Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/162D793274CE11EFA4ED9930C4F9AE02.roa
File: 162D793274CE11EFA4ED9930C4F9AE02.roa (raw, json)
Hash identifier: KxWB+Ggr2NnrWwPAu9qEZw32vlLDWJco5jTTTFS7jrg=
Subject key identifier: 70:3E:B3:C5:BA:C1:A3:F1:98:B9:2D:DB:60:BA:58:D6:AE:65:A0:94
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 98AC
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/162D793274CE11EFA4ED9930C4F9AE02.roa
Signing time: Tue 17 Sep 2024 08:23:15 +0000
ROA not before: Tue 17 Sep 2024 08:23:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133661
IP address blocks: 101.0.32.0/22 maxlen: 24
101.0.37.0/24 maxlen: 24
103.73.148.0/24 maxlen: 24
103.73.149.0/24 maxlen: 24
103.73.150.0/24 maxlen: 24
103.114.64.0/22 maxlen: 24
103.142.198.0/24 maxlen: 24
103.163.14.0/24 maxlen: 24
103.165.72.0/23 maxlen: 24
103.165.76.0/23 maxlen: 24
103.166.214.0/23 maxlen: 24
103.167.154.0/23 maxlen: 24
103.167.182.0/23 maxlen: 24
103.167.212.0/23 maxlen: 24
103.167.224.0/23 maxlen: 24
103.167.238.0/23 maxlen: 24
103.168.0.0/23 maxlen: 24
103.168.22.0/24 maxlen: 24
103.168.32.0/23 maxlen: 24
103.168.60.0/23 maxlen: 24
103.169.242.0/23 maxlen: 24
103.170.36.0/23 maxlen: 24
103.170.38.0/23 maxlen: 24
103.170.84.0/23 maxlen: 24
103.171.108.0/24 maxlen: 24
103.171.110.0/23 maxlen: 24
103.171.174.0/23 maxlen: 24
103.173.98.0/23 maxlen: 24
103.174.92.0/23 maxlen: 24
103.177.226.0/23 maxlen: 24
103.178.64.0/23 maxlen: 24
103.178.160.0/23 maxlen: 24
103.178.166.0/23 maxlen: 24
103.178.202.0/23 maxlen: 24
103.179.10.0/23 maxlen: 24
103.179.94.0/23 maxlen: 24
103.179.96.0/23 maxlen: 24
103.179.100.0/23 maxlen: 24
103.179.102.0/23 maxlen: 24
103.179.118.0/23 maxlen: 24
103.179.120.0/23 maxlen: 24
103.179.224.0/23 maxlen: 24
103.179.226.0/23 maxlen: 24
103.180.110.0/23 maxlen: 24
103.180.168.0/23 maxlen: 24
103.180.172.0/23 maxlen: 24
103.180.174.0/23 maxlen: 24
103.180.176.0/23 maxlen: 24
103.180.212.0/23 maxlen: 24
103.180.214.0/23 maxlen: 24
103.180.236.0/23 maxlen: 24
103.180.238.0/23 maxlen: 24
103.181.4.0/23 maxlen: 24
103.181.56.0/23 maxlen: 24
103.181.64.0/23 maxlen: 24
103.181.84.0/23 maxlen: 24
103.181.86.0/23 maxlen: 24
103.181.110.0/23 maxlen: 24
103.181.114.0/23 maxlen: 24
103.181.150.0/23 maxlen: 24
103.181.152.0/23 maxlen: 24
103.181.154.0/23 maxlen: 24
103.181.174.0/23 maxlen: 24
103.181.198.0/23 maxlen: 24
103.181.212.0/24 maxlen: 24
103.183.30.0/23 maxlen: 24
103.183.32.0/23 maxlen: 24
103.183.34.0/23 maxlen: 24
103.183.216.0/23 maxlen: 24
103.187.84.0/23 maxlen: 24
103.187.92.0/23 maxlen: 24
103.187.96.0/23 maxlen: 24
103.187.102.0/23 maxlen: 24
103.187.130.0/23 maxlen: 24
103.187.158.0/23 maxlen: 24
103.187.170.0/23 maxlen: 24
103.189.82.0/23 maxlen: 24
103.199.184.0/22 maxlen: 24
103.212.132.0/22 maxlen: 24
203.76.178.0/24 maxlen: 24
203.76.180.0/24 maxlen: 24
203.76.181.0/24 maxlen: 24
203.76.188.0/24 maxlen: 24
203.76.190.0/24 maxlen: 24
203.76.191.0/24 maxlen: 24
2001:df0:e400::/48 maxlen: 48
2001:df2:e200::/48 maxlen: 48
2001:df2:e600::/48 maxlen: 48
2400:7b20::/32 maxlen: 32
2404:7c80::/32 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39084 (0x98ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Sep 17 08:23:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66e93c73-1a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d4:7d:cc:5a:29:a2:de:98:23:a0:6f:34:f3:
