Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0E3D8D72EC6B11EC8F12E311C4F9AE02.roa
File: 0E3D8D72EC6B11EC8F12E311C4F9AE02.roa (raw, json)
Hash identifier: +ccRgd3rF+rSNeCRygJixRrnzo78MpsYiLeiiILIchg=
Subject key identifier: CA:40:44:D7:D0:EE:73:27:22:1C:79:5E:A8:9C:CC:8E:71:06:17:17
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5764
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0E3D8D72EC6B11EC8F12E311C4F9AE02.roa
Signing time: Thu 16 Jun 2022 06:21:46 +0000
ROA not before: Thu 16 Jun 2022 06:21:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140125
IP address blocks: 103.82.48.0/22 maxlen: 24
103.114.64.0/22 maxlen: 24
103.163.14.0/23 maxlen: 24
103.167.212.0/23 maxlen: 24
103.167.224.0/23 maxlen: 24
103.168.0.0/23 maxlen: 24
103.168.32.0/23 maxlen: 24
103.168.60.0/23 maxlen: 24
103.170.36.0/23 maxlen: 24
103.170.38.0/23 maxlen: 24
103.170.148.0/23 maxlen: 24
103.171.108.0/23 maxlen: 24
103.171.110.0/23 maxlen: 24
103.171.174.0/23 maxlen: 24
103.173.14.0/23 maxlen: 24
103.173.98.0/23 maxlen: 24
103.177.226.0/23 maxlen: 24
103.178.202.0/23 maxlen: 24
103.179.94.0/23 maxlen: 24
103.179.96.0/23 maxlen: 24
103.179.100.0/23 maxlen: 24
103.179.118.0/23 maxlen: 24
103.179.120.0/23 maxlen: 24
103.179.224.0/23 maxlen: 24
103.179.226.0/23 maxlen: 24
103.180.110.0/23 maxlen: 24
103.180.168.0/23 maxlen: 24
103.180.172.0/23 maxlen: 24
103.180.174.0/23 maxlen: 24
103.180.212.0/23 maxlen: 24
103.180.214.0/23 maxlen: 24
103.180.236.0/23 maxlen: 24
103.180.238.0/23 maxlen: 24
103.181.64.0/23 maxlen: 24
103.181.84.0/23 maxlen: 24
103.181.110.0/23 maxlen: 24
103.181.114.0/23 maxlen: 24
103.181.150.0/23 maxlen: 24
103.181.152.0/23 maxlen: 24
103.181.154.0/23 maxlen: 24
103.181.174.0/23 maxlen: 24
103.181.198.0/23 maxlen: 24
103.182.58.0/23 maxlen: 24
103.183.216.0/23 maxlen: 24
103.187.92.0/23 maxlen: 24
103.194.118.0/24 maxlen: 24
103.212.134.0/24 maxlen: 24
103.229.208.0/23 maxlen: 24
103.252.40.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22372 (0x5764)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jun 16 06:21:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62aacbf9-c580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:de:ce:38:c8:cb:a1:bd:d7:b2:5f:3d:e5:5a:
f7:09:c3:be:ff:a3:c7:05:74:ff:95:19:58:00:bd:
bd:84:58:e5:68:f3:7e:68:63:6e:f3:42:f0:c7:d6:
30:6b:8e:bd:d1:bc:92:34:b6:93:35:69:ab:ee:f8:
42:c8:75:56:5c:5f:d6:9a:e0:ca:3c:27:9a:7b:24:
d3:43:7d:25:7a:14:61:67:e8:b9:47:03:2f:ba:3b:
50:3a:06:2d:84:c9:dc:e6:0f:ae:1d:d4:10:ca:5c:
cb:56:2b:a2:c1:09:9b:06:53:68:5e:42:0e:07:11:
fd:13:07:54:6b:0a:2b:14:75:8a:e6:62:eb:65:f9:
03:d7:80:a6:07:05:7b:c4:b4:39:fd:66:83:40:bd:
ae:70:8f:11:e4:4d:ac:4a:6e:90:fc:24:e5:b7:cb:
fb:b0:f5:44:38:28:5f:c4:23:26:bb:67:82:e7:2d:
df:72:8e:cc:2a:2d:51:fd:85:36:cb:7f:9b:3c:10:
e3:a2:56:ad:e7:c3:c6:16:8e:64:79:cc:cd:2e:2e:
e9:eb:95:8a:06:7c:7b:46:c5:d6:3b:3e:6b:55:1e:
a2:58:4a:ec:f2:8a:5e:1a:df:73:18:c8:f2:48:28:
f4:13:e6:6d:83:a7:77:49:a6:d4:52:27:77:94:4a:
1f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:40:44:D7:D0:EE:73:27:22:1C:79:5E:A8:9C:CC:8E:71:06:17:17
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0E3D8D72EC6B11EC8F12E311C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.82.48.0/22
103.114.64.0/22
103.163.14.0/23
103.167.212.0/23
103.167.224.0/23
103.168.0.0/23
103.168.32.0/23
103.168.60.0/23
103.170.36.0/22
103.170.148.0/23
103.171.108.0/22
103.171.174.0/23
103.173.14.0/23
103.173.98.0/23
103.177.226.0/23
103.178.202.0/23
103.179.94.0-103.179.97.255
103.179.100.0/23
103.179.118.0-103.179.121.255
103.179.224.0/22
103.180.110.0/23
103.180.168.0/23
103.180.172.0/22
103.180.212.0/22
103.180.236.0/22
103.181.64.0/23
103.181.84.0/23
103.181.110.0/23
103.181.114.0/23
103.181.150.0-103.181.155.255
103.181.174.0/23
103.181.198.0/23
103.182.58.0/23
103.183.216.0/23
103.187.92.0/23
103.194.118.0/24
103.212.134.0/24
103.229.208.0/23
103.252.40.0/22
Signature Algorithm: sha256WithRSAEncryption
60:b9:1d:14:af:ab:ad:ee:67:fa:5d:04:e4:96:01:43:60:de:
03:5b:b2:48:3c:b1:cb:06:e6:b1:b5:82:44:f0:15:bc:18:eb:
8c:3f:25:cd:22:11:41:18:9e:d0:8b:77:ab:68:4b:b9:a6:c6:
39:f6:84:b9:3c:1a:0e:4c:16:bb:ea:f4:03:3c:26:78:17:91:
b6:a9:79:87:c3:1e:4a:c9:74:b9:ae:a1:35:bd:cb:2a:e1:3b:
ec:f3:02:2d:85:92:a7:1e:6b:54:9e:00:18:86:db:71:05:4f:
02:b6:44:a9:f4:a2:25:f9:90:9d:62:27:94:8e:6e:78:ec:81:
87:fa:1a:96:92:19:1f:31:48:45:fa:62:70:19:d3:a1:3a:7c:
34:72:27:1a:40:04:3f:c5:3a:58:f0:e0:55:a8:56:78:6d:17:
b6:5a:12:c3:a4:d2:32:32:4f:ce:be:1c:d0:13:d0:ec:f1:84:
50:f4:78:9f:dc:cc:8e:1c:c1:d0:2c:79:a3:06:8f:39:90:ff:
1e:8a:56:a3:2d:d0:f8:a7:d6:bc:89:65:ae:c4:22:16:8f:ce:
2e:ba:90:a3:dd:05:b0:a6:e7:5a:ed:ec:d1:58:16:b8:85:dd:
2f:4d:11:1d:48:e0:e6:11:54:e9:37:84:ae:af:5f:14:10:7b:
d4:e0:5f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:54:01 2025 by rpki-client