Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1F4D93203DDF11EE962F8871C4F9AE02.roa
File: 1F4D93203DDF11EE962F8871C4F9AE02.roa (raw, json)
Hash identifier: sdMysWf/HIeGF0a9Flx5NKI0stdAqsXOoCs4ZNNKm9E=
Subject key identifier: D1:80:76:73:CE:5D:1B:BD:FC:4C:4E:EA:61:C8:54:7F:DA:17:41:26
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7B76
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1F4D93203DDF11EE962F8871C4F9AE02.roa
Signing time: Mon 09 Oct 2023 06:44:48 +0000
ROA not before: Mon 09 Oct 2023 06:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55352
IP address blocks: 36.255.180.0/22 maxlen: 22
36.255.180.0/24 maxlen: 24
36.255.181.0/24 maxlen: 24
36.255.182.0/24 maxlen: 24
36.255.183.0/24 maxlen: 24
36.255.184.0/22 maxlen: 22
36.255.184.0/24 maxlen: 24
36.255.185.0/24 maxlen: 24
36.255.186.0/24 maxlen: 24
36.255.187.0/24 maxlen: 24
43.231.132.0/22 maxlen: 24
43.231.212.0/22 maxlen: 24
43.231.236.0/22 maxlen: 24
43.231.252.0/22 maxlen: 24
43.247.136.0/22 maxlen: 24
45.112.8.0/22 maxlen: 24
45.112.56.0/22 maxlen: 24
45.114.80.0/22 maxlen: 24
45.115.56.0/24 maxlen: 24
45.115.57.0/24 maxlen: 24
45.115.58.0/24 maxlen: 24
45.115.59.0/24 maxlen: 24
45.126.144.0/22 maxlen: 24
45.251.12.0/24 maxlen: 24
45.251.13.0/24 maxlen: 24
45.251.14.0/24 maxlen: 24
45.251.15.0/24 maxlen: 24
59.152.56.0/22 maxlen: 24
59.153.0.0/22 maxlen: 24
59.153.120.0/22 maxlen: 24
103.8.164.0/22 maxlen: 24
103.29.156.0/22 maxlen: 24
103.57.172.0/22 maxlen: 22
103.57.172.0/24 maxlen: 24
103.57.173.0/24 maxlen: 24
103.57.174.0/24 maxlen: 24
103.57.175.0/24 maxlen: 24
103.60.208.0/22 maxlen: 24
103.75.60.0/23 maxlen: 24
103.83.216.0/22 maxlen: 22
103.83.216.0/24 maxlen: 24
103.83.217.0/24 maxlen: 24
103.83.218.0/24 maxlen: 24
103.83.219.0/24 maxlen: 24
103.102.92.0/22 maxlen: 24
103.111.112.0/22 maxlen: 24
103.114.2.0/23 maxlen: 23
103.114.3.0/24 maxlen: 24
103.119.188.0/22 maxlen: 24
103.156.212.0/23 maxlen: 24
103.171.108.0/24 maxlen: 24
103.176.240.0/23 maxlen: 24
103.179.212.0/23 maxlen: 24
103.197.224.0/22 maxlen: 24
103.198.164.0/22 maxlen: 24
103.200.100.0/22 maxlen: 22
103.200.100.0/24 maxlen: 24
103.200.101.0/24 maxlen: 24
103.200.102.0/24 maxlen: 24
103.200.103.0/24 maxlen: 24
103.200.104.0/22 maxlen: 24
103.200.212.0/22 maxlen: 22
103.200.212.0/24 maxlen: 24
103.200.213.0/24 maxlen: 24
103.200.214.0/24 maxlen: 24
103.200.215.0/24 maxlen: 24
103.204.160.0/22 maxlen: 24
103.205.172.0/22 maxlen: 24
103.220.40.0/22 maxlen: 24
103.221.248.0/22 maxlen: 24