46:1e:8b:81:44:d3:20:03:eb:e2:e7:1b:61:aa:db:
ec:28:55:5a:d7:0a:c6:93:83:d4:14:8a:d0:66:a9:
d6:94:a7:f3:5a:ef:5d:21:2a:e5:fd:7d:3e:5c:6d:
65:1b:bd:23:c8:8e:71:45:bd:7b:75:51:52:d3:1e:
c1:21:4d:ca:f0:83:dc:56:ea:7d:c9:4f:84:a4:58:
f0:51:79:69:66:42:c5:ec:58:0b:9d:d9:71:4b:89:
a5:77:ab:6f:04:a9:54:c4:92:27:be:f7:ec:e6:7c:
92:d8:54:7f:cd:66:b8:c5:e8:47:d6:6b:21:12:b2:
d4:e2:e5:a2:bb:9b:77:fe:dc:dd:8d:ac:e8:50:2c:
ea:27:7d:ea:93:96:ea:1c:a8:b5:8d:d4:12:9a:74:
e5:b4:30:0c:f4:5f:23:58:04:14:00:76:f2:85:63:
fa:b3:35:09:9f:52:d4:2c:49:81:c1:6e:c8:2e:5c:
b9:65:6e:d7:b0:49:90:2a:7a:7d:76:eb:50:72:d9:
3a:49:54:17:3f:56:9d:bc:36:e4:61:87:98:2a:79:
8d:04:cd:7c:0a:46:5a:de:78:d9:9b:3a:af:bd:ac:
c7:43:be:6c:26:9a:7e:4f:93:82:d9:d6:4c:a1:f5:
ac:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3E:B3:C5:BA:C1:A3:F1:98:B9:2D:DB:60:BA:58:D6:AE:65:A0:94
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/162D793274CE11EFA4ED9930C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
101.0.32.0/22
101.0.37.0/24
103.73.148.0-103.73.150.255
103.114.64.0/22
103.142.198.0/24
103.163.14.0/24
103.165.72.0/23
103.165.76.0/23
103.166.214.0/23
103.167.154.0/23
103.167.182.0/23
103.167.212.0/23
103.167.224.0/23
103.167.238.0/23
103.168.0.0/23
103.168.22.0/24
103.168.32.0/23
103.168.60.0/23
103.169.242.0/23
103.170.36.0/22
103.170.84.0/23
103.171.108.0/24
103.171.110.0/23
103.171.174.0/23
103.173.98.0/23
103.174.92.0/23
103.177.226.0/23
103.178.64.0/23
103.178.160.0/23
103.178.166.0/23
103.178.202.0/23
103.179.10.0/23
103.179.94.0-103.179.97.255
103.179.100.0/22
103.179.118.0-103.179.121.255
103.179.224.0/22
103.180.110.0/23
103.180.168.0/23
103.180.172.0-103.180.177.255
103.180.212.0/22
103.180.236.0/22
103.181.4.0/23
103.181.56.0/23
103.181.64.0/23
103.181.84.0/22
103.181.110.0/23
103.181.114.0/23
103.181.150.0-103.181.155.255
103.181.174.0/23
103.181.198.0/23
103.181.212.0/24
103.183.30.0-103.183.35.255
103.183.216.0/23
103.187.84.0/23
103.187.92.0/23
103.187.96.0/23
103.187.102.0/23
103.187.130.0/23
103.187.158.0/23
103.187.170.0/23
103.189.82.0/23
103.199.184.0/22
103.212.132.0/22
203.76.178.0/24
203.76.180.0/23
203.76.188.0/24
203.76.190.0/23
IPv6:
2001:df0:e400::/48
2001:df2:e200::/48
2001:df2:e600::/48
2400:7b20::/32
2404:7c80::/32
Signature Algorithm: sha256WithRSAEncryption
79:91:49:06:b6:01:bf:8a:3f:81:a7:09:08:9b:9d:f0:8c:97:
7f:e6:f8:68:4a:98:6e:f9:b2:b6:13:a8:dc:73:e5:52:7d:fe:
b6:51:0f:d2:69:47:e6:38:25:ac:20:a3:9a:55:e7:dc:69:d9:
27:9c:16:96:48:29:8e:9e:11:b2:d4:88:1f:d3:4a:be:be:15:
1e:84:c2:60:30:cb:d8:67:ac:16:05:cf:33:86:64:ca:89:3b:
85:6e:85:88:26:2c:0f:ec:e3:98:ee:f1:ea:4f:76:4f:48:d2:
a3:d7:09:05:92:b6:b8:1a:42:3b:21:60:57:d9:b9:f4:0a:d6:
c9:d3:a7:e5:6e:c7:70:81:9a:97:4e:44:3f:53:27:61:4e:7d:
ca:36:e6:dc:72:b2:70:13:c6:d7:b9:67:38:a2:8c:6b:23:06:
22:25:33:ba:93:6d:3b:a5:a4:3c:3b:58:9c:1f:e0:cf:ae:bb:
15:48:d9:0f:22:28:f5:35:27:67:12:e2:39:4a:57:13:14:4f:
d2:90:37:b5:85:d6:e3:76:30:7e:99:70:f7:0d:b7:29:40:db:
35:81:64:47:04:8d:7b:83:6c:31:69:07:10:e2:07:85:df:2a:
f3:fe:6d:84:38:d5:67:a2:04:d1:be:54:4a:8d:cf:bb:fb:f9:
b2:07:c4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:10:52 2025 by rpki-client