Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/084EF450A06711EC8061453BC4F9AE02.roa
File: 084EF450A06711EC8061453BC4F9AE02.roa (raw, json)
Hash identifier: vg2Muj+WhZG+2I4JNgq+AKXL41PrnL1t+Yu/KaOz5Vc=
Subject key identifier: 48:29:95:7F:F5:67:68:D0:69:C9:75:92:C8:41:CD:2E:C3:48:6E:BE
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5BA4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/084EF450A06711EC8061453BC4F9AE02.roa
Signing time: Thu 18 Aug 2022 12:51:34 +0000
ROA not before: Thu 18 Aug 2022 12:51:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 133676
IP address blocks: 43.230.196.0/22 maxlen: 24
43.240.4.0/24 maxlen: 24
43.240.6.0/24 maxlen: 24
43.240.7.0/24 maxlen: 24
45.64.8.0/24 maxlen: 24
45.64.10.0/24 maxlen: 24
45.64.11.0/24 maxlen: 24
45.248.24.0/24 maxlen: 24
45.248.26.0/23 maxlen: 24
103.42.88.0/22 maxlen: 24
103.47.12.0/23 maxlen: 24
103.47.15.0/24 maxlen: 24
103.47.56.0/22 maxlen: 24
103.47.72.0/23 maxlen: 24
103.47.74.0/23 maxlen: 24
103.47.172.0/23 maxlen: 24
103.47.174.0/23 maxlen: 24
103.49.232.0/23 maxlen: 24
103.101.116.0/24 maxlen: 24
103.101.118.0/23 maxlen: 24
103.114.188.0/23 maxlen: 24
103.173.218.0/24 maxlen: 24
103.177.202.0/23 maxlen: 24
103.178.58.0/23 maxlen: 24
103.181.90.0/23 maxlen: 24
103.189.147.0/24 maxlen: 24
103.191.234.0/23 maxlen: 24
103.204.168.0/22 maxlen: 24
103.225.205.0/24 maxlen: 24
103.225.206.0/23 maxlen: 24
103.248.121.0/24 maxlen: 24
139.5.16.0/23 maxlen: 24
139.5.18.0/23 maxlen: 24
2405:5540::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23460 (0x5ba4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Aug 18 12:51:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62fe35d5-f22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a2:ee:7f:3c:f1:f1:91:67:6a:76:1f:af:38:
68:c9:64:3b:8e:b0:f0:3a:fb:9f:79:ad:5c:ce:1d:
d4:25:4b:6c:f3:30:96:25:6e:f2:45:68:e0:52:51:
32:2b:ce:ad:3e:f7:13:d4:12:a0:6a:6c:73:a8:1e:
2b:f9:d0:2b:8e:af:3e:da:0f:2a:72:99:4f:6e:69:
27:25:99:57:5d:6e:8c:ca:f7:3f:a2:49:06:86:fd:
83:55:b4:6c:62:f7:10:f9:f0:ad:e5:f9:40:4b:a1:
68:30:1d:f8:5c:5e:35:89:4f:b0:69:42:c0:60:58:
0a:26:35:aa:a4:3b:42:8b:3d:3a:4a:d7:10:25:00:
19:ef:0e:b2:e5:c3:d9:18:4f:cf:3c:05:2d:83:fd:
6f:47:63:70:fd:08:9d:15:69:af:93:0e:03:35:04:
cf:29:d0:2d:4d:58:6a:37:5f:5a:d7:a2:22:ca:93:
e4:d8:d4:4e:3a:61:f3:32:ef:a6:76:bd:80:48:dc:
45:53:d2:dd:37:09:e7:e3:68:62:b5:f7:d6:26:74:
89:17:e9:4a:5c:f6:8e:92:a3:ad:2e:b2:22:43:cd:
5a:51:bd:fb:1a:2b:48:36:ef:04:f4:2a:ae:4f:71:
77:54:1b:89:df:a5:7a:5e:2e:84:76:98:45:b1:59:
fd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:29:95:7F:F5:67:68:D0:69:C9:75:92:C8:41:CD:2E:C3:48:6E:BE
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/084EF450A06711EC8061453BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.230.196.0/22
43.240.4.0/24
43.240.6.0/23
45.64.8.0/24
45.64.10.0/23
45.248.24.0/24
45.248.26.0/23
103.42.88.0/22
103.47.12.0/23
103.47.15.0/24
103.47.56.0/22
103.47.72.0/22
103.47.172.0/22
103.49.232.0/23
103.101.116.0/24
103.101.118.0/23
103.114.188.0/23
103.173.218.0/24
103.177.202.0/23
103.178.58.0/23
103.181.90.0/23
103.189.147.0/24
103.191.234.0/23
103.204.168.0/22
103.225.205.0-103.225.207.255
103.248.121.0/24
139.5.16.0/22
IPv6:
2405:5540::/32
Signature Algorithm: sha256WithRSAEncryption
b1:30:6b:bd:eb:c3:f6:f0:25:0e:cb:16:2c:17:a2:3b:e4:c7:
a4:28:ff:87:9a:2a:88:c5:35:85:4b:c7:55:08:d4:26:07:e3:
26:32:1d:1d:eb:d6:eb:e6:3e:3e:32:59:95:ce:fe:4e:38:58:
34:dd:a5:6e:dd:fa:b4:e7:1b:77:f4:9b:7c:bd:83:ee:39:0c:
1e:0a:31:3b:c8:65:9d:76:b3:b1:ac:be:4d:c4:f6:fc:84:a4:
f4:ab:13:86:d2:34:fd:bc:e0:4a:a8:bf:cb:0c:e5:c4:13:43:
5f:f7:a1:9e:7c:6b:a7:b1:f9:f4:a7:a7:c5:1a:e2:6b:a5:16:
18:42:8a:d5:b1:f1:69:5f:56:7d:7f:5d:59:8e:f3:78:5e:52:
97:1a:b9:5b:3f:a0:0c:f7:39:e9:5d:b9:72:29:82:45:0b:27:
76:79:cc:3a:b2:0d:96:5c:3a:12:a6:a2:b7:38:92:84:b2:9a:
fc:c0:5d:97:02:2a:5b:09:6d:20:c0:8a:8b:c5:bc:4b:b5:e2:
f1:58:c4:04:a0:ed:d8:f5:13:eb:c6:4f:c2:2d:7e:68:ee:fe:
00:2d:2f:1f:ff:d2:43:28:e9:50:04:ee:6b:6e:5d:2e:02:c2:
03:28:51:b9:95:3d:33:22:fb:27:c8:3e:f2:6d:88:6f:aa:e5:
bf:ce:86:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:00:50 2025 by rpki-client