Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/151F7FB000B711ECA4024A1EC4F9AE02.roa
File: 151F7FB000B711ECA4024A1EC4F9AE02.roa (raw, json)
Hash identifier: /BCSiVpKuKpktifFQpMZpVbE14lSjuWqwha1DNMxBDE=
Subject key identifier: E8:45:C7:AD:19:02:09:69:C0:3C:33:06:AB:1D:A3:08:76:BE:3B:F6
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 808E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/151F7FB000B711ECA4024A1EC4F9AE02.roa
Signing time: Fri 22 Dec 2023 10:31:06 +0000
ROA not before: Fri 22 Dec 2023 10:31:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17747
IP address blocks: 45.249.84.0/22 maxlen: 24
103.75.192.0/22 maxlen: 24
103.84.164.0/24 maxlen: 24
103.115.180.0/24 maxlen: 24
103.115.181.0/24 maxlen: 24
103.171.100.0/23 maxlen: 24
103.172.46.0/24 maxlen: 24
103.172.47.0/24 maxlen: 24
103.184.74.0/23 maxlen: 24
103.217.244.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32910 (0x808e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Dec 22 10:31:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6585656a-8d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b3:ec:65:9d:ab:11:3a:5d:01:63:cc:6b:80:
30:66:8c:c6:73:48:14:1a:c9:cc:45:5b:7d:0c:e8:
6d:17:bf:da:b6:fe:74:4f:a4:49:b9:d2:87:19:74:
82:59:e0:c8:46:13:ef:02:a3:72:8b:0e:93:2f:6a:
ff:95:b0:aa:97:60:39:6e:36:fe:76:cc:4b:d0:7d:
04:07:66:ed:88:0c:5d:a8:e4:b2:bd:f5:5d:4f:6d:
5c:e5:4f:72:d8:2a:3d:f0:32:c9:fc:21:ce:41:c9:
9a:e2:ce:f0:85:25:13:eb:d4:83:53:05:ef:f8:98:
9c:4b:c5:1c:18:73:6c:ff:63:40:67:d6:17:54:d5:
4d:bb:40:f4:db:a4:a2:ba:5d:29:de:b1:aa:94:70:
68:eb:e1:47:38:76:8f:32:7d:a0:5c:cf:71:d9:5f:
38:92:26:ea:5f:0b:7b:0f:b4:7f:6d:92:81:de:9c:
20:a7:41:99:e7:3d:41:31:b9:d7:2c:08:0a:1a:fd:
e0:34:b3:50:91:d3:54:df:b7:df:ef:24:eb:d7:b8:
9b:b0:4c:07:47:58:18:a4:3f:63:2c:d4:6e:60:5c:
ed:52:92:3a:ef:3c:22:b5:05:80:74:9e:ab:11:e6:
9a:80:72:07:85:bd:93:40:0c:83:97:22:22:41:66:
4e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:45:C7:AD:19:02:09:69:C0:3C:33:06:AB:1D:A3:08:76:BE:3B:F6
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/151F7FB000B711ECA4024A1EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.249.84.0/22
103.75.192.0/22
103.84.164.0/24
103.115.180.0/23
103.171.100.0/23
103.172.46.0/23
103.184.74.0/23
103.217.244.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:d9:80:7f:57:c2:2c:b4:32:3a:0f:89:41:84:86:6f:a8:49:
bf:bd:cc:20:bb:c6:c7:30:ac:e5:a8:51:cb:0f:18:69:5a:21:
ec:a8:ed:d8:25:2c:a3:b4:85:2d:2c:7b:7d:47:4c:2b:5b:69:
c5:ea:cf:92:39:ac:1b:10:f6:11:bb:2f:97:ec:25:f8:d9:0a:
b3:24:6d:30:a4:57:aa:c5:0f:95:2a:62:78:93:ae:34:ee:34:
4e:80:61:a8:fd:74:b4:5d:4c:b9:e4:af:e0:e1:35:65:a3:51:
91:a1:cb:d3:05:90:0d:7b:0d:58:b6:42:fb:fa:10:66:da:7a:
c8:da:5a:01:c5:42:67:58:82:bf:f8:71:c2:5d:6e:d9:c9:98:
17:17:7d:df:fb:29:20:c1:03:e4:03:26:56:30:75:ea:dc:4b:
8c:ef:85:06:5a:85:e4:3b:a0:12:09:2c:79:19:b7:81:2f:27:
10:f2:88:9d:42:a4:61:09:31:4a:8c:8c:6e:2b:be:63:9a:46:
3b:e8:bc:f2:0c:f5:fe:16:34:de:5b:71:bb:2a:43:90:b9:ef:
55:ae:d2:09:3d:51:61:13:0a:03:1b:0a:ce:0f:d8:d8:47:a3:
3b:1e:02:66:24:4d:16:15:74:f0:53:84:33:0b:dd:e2:34:cc:
5e:67:f4:75
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgIDAICOMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTIzMTIyMjEwMzEwNloXDTI0MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjU4NTY1NmEtOGQxMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKKz7GWdqxE6XQFjzGuAMGaMxnNIFBrJzEVbfQzobRe/2rb+dE+kSbnShxl0
glngyEYT7wKjcosOky9q/5WwqpdgOW42/nbMS9B9BAdm7YgMXajksr31XU9tXOVP
ctgqPfAyyfwhzkHJmuLO8IUlE+vUg1MF7/iYnEvFHBhzbP9jQGfWF1TVTbtA9Nuk
orpdKd6xqpRwaOvhRzh2jzJ9oFzPcdlfOJIm6l8Lew+0f22Sgd6cIKdBmec9QTG5
1ywIChr94DSzUJHTVN+33+8k69e4m7BMB0dYGKQ/YyzUbmBc7VKSOu88IrUFgHSe
qxHmmoByB4W9k0AMg5ciIkFmTj0CAwEAAaOCAr8wggK7MB0GA1UdDgQWBBToRcet
GQIJacA8MwarHaMIdr479jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzE1MUY3RkIw
MDBCNzExRUNBNDAyNEExRUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMEkGCCsGAQUFBwEHAQH/
BDowODA2BAIAATAwAwQCLflUAwQCZ0vAAwQAZ1SkAwQBZ3O0AwQBZ6tkAwQBZ6wu
AwQBZ7hKAwQCZ9n0MA0GCSqGSIb3DQEBCwUAA4IBAQAb2YB/V8IstDI6D4lBhIZv
qEm/vcwgu8bHMKzlqFHLDxhpWiHsqO3YJSyjtIUtLHt9R0wrW2nF6s+SOawbEPYR
uy+X7CX42QqzJG0wpFeqxQ+VKmJ4k6407jROgGGo/XS0XUy55K/g4TVlo1GRocvT
BZANew1YtkL7+hBm2nrI2loBxUJnWIK/+HHCXW7ZyZgXF33f+ykgwQPkAyZWMHXq
3EuM74UGWoXkO6ASCSx5GbeBLycQ8oidQqRhCTFKjIxuK75jmkY76LzyDPX+FjTe
W3G7KkOQue9VrtIJPVFhEwoDGwrOD9jYR6M7HgJmJE0WFXTwU4QzC93iNMxeZ/R1
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:55:49 2025 by rpki-client