Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/06C8BDF0644111EF81DC5751C4F9AE02.roa
File: 06C8BDF0644111EF81DC5751C4F9AE02.roa (raw, json)
Hash identifier: v01zWSzP50DAKdqTmYQa+cAYy0gaNIWNDdMjGEXeiYo=
Subject key identifier: 0E:E4:49:F3:E2:82:0A:4D:DB:A3:BE:69:FE:2F:04:61:8E:46:1E:7B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 978F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/06C8BDF0644111EF81DC5751C4F9AE02.roa
Signing time: Tue 27 Aug 2024 06:53:12 +0000
ROA not before: Tue 27 Aug 2024 06:53:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.225.0.0/22 maxlen: 24
45.115.92.0/22 maxlen: 24
103.14.197.0/24 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.47.152.0/24 maxlen: 24
103.51.92.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.68.206.0/23 maxlen: 24
103.86.20.0/22 maxlen: 24
103.108.76.0/22 maxlen: 24
103.142.64.0/23 maxlen: 24
103.171.236.0/23 maxlen: 24
103.180.216.0/23 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
203.191.56.0/22 maxlen: 24
2400:d180:66::/48 maxlen: 48
2400:d180:67::/48 maxlen: 48
2400:d180:68::/48 maxlen: 48
2400:d180:69::/48 maxlen: 48
2400:d180:70::/48 maxlen: 48
2400:d180:71::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38799 (0x978f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Aug 27 06:53:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66cd77d8-bf87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:2d:3f:15:db:94:99:d6:0b:bd:35:60:c4:a8:
de:f7:d6:e8:25:0d:49:b7:f2:46:cd:9e:9a:e4:3f:
9b:57:7a:fb:a2:66:d3:56:a9:bc:63:d7:76:ed:ab:
e9:87:05:11:14:b1:36:30:e3:fc:34:1b:6f:2c:9c:
22:a8:3f:91:63:23:a3:a9:82:e6:89:d0:f4:e0:79:
93:a5:3f:3b:a9:b4:8f:d8:63:cb:71:08:e9:bc:8e:
11:3c:15:fc:56:1e:ad:fa:87:3d:c6:6f:41:1b:54:
1d:ea:24:03:77:e1:1d:14:69:de:29:46:cd:a0:19:
25:4e:e0:76:8a:6b:21:a7:17:b6:58:be:1f:3d:53:
45:2c:c0:0b:13:e4:76:0d:3a:bb:ab:73:eb:80:74:
ad:c5:58:8e:91:42:2c:4f:74:2d:96:7e:4b:71:ca:
95:2b:16:43:a0:be:59:b5:37:50:2c:dc:22:9f:65:
2e:d1:37:81:d0:8f:41:23:1b:f9:d2:9b:b8:0e:b7:
47:a2:62:96:e1:5c:89:71:c7:01:1c:2a:42:a5:9e:
06:94:f3:2e:03:4f:b6:96:9d:87:d1:cc:00:35:9d:
70:35:7c:8a:b2:43:25:4e:e0:9c:d3:bb:fd:ac:e7:
e2:a4:1d:97:6b:ec:81:d3:16:d1:ca:8e:da:0a:2c:
c7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E4:49:F3:E2:82:0A:4D:DB:A3:BE:69:FE:2F:04:61:8E:46:1E:7B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/06C8BDF0644111EF81DC5751C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.0.0/22
45.115.92.0/22
103.14.197.0/24
103.27.168.0/24
103.27.170.0/23
103.47.152.0/24
103.51.92.0/22
103.52.48.0/22
103.55.84.0/22
103.68.206.0/23
103.86.20.0/22
103.108.76.0/22
103.142.64.0/23
103.171.236.0/23
103.180.216.0/23
103.200.48.0/22
103.206.64.0/22
103.226.224.0/22
103.228.172.0/22
203.191.56.0/22
IPv6:
2400:d180:66::-2400:d180:69:ffff:ffff:ffff:ffff:ffff
2400:d180:70::/47
Signature Algorithm: sha256WithRSAEncryption
77:23:c5:ea:0f:67:7b:77:0e:eb:13:d4:22:b3:4e:78:4c:42:
4a:e3:23:e0:f6:02:21:72:39:c8:56:96:e5:db:0e:75:bc:b3:
d3:d1:60:19:e9:d4:e6:f2:d4:ba:42:ae:05:64:b7:64:ad:20:
36:04:4b:b4:5b:92:3a:48:cd:ab:87:72:61:c5:f4:fe:5d:f9:
d6:21:ec:7b:e6:29:c5:1c:9d:66:d4:6c:3e:71:21:1d:af:e8:
ab:17:87:13:ae:23:15:20:d5:6b:49:6f:82:46:27:39:a5:d2:
40:1e:48:a6:bd:41:e1:35:0e:9e:1c:c7:6f:1f:c2:dc:48:1f:
d1:29:83:bc:d7:21:23:3b:65:f3:4b:36:52:87:5b:17:75:d0:
ae:db:7c:db:fa:23:45:38:dc:a9:76:bb:a0:7d:70:79:ac:18:
4e:64:17:40:99:4e:e4:fc:b2:ff:68:aa:0d:14:fe:77:70:7d:
60:bd:39:d5:c4:6c:c7:b2:f1:3a:2b:9b:f9:2d:6c:33:d9:e3:
7a:15:b8:76:06:4e:f1:ba:30:c3:4b:ba:f2:a0:01:42:2a:98:
c8:cb:a1:ad:bc:56:50:5c:4f:75:06:4b:f3:5c:09:9e:11:d5:
b6:6e:50:c0:f5:e7:11:0e:f7:30:cc:06:11:88:9e:2c:49:a5:
bf:d8:34:bb
-----BEGIN CERTIFICATE-----
MIIGDDCCBPSgAwIBAgIDAJePMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDgyNzA2NTMxMloXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjZjZDc3ZDgtYmY4NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAO4tPxXblJnWC701YMSo3vfW6CUNSbfyRs2emuQ/m1d6+6Jm01apvGPXdu2r
6YcFERSxNjDj/DQbbyycIqg/kWMjo6mC5onQ9OB5k6U/O6m0j9hjy3EI6byOETwV
/FYerfqHPcZvQRtUHeokA3fhHRRp3ilGzaAZJU7gdoprIacXtli+Hz1TRSzACxPk
dg06u6tz64B0rcVYjpFCLE90LZZ+S3HKlSsWQ6C+WbU3UCzcIp9lLtE3gdCPQSMb
+dKbuA63R6JiluFciXHHARwqQqWeBpTzLgNPtpadh9HMADWdcDV8irJDJU7gnNO7
/azn4qQdl2vsgdMW0cqO2gosxx8CAwEAAaOCAy8wggMrMB0GA1UdDgQWBBQO5Enz
4oIKTdujvmn+LwRhjkYeezAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzA2QzhCREYw
NjQ0MTExRUY4MURDNTc1MUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIG4BggrBgEFBQcBBwEB
/wSBqDCBpTB+BAIAATB4AwQCK+EAAwQCLXNcAwQAZw7FAwQAZxuoAwQBZxuqAwQA
Zy+YAwQCZzNcAwQCZzQwAwQCZzdUAwQBZ0TOAwQCZ1YUAwQCZ2xMAwQBZ45AAwQB
Z6vsAwQBZ7TYAwQCZ8gwAwQCZ85AAwQCZ+LgAwQCZ+SsAwQCy784MCMEAgACMB0w
EgMHASQA0YAAZgMHASQA0YAAaAMHASQA0YAAcDANBgkqhkiG9w0BAQsFAAOCAQEA
dyPF6g9ne3cO6xPUIrNOeExCSuMj4PYCIXI5yFaW5dsOdbyz09FgGenU5vLUukKu
BWS3ZK0gNgRLtFuSOkjNq4dyYcX0/l351iHse+YpxRydZtRsPnEhHa/oqxeHE64j
FSDVa0lvgkYnOaXSQB5Ipr1B4TUOnhzHbx/C3Egf0SmDvNchIztl80s2UodbF3XQ
rtt82/ojRTjcqXa7oH1weawYTmQXQJlO5Pyy/2iqDRT+d3B9YL051cRsx7LxOiub
+S1sM9njehW4dgZO8boww0u68qABQiqYyMuhrbxWUFxPdQZL81wJnhHVtm5QwPXn
EQ73MMwGEYieLEmlv9g0uw==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:00:42 2025 by rpki-client