103.226.140.0/22 maxlen: 24
103.226.144.0/22 maxlen: 24
103.226.188.0/22 maxlen: 24
103.226.204.0/22 maxlen: 24
103.226.236.0/22 maxlen: 24
103.226.240.0/22 maxlen: 24
103.234.240.0/22 maxlen: 22
103.234.240.0/24 maxlen: 24
103.234.241.0/24 maxlen: 24
103.234.242.0/24 maxlen: 24
103.234.243.0/24 maxlen: 24
103.239.171.0/24 maxlen: 24
103.249.132.0/22 maxlen: 24
111.125.217.0/24 maxlen: 24
111.125.218.0/23 maxlen: 24
111.125.224.0/24 maxlen: 24
111.125.226.0/24 maxlen: 24
111.125.228.0/24 maxlen: 24
111.125.233.0/24 maxlen: 24
111.125.236.0/24 maxlen: 24
111.125.241.0/24 maxlen: 24
111.125.242.0/24 maxlen: 24
111.125.249.0/24 maxlen: 24
111.125.252.0/22 maxlen: 24
124.66.172.0/22 maxlen: 24
137.59.204.0/22 maxlen: 22
137.59.204.0/24 maxlen: 24
137.59.205.0/24 maxlen: 24
137.59.206.0/24 maxlen: 24
137.59.207.0/24 maxlen: 24
175.100.176.0/20 maxlen: 24
202.168.144.0/22 maxlen: 24
2406:9e00:20::/48 maxlen: 48
2406:9e00:21::/48 maxlen: 48
2406:9e00:22::/48 maxlen: 48
2406:9e00:23::/48 maxlen: 48
2406:9e00:24::/48 maxlen: 48
2406:9e00:25::/48 maxlen: 48
2406:9e00:26::/48 maxlen: 48
2406:9e00:27::/48 maxlen: 48
2406:9e00:28::/48 maxlen: 48
2406:9e00:29::/48 maxlen: 48
2406:9e00:2a::/48 maxlen: 48
2406:9e00:2b::/48 maxlen: 48
2406:9e00:2c::/48 maxlen: 48
2406:9e00:2d::/48 maxlen: 48
2406:9e00:2e::/48 maxlen: 48
2406:9e00:2f::/48 maxlen: 48
2406:9e00:30::/48 maxlen: 48
2406:9e00:31::/48 maxlen: 48
2406:9e00:32::/48 maxlen: 48
2406:9e00:33::/48 maxlen: 48
2406:9e00:34::/48 maxlen: 48
2406:9e00:35::/48 maxlen: 48
2406:9e00:36::/48 maxlen: 48
2406:9e00:37::/48 maxlen: 48
2406:9e00:38::/48 maxlen: 48
2406:9e00:39::/48 maxlen: 48
2406:9e00:3a::/48 maxlen: 48
2406:9e00:3b::/48 maxlen: 48
2406:9e00:3c::/48 maxlen: 48
2406:9e00:3d::/48 maxlen: 48
2406:9e00:3e::/48 maxlen: 48
2406:9e00:3f::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31606 (0x7b76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Oct 9 06:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6523a160-65d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e8:cd:7a:f5:f0:4e:fb:50:84:a7:cb:11:8f:
72:6c:2a:ea:74:28:7e:0b:f9:d9:79:d8:eb:42:d9:
bb:42:01:45:da:b6:a7:c3:5f:94:79:27:6a:c1:d4:
12:b4:53:ad:8f:a1:d2:b4:4b:8a:62:ad:a7:d8:56:
21:c8:4c:ed:94:34:1f:2a:ad:05:ec:38:5c:dc:55:
ec:3b:6d:06:50:42:c9:fa:6f:9e:40:e7:54:ed:8f:
09:b1:c9:fb:d4:c5:4b:84:81:c0:92:68:54:27:d3:
4f:53:2e:2e:78:e3:1f:ef:7b:5e:9b:74:61:e8:f7:
45:13:bf:5d:03:34:a9:bf:19:ff:9f:e5:d8:2c:c9:
f7:15:ed:33:83:f5:39:21:ea:d6:eb:a2:f9:b8:bc:
