Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/28C343B6C1C211EE97C83A84C4F9AE02.roa
File: 28C343B6C1C211EE97C83A84C4F9AE02.roa (raw, json)
Hash identifier: nndWt0/ds7g1L6DWW/XF75jLYwYMAfrHVXLO/tiBO7c=
Subject key identifier: 68:E6:66:45:4A:CF:79:13:1F:66:D4:CE:6F:7D:3B:C1:16:BB:89:2C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 826F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/28C343B6C1C211EE97C83A84C4F9AE02.roa
Signing time: Fri 02 Feb 2024 11:56:55 +0000
ROA not before: Fri 02 Feb 2024 11:56:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58640
IP address blocks: 43.239.68.0/22 maxlen: 24
103.14.124.0/22 maxlen: 24
103.30.140.0/22 maxlen: 24
103.80.64.0/22 maxlen: 24
103.110.200.0/22 maxlen: 24
103.198.28.0/22 maxlen: 24
103.225.40.0/22 maxlen: 24
144.48.76.0/22 maxlen: 24
163.47.140.0/22 maxlen: 24
163.47.152.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33391 (0x826f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Feb 2 11:56:55 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65bcd886-5764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:5d:47:88:ce:b5:0e:28:56:19:2a:2b:38:23:
71:f0:0f:bd:21:f6:41:43:94:ac:0f:89:93:2c:da:
08:95:b5:bd:83:88:2c:bb:6f:9e:34:d4:11:03:59:
eb:f8:bb:8b:b5:08:0c:45:96:50:40:51:63:43:ed:
21:ea:f6:bf:29:88:73:fd:3b:a1:0a:77:57:76:36:
17:fa:fd:77:f8:85:b2:68:6e:03:0e:53:f2:50:3a:
e1:99:57:d8:5b:7e:7c:54:8d:07:0d:5b:a0:73:5d:
81:2c:97:bc:35:67:67:bf:63:bb:e0:d6:d4:64:7b:
a7:70:49:f5:d7:6c:b0:4b:e7:8e:61:a4:fe:4f:69:
d3:5b:ed:6d:83:cb:6e:6e:09:45:d1:df:fe:8f:c2:
d9:02:c7:69:61:bb:56:34:8b:11:27:bc:a1:81:a7:
7b:28:d2:3e:57:31:bc:77:05:8b:d4:89:7a:9b:94:
de:ed:02:f1:cb:43:40:48:34:63:68:ae:3a:74:db:
c2:97:13:b8:11:ec:8e:b6:d7:95:a0:81:2e:46:f3:
d3:63:85:38:56:94:e4:93:35:a3:1a:c4:f6:b6:00:
d9:f5:91:16:1a:37:a6:42:ce:d3:3b:cb:47:29:02:
64:7c:b3:ab:d7:6c:1d:c0:8c:2d:25:07:fa:60:77:
01:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E6:66:45:4A:CF:79:13:1F:66:D4:CE:6F:7D:3B:C1:16:BB:89:2C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/28C343B6C1C211EE97C83A84C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.68.0/22
103.14.124.0/22
103.30.140.0/22
103.80.64.0/22
103.110.200.0/22
103.198.28.0/22
103.225.40.0/22
144.48.76.0/22
163.47.140.0/22
163.47.152.0/22
Signature Algorithm: sha256WithRSAEncryption
11:c0:0f:06:45:7e:6d:0f:05:bc:46:48:8a:c0:78:dd:bb:9c:
cd:c1:42:43:b8:4d:02:c1:c4:2d:bf:1c:98:48:8e:f7:37:4a:
b4:36:2a:79:46:e0:07:b8:a0:53:f3:6c:d8:e1:42:d3:d5:44:
e2:8d:d0:68:57:32:a3:50:05:a4:f8:7b:e3:59:4e:9c:ed:43:
86:da:4a:e0:5b:a3:24:37:64:83:f9:d6:59:43:fd:fd:e4:2b:
4e:ea:7f:e4:ca:9c:86:53:1d:de:c5:31:de:01:92:20:52:5a:
2d:39:16:8e:f9:d1:74:bb:e6:ff:18:a1:b7:c1:0b:d6:56:c7:
5a:a8:9a:12:26:ec:4d:d4:6a:3b:84:2b:69:85:03:a9:95:96:
3e:41:58:2f:20:37:bb:8d:80:9f:09:18:71:c6:06:ae:3c:19:
81:5e:2e:97:2b:03:4c:c3:7c:c6:b7:65:b9:02:2f:2a:14:b7:
d5:9c:c6:7e:19:95:e4:3c:66:35:79:91:4d:4b:07:ca:1f:f6:
6d:c9:ef:95:d6:7e:59:57:22:ac:c4:55:e1:2c:d0:23:e5:41:
f1:8d:f7:72:be:17:40:f9:39:dc:0d:a0:7b:00:3f:e8:5b:1c:
3a:70:54:a4:e0:6e:85:51:ba:1c:37:50:fb:5d:8e:68:56:e5:
53:8f:c6:44
-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgIDAIJvMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDIwMjExNTY1NVoXDTI0MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjViY2Q4ODYtNTc2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPpdR4jOtQ4oVhkqKzgjcfAPvSH2QUOUrA+JkyzaCJW1vYOILLtvnjTUEQNZ
6/i7i7UIDEWWUEBRY0PtIer2vymIc/07oQp3V3Y2F/r9d/iFsmhuAw5T8lA64ZlX
2Ft+fFSNBw1boHNdgSyXvDVnZ79ju+DW1GR7p3BJ9ddssEvnjmGk/k9p01vtbYPL
bm4JRdHf/o/C2QLHaWG7VjSLESe8oYGneyjSPlcxvHcFi9SJepuU3u0C8ctDQEg0
Y2iuOnTbwpcTuBHsjrbXlaCBLkbz02OFOFaU5JM1oxrE9rYA2fWRFho3pkLO0zvL
RykCZHyzq9dsHcCMLSUH+mB3ARsCAwEAAaOCAsswggLHMB0GA1UdDgQWBBRo5mZF
Ss95Ex9m1M5vfTvBFruJLDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzI4QzM0M0I2
QzFDMjExRUU5N0M4M0E4NEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMFUGCCsGAQUFBwEHAQH/
BEYwRDBCBAIAATA8AwQCK+9EAwQCZw58AwQCZx6MAwQCZ1BAAwQCZ27IAwQCZ8Yