E5AF612533C11EAA9A27E3BC4F9AE02.roa
File: 9E5AF612533C11EAA9A27E3BC4F9AE02.roa (raw, json)
Hash identifier: JFnpFkcqUIrwOrAWF0fHd5CXfJS9C4Y4IRXUrpVKolo=
Subject key identifier: 87:07:CF:98:AE:19:62:A8:3A:E0:8F:84:D7:11:20:C2:4D:2E:FC:40
Certificate issuer: /CN=A91BCB3A/serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96
Certificate serial: 0AE4
Authority key identifier: EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/9E5AF612533C11EAA9A27E3BC4F9AE02.roa
Signing time: Mon 24 Feb 2025 20:08:29 +0000
ROA not before: Mon 24 Feb 2025 20:08:29 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 140072
IP address blocks: 103.52.28.0/22 maxlen: 24
103.117.92.0/22 maxlen: 22
103.117.92.0/23 maxlen: 23
103.117.92.0/24 maxlen: 24
103.117.93.0/24 maxlen: 24
103.117.94.0/23 maxlen: 23
103.117.94.0/24 maxlen: 24
103.117.95.0/24 maxlen: 24
103.148.22.0/23 maxlen: 23
103.148.22.0/24 maxlen: 24
103.148.23.0/24 maxlen: 24
2405:c840::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2788 (0xae4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BCB3A, serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96
Validity
Not Before: Feb 24 20:08:29 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67bcd1bd-7876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:46:87:ac:37:c4:8a:ed:e5:73:e0:a5:f9:fe:
42:a4:13:c6:c7:fe:99:f3:2c:0f:ca:a9:5c:81:59:
f4:bd:28:d1:db:a7:ec:b9:16:cb:4d:58:64:40:9d:
37:17:49:38:54:c7:01:23:6a:1f:5e:db:17:02:ad:
a3:c6:c3:1b:8d:21:fe:41:17:80:10:01:35:92:25:
36:bc:dc:04:a1:ae:18:db:b4:cc:7f:13:0c:5b:c2:
fb:c5:76:c0:25:49:0c:d2:52:92:83:5e:4c:ad:99:
d7:cf:de:67:90:c2:04:8d:5c:39:f5:ae:59:08:a0:
0a:ec:89:58:8c:b6:9a:91:35:ca:38:e0:5c:cb:ff:
49:15:fc:a6:b6:4d:ec:77:b3:1b:04:7d:b0:04:cb:
03:d6:0d:18:ec:51:a0:98:a8:ff:c6:b4:fd:7d:3f:
b3:1b:80:eb:23:7a:b8:07:91:5b:1c:4e:79:78:04:
ab:4f:13:c3:c1:96:3f:35:3f:bd:60:2d:08:a6:ba:
ed:59:11:9f:7f:0b:98:4f:85:e6:29:40:8e:22:3d:
58:62:21:f5:66:1b:f3:f6:e5:4a:d7:2e:c3:c3:3c:
eb:7c:89:ca:a4:0d:e4:25:75:f9:48:c2:35:06:ac:
20:43:ac:7c:d1:a0:c5:f5:1f:d2:b9:a8:fd:9b:c9:
97:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:07:CF:98:AE:19:62:A8:3A:E0:8F:84:D7:11:20:C2:4D:2E:FC:40
X509v3 Authority Key Identifier:
keyid:EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/9E5AF612533C11EAA9A27E3BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.52.28.0/22
103.117.92.0/22
103.148.22.0/23
IPv6:
2405:c840::/32
Signature Algorithm: sha256WithRSAEncryption
3c:56:b1:54:87:73:20:62:1a:6f:4e:98:03:51:26:c7:44:96:
e9:54:1d:e3:70:7a:bd:54:e4:73:5c:1b:0e:ca:c8:3e:74:f5:
81:b7:eb:5f:66:a7:4b:88:61:35:4d:42:e7:47:e3:b3:6e:5e:
3a:39:17:29:a9:04:81:5d:7a:49:7c:91:6f:eb:06:27:77:5b:
80:4f:48:36:0f:4a:75:6c:1c:1d:16:e0:2c:59:53:d9:14:96:
6c:04:b5:ed:0d:cc:1e:39:1b:a7:6e:fd:4d:af:a2:8a:e3:08:
d0:a9:71:8e:81:43:a4:7d:c9:25:21:f0:20:2e:ff:24:ec:6c:
10:b0:ac:dc:1b:d1:49:c4:e1:38:18:b9:25:76:9d:64:38:78:
1d:a8:13:03:1b:49:3b:52:09:13:0d:96:b0:0b:60:c6:cc:d9:
18:f3:96:9d:aa:7d:ba:c0:36:a3:aa:c0:ef:bc:de:64:d1:4f:
93:33:31:16:84:31:9d:ec:e8:6b:0a:2e:2d:29:7b:bf:a3:0b:
3a:f9:47:b5:63:3b:13:51:4e:f8:cb:56:77:3d:45:f0:1a:51:
7a:db:9a:71:99:22:8d:97:b1:57:01:d7:5d:cd:e4:6b:c0:9f:
4c:64:5c:b3:83:b9:e5:47:d4:52:f1:af:7b:3a:7e:98:47:79:
50:01:b2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:48:39 2025 by rpki-client