cf:74:20:15:e5:91:0c:d0:da:0d:e1:36:27:b3:b5:
ea:a8:c6:5a:de:a7:0d:74:21:4c:25:64:a7:bf:81:
c4:9d:b4:b4:c1:45:63:09:e9:39:81:c6:fe:de:a9:
81:c9:10:41:a2:53:5b:41:67:70:39:17:c4:20:66:
2c:e1:8c:23:25:70:7b:8e:5e:51:04:ea:1a:56:1a:
6c:71:ed:2c:83:50:67:e5:bc:4c:42:64:f6:19:41:
1f:df:0b:96:cf:24:32:eb:04:c4:3a:dd:7d:10:85:
2b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:80:76:73:CE:5D:1B:BD:FC:4C:4E:EA:61:C8:54:7F:DA:17:41:26
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1F4D93203DDF11EE962F8871C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.180.0-36.255.187.255
43.231.132.0/22
43.231.212.0/22
43.231.236.0/22
43.231.252.0/22
43.247.136.0/22
45.112.8.0/22
45.112.56.0/22
45.114.80.0/22
45.115.56.0/22
45.126.144.0/22
45.251.12.0/22
59.152.56.0/22
59.153.0.0/22
59.153.120.0/22
103.8.164.0/22
103.29.156.0/22
103.57.172.0/22
103.60.208.0/22
103.75.60.0/23
103.83.216.0/22
103.102.92.0/22
103.111.112.0/22
103.114.2.0/23
103.119.188.0/22
103.156.212.0/23
103.171.108.0/24
103.176.240.0/23
103.179.212.0/23
103.197.224.0/22
103.198.164.0/22
103.200.100.0-103.200.107.255
103.200.212.0/22
103.204.160.0/22
103.205.172.0/22
103.220.40.0/22
103.221.248.0/22
103.226.140.0-103.226.147.255
103.226.188.0/22
103.226.204.0/22
103.226.236.0-103.226.243.255
103.234.240.0/22
103.239.171.0/24
103.249.132.0/22
111.125.217.0-111.125.219.255
111.125.224.0/24
111.125.226.0/24
111.125.228.0/24
111.125.233.0/24
111.125.236.0/24
111.125.241.0-111.125.242.255
111.125.249.0/24
111.125.252.0/22
124.66.172.0/22
137.59.204.0/22
175.100.176.0/20
202.168.144.0/22
IPv6:
2406:9e00:20::/43
Signature Algorithm: sha256WithRSAEncryption
0d:92:be:ff:d3:3e:0e:05:e3:99:88:5d:e8:85:85:a9:70:cc:
e6:4d:23:f0:02:6f:c2:55:d6:fd:62:70:50:81:4a:87:d1:28:
33:a7:c6:5b:81:38:97:1e:58:a8:32:76:75:5f:8e:17:5f:81:
af:8b:a5:1d:68:56:44:9b:bf:3e:e3:5d:83:f4:b7:b4:f9:d3:
82:e7:49:60:a4:f6:02:b1:be:c3:c1:5d:c4:b0:50:31:eb:cb:
8e:30:75:59:be:b6:ee:09:40:b4:e5:93:70:14:2f:d1:1f:5a:
bd:16:a1:b9:9d:c1:11:c8:b9:2e:db:d9:f3:09:05:60:20:ef:
4f:f3:46:8b:3f:82:34:50:78:8b:de:7c:08:42:4a:1e:59:bf:
61:e8:07:5c:e8:95:80:7b:e6:d5:97:02:ac:40:fb:e7:2d:c6:
33:4f:3f:06:d9:fb:db:3c:20:0c:f5:74:81:f8:d6:10:30:c2:
7c:bc:db:6d:84:35:15:3e:7f:74:0a:37:a1:01:d1:a5:0c:96:
7f:e0:e3:6c:6a:0b:ff:fe:50:58:41:54:80:6d:b0:13:e1:fc:
c3:b8:ee:2d:3f:3d:37:71:56:94:68:d3:f0:b2:e9:44:7d:99:
62:a8:ab:8b:84:31:82:8c:57:97:c3:1f:7f:ee:ab:c0:3d:5a:
e6:2b:c8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:04:33 2025 by rpki-client