Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/62785EE0FCFA11EC949B6F2AC4F9AE02.roa
File: 62785EE0FCFA11EC949B6F2AC4F9AE02.roa (raw, json)
Hash identifier: Kv5fuKEaAu4rDs57l+Smr4AZ0q/jIiA6sEBW2CIpLRY=
Subject key identifier: 51:DF:56:41:A8:4A:EB:3E:FE:E9:1D:56:2F:70:5D:7A:25:A2:E3:F3
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 07CE
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/62785EE0FCFA11EC949B6F2AC4F9AE02.roa
Signing time: Wed 06 Jul 2022 07:08:07 +0000
ROA not before: Wed 06 Jul 2022 07:08:07 +0000
ROA not after: Thu 01 Dec 2022 00:00:00 +0000
asID: 208485
IP address blocks: 113.203.229.0/24 maxlen: 24
113.203.230.0/24 maxlen: 24
113.203.247.0/24 maxlen: 24
180.178.145.0/24 maxlen: 24
180.178.160.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1998 (0x7ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7, serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Validity
Not Before: Jul 6 07:08:07 2022 GMT
Not After : Dec 1 00:00:00 2022 GMT
Subject: CN=62c534d6-5361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:97:ec:9a:0f:86:f5:66:31:66:7c:62:62:99:
c6:67:01:52:d7:04:03:6a:90:75:7a:97:77:51:f8:
44:c3:1e:15:0f:f5:74:a4:b2:09:9f:21:b3:98:d8:
ce:a0:ee:28:2e:0b:3a:b2:1b:65:bf:56:86:f5:8c:
63:ae:da:7c:a6:91:fb:96:e6:65:7e:d0:17:e7:e9:
1e:2a:59:5d:0e:00:d5:fc:7c:f0:8f:6a:7d:c5:dd:
7b:c7:da:74:a9:41:46:91:45:4c:79:39:d4:a9:af:
d0:fe:ec:88:87:d2:69:1b:45:16:6b:50:51:30:b6:
14:66:b5:6f:b1:50:53:38:aa:98:72:d3:e8:52:c8:
86:7e:bb:74:70:58:2c:7b:4a:32:0b:9d:11:11:0c:
10:ef:95:07:7b:70:f0:fc:18:4e:03:3c:cb:65:5d:
26:37:f4:c8:53:4a:6c:18:85:7b:0c:d2:34:7b:e9:
58:cc:d2:04:00:92:f9:de:63:95:18:4d:f1:a0:01:
b4:9d:a2:ec:9c:0a:a0:55:d5:93:e3:0c:3b:a1:a1:
e1:60:b6:b1:5e:5e:6e:f6:9a:18:2b:3c:6c:99:82:
a1:20:e3:eb:ae:17:8f:e8:15:08:02:37:a7:6c:ae:
52:fc:20:33:f3:15:a5:a5:34:94:fd:5b:30:f5:ba:
f3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DF:56:41:A8:4A:EB:3E:FE:E9:1D:56:2F:70:5D:7A:25:A2:E3:F3
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/62785EE0FCFA11EC949B6F2AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.229.0-113.203.230.255
113.203.247.0/24
180.178.145.0/24
180.178.160.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:80:6b:4f:37:8c:17:1e:32:e6:a1:e1:f1:e8:2d:5c:06:14:
d3:9c:b8:bf:a4:7c:d5:7d:b4:e7:71:81:b9:7f:42:c1:f6:e6:
03:91:52:40:ce:56:35:23:f1:16:cc:25:7d:c4:28:a9:8c:c3:
c8:ee:36:e3:b4:5a:da:7e:16:e2:50:36:e3:5b:ca:ec:d6:c0:
f4:ce:cd:5d:31:84:6b:e6:ee:cd:84:46:26:62:2f:05:02:58:
f0:c6:1e:97:5f:6b:d3:96:5e:91:89:13:6a:25:59:81:45:15:
ff:ff:59:5f:54:06:01:9d:ac:2a:39:fb:25:56:20:53:44:08:
e4:af:95:23:e2:21:e9:23:01:44:88:1a:2b:8d:9c:d9:48:1e:
5b:70:4a:db:1e:fe:f4:17:af:93:83:b7:c2:c6:86:fb:e3:5b:
31:db:10:80:51:6a:85:0b:78:90:41:42:72:59:aa:4a:04:44:
8b:c5:73:1c:72:ca:d8:ce:6f:16:a1:8d:4e:2b:82:e2:60:a8:
37:c1:6e:b5:81:bf:5f:48:f2:6e:ab:5f:9f:14:11:eb:7a:2e:
04:53:38:35:2f:bd:2f:c4:7d:d9:8b:18:e9:62:0b:45:ba:6d:
43:b8:c2:30:78:96:c3:db:3f:0b:ea:e6:86:b8:14:1a:60:b3:
99:50:fe:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:29:37 2025 by rpki-client