Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/209CCF421BFC11EFA9960576C4F9AE02.roa
File: 209CCF421BFC11EFA9960576C4F9AE02.roa (raw, json)
Hash identifier: fWorSWCZYcoCgeGAo0cOycCpkfpP9kNAyQ7oEobefi4=
Subject key identifier: 6D:EF:41:B6:0F:E9:5F:17:82:F6:0B:54:12:3A:A6:C8:5D:9D:04:B9
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 94FD
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/209CCF421BFC11EFA9960576C4F9AE02.roa
Signing time: Mon 22 Jul 2024 08:11:26 +0000
ROA not before: Mon 22 Jul 2024 08:11:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55352
IP address blocks: 36.255.180.0/22 maxlen: 22
36.255.180.0/24 maxlen: 24
36.255.181.0/24 maxlen: 24
36.255.182.0/24 maxlen: 24
36.255.183.0/24 maxlen: 24
36.255.184.0/22 maxlen: 22
36.255.184.0/24 maxlen: 24
36.255.185.0/24 maxlen: 24
36.255.186.0/24 maxlen: 24
36.255.187.0/24 maxlen: 24
43.231.132.0/22 maxlen: 24
43.231.212.0/22 maxlen: 24
43.231.236.0/22 maxlen: 24
43.231.252.0/22 maxlen: 24
43.247.136.0/22 maxlen: 24
45.112.8.0/22 maxlen: 24
45.112.56.0/22 maxlen: 24
45.114.80.0/22 maxlen: 24
45.115.56.0/24 maxlen: 24
45.115.57.0/24 maxlen: 24
45.115.58.0/24 maxlen: 24
45.115.59.0/24 maxlen: 24
45.117.108.0/22 maxlen: 24
45.126.144.0/22 maxlen: 24
45.251.12.0/24 maxlen: 24
45.251.13.0/24 maxlen: 24
45.251.14.0/24 maxlen: 24
45.251.15.0/24 maxlen: 24
59.152.56.0/22 maxlen: 22
59.152.56.0/24 maxlen: 24
59.152.57.0/24 maxlen: 24
59.152.58.0/24 maxlen: 24
59.152.59.0/24 maxlen: 24
59.153.0.0/22 maxlen: 24
59.153.120.0/22 maxlen: 24
103.8.164.0/22 maxlen: 24
103.29.156.0/22 maxlen: 24
103.57.172.0/22 maxlen: 22
103.57.172.0/24 maxlen: 24
103.57.173.0/24 maxlen: 24
103.57.174.0/24 maxlen: 24
103.57.175.0/24 maxlen: 24
103.60.208.0/22 maxlen: 24
103.75.60.0/23 maxlen: 24
103.83.216.0/22 maxlen: 22
103.83.216.0/24 maxlen: 24
103.83.217.0/24 maxlen: 24
103.83.218.0/24 maxlen: 24
103.83.219.0/24 maxlen: 24
103.102.92.0/22 maxlen: 24
103.114.0.0/22 maxlen: 24
103.119.188.0/22 maxlen: 24
103.131.184.0/22 maxlen: 22
103.131.184.0/24 maxlen: 24
103.131.185.0/24 maxlen: 24
103.131.186.0/24 maxlen: 24
103.131.187.0/24 maxlen: 24
103.156.212.0/23 maxlen: 24
103.163.194.0/23 maxlen: 24
103.171.108.0/24 maxlen: 24
103.176.240.0/23 maxlen: 24
103.179.212.0/23 maxlen: 24
103.197.224.0/22 maxlen: 24
103.198.164.0/22 maxlen: 24
103.200.100.0/22 maxlen: 22
103.200.100.0/24 maxlen: 24
103.200.101.0/24 maxlen: 24
103.200.102.0/24 maxlen: 24
103.200.103.0/24 maxlen: 24
103.200.104.0/22 maxlen: 24
103.200.212.0/22 maxlen: 22
103.200.212.0/24 maxlen: 24
103.200.213.0/24 maxlen: 24
103.200.214.0/24 maxlen: 24
103.200.215.0/24 maxlen: 24
103.204.160.0/22 maxlen: 24
103.205.172.0/22 maxlen: 22
103.205.172.0/24 maxlen: 24
103.205.173.0/24 maxlen: 24
103.205.174.0/24 maxlen: 24
103.205.175.0/24 maxlen: 24
103.220.40.0/22 maxlen: 24
103.221.248.0/22 maxlen: 24
103.226.140.0/22 maxlen: 24
103.226.144.0/22 maxlen: 24
103.226.188.0/22 maxlen: 24
103.226.204.0/22 maxlen: 24
103.226.236.0/22 maxlen: 24
103.226.240.0/22 maxlen: 24
103.234.212.0/22 maxlen: 22
103.234.212.0/24 maxlen: 24
103.234.213.0/24 maxlen: 24
103.234.214.0/24 maxlen: 24
103.234.215.0/24 maxlen: 24
103.234.240.0/22 maxlen: 22
103.234.240.0/24 maxlen: 24
103.234.241.0/24 maxlen: 24
103.234.242.0/24 maxlen: 24
103.234.243.0/24 maxlen: 24
103.239.171.0/24 maxlen: 24
103.249.132.0/22 maxlen: 24
111.125.217.0/24 maxlen: 24
111.125.218.0/23 maxlen: 24
111.125.224.0/24 maxlen: 24
111.125.226.0/24 maxlen: 24
111.125.228.0/24 maxlen: 24
111.125.233.0/24 maxlen: 24
111.125.236.0/24 maxlen: 24
111.125.241.0/24 maxlen: 24
111.125.242.0/24 maxlen: 24
111.125.249.0/24 maxlen: 24
111.125.252.0/22 maxlen: 24
124.66.172.0/22 maxlen: 24
137.59.204.0/22 maxlen: 22
137.59.204.0/24 maxlen: 24
137.59.205.0/24 maxlen: 24
137.59.206.0/24 maxlen: 24
137.59.207.0/24 maxlen: 24
175.100.176.0/20 maxlen: 24
202.168.144.0/22 maxlen: 24
2406:9e00:20::/48 maxlen: 48
2406:9e00:21::/48 maxlen: 48
2406:9e00:22::/48 maxlen: 48
2406:9e00:23::/48 maxlen: 48
2406:9e00:24::/48 maxlen: 48
2406:9e00:25::/48 maxlen: 48
2406:9e00:26::/48 maxlen: 48
2406:9e00:27::/48 maxlen: 48
2406:9e00:28::/48 maxlen: 48
2406:9e00:29::/48 maxlen: 48
2406:9e00:2a::/48 maxlen: 48
2406:9e00:2b::/48 maxlen: 48
2406:9e00:2c::/48 maxlen: 48
2406:9e00:2d::/48 maxlen: 48
2406:9e00:2e::/48 maxlen: 48
2406:9e00:2f::/48 maxlen: 48
2406:9e00:30::/48 maxlen: 48
2406:9e00:31::/48 maxlen: 48
2406:9e00:32::/48 maxlen: 48
2406:9e00:33::/48 maxlen: 48
2406:9e00:34::/48 maxlen: 48
2406:9e00:35::/48 maxlen: 48
2406:9e00:36::/48 maxlen: 48
2406:9e00:37::/48 maxlen: 48
2406:9e00:38::/48 maxlen: 48
2406:9e00:39::/48 maxlen: 48
2406:9e00:3a::/48 maxlen: 48
2406:9e00:3b::/48 maxlen: 48
2406:9e00:3c::/48 maxlen: 48
2406:9e00:3d::/48 maxlen: 48
2406:9e00:3e::/48 maxlen: 48
2406:9e00:3f::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38141 (0x94fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jul 22 08:11:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=669e142e-9a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3e:4b:a5:19:6e:d4:97:71:89:3f:79:a0:bf:
07:ab:7d:56:32:93:10:bf:b4:46:d7:5f:a7:e0:87:
b2:fc:0b:7b:24:02:aa:b8:c3:0c:7d:58:01:f4:bc:
42:6a:c8:eb:ce:89:9d:b2:ae:5e:74:9f:19:e6:0a:
45:4b:45:55:93:da:d7:80:92:b1:0e:11:d8:ff:d6:
ed:44:38:f6:67:6f:db:1e:9c:6d:ce:78:bf:64:72:
7c:1a:ad:47:82:71:b6:cb:66:c3:09:1a:5c:60:37:
79:11:32:fd:72:2c:09:3a:8f:74:cc:e5:99:a5:ab:
3d:a7:0f:0f:1d:10:a0:06:18:d7:16:f5:77:42:54:
d1:ce:b0:15:c1:ae:ff:2f:ca:b4:d1:99:31:a2:91:
a8:6b:54:69:45:f1:67:9c:da:d5:bd:63:d3:4b:cc:
62:56:ad:ad:a8:e8:50:7d:30:d3:ba:aa:02:19:a7:
89:7a:ec:f3:8c:0c:39:f5:28:3a:75:1f:7d:a7:ff:
f3:3a:d0:38:37:72:6f:be:cb:09:7f:6b:72:bc:f5:
a0:86:d5:20:b6:c8:9d:f7:ba:0b:1f:14:9f:33:d3:
94:c7:f1:29:bf:dc:3a:7c:4b:de:0f:61:af:df:40:
db:2c:7c:0b:0c:3e:39:be:fd:fd:2e:a2:c2:48:7c:
56:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:EF:41:B6:0F:E9:5F:17:82:F6:0B:54:12:3A:A6:C8:5D:9D:04:B9
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/209CCF421BFC11EFA9960576C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.180.0-36.255.187.255
43.231.132.0/22
43.231.212.0/22
43.231.236.0/22
43.231.252.0/22
43.247.136.0/22
45.112.8.0/22
45.112.56.0/22
45.114.80.0/22
45.115.56.0/22
45.117.108.0/22
45.126.144.0/22
45.251.12.0/22
59.152.56.0/22
59.153.0.0/22
59.153.120.0/22
103.8.164.0/22
103.29.156.0/22
103.57.172.0/22
103.60.208.0/22
103.75.60.0/23
103.83.216.0/22
103.102.92.0/22
103.114.0.0/22
103.119.188.0/22
103.131.184.0/22
103.156.212.0/23
103.163.194.0/23
103.171.108.0/24
103.176.240.0/23
103.179.212.0/23
103.197.224.0/22
103.198.164.0/22
103.200.100.0-103.200.107.255
103.200.212.0/22
103.204.160.0/22
103.205.172.0/22
103.220.40.0/22
103.221.248.0/22
103.226.140.0-103.226.147.255
103.226.188.0/22
103.226.204.0/22
103.226.236.0-103.226.243.255
103.234.212.0/22
103.234.240.0/22
103.239.171.0/24
103.249.132.0/22
111.125.217.0-111.125.219.255
111.125.224.0/24
111.125.226.0/24
111.125.228.0/24
111.125.233.0/24
111.125.236.0/24
111.125.241.0-111.125.242.255
111.125.249.0/24
111.125.252.0/22
124.66.172.0/22
137.59.204.0/22
175.100.176.0/20
202.168.144.0/22
IPv6:
2406:9e00:20::/43
Signature Algorithm: sha256WithRSAEncryption
72:0f:9e:1f:9d:32:42:72:8d:03:4e:1c:d3:35:bc:a9:bd:f9:
4a:95:9d:b8:91:45:a9:cc:e3:24:78:04:f7:a4:be:82:52:4e:
33:28:75:91:9f:ca:ad:87:cc:96:5b:28:c8:76:2b:c2:19:d4:
e5:ee:fa:cd:04:03:33:3f:52:9b:97:53:e4:b9:48:2b:04:6c:
5e:e7:4d:10:10:11:7f:42:03:86:4c:6b:51:e8:6a:cc:75:d2:
e8:e4:54:f8:0e:04:5f:5e:24:c3:47:4e:03:e2:be:18:9b:72:
c7:2d:56:2c:0b:46:fa:82:47:d5:96:79:ed:d9:f3:9f:80:df:
ba:51:79:22:74:fd:b8:18:e3:1c:2f:18:e6:eb:e4:bf:61:35:
ff:b8:92:3f:bb:96:c7:37:1b:22:2d:39:d2:09:b7:75:9c:e6:
07:1d:1e:dd:bf:52:b8:3a:01:25:12:ec:e8:60:d4:1b:32:b6:
10:bd:9e:50:88:92:b1:41:d5:e1:7e:8e:82:eb:c5:b3:c7:2f:
24:79:63:d3:a3:52:9c:7a:85:22:9d:22:19:5e:20:b9:49:39:
68:4a:6b:ea:64:6f:8b:5d:e2:26:11:3d:5d:43:8c:da:57:d7:
85:35:3b:fa:f7:63:dc:0c:39:c2:68:c6:3f:d6:f7:40:af:f7:
de:28:b9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:06:31 2025 by rpki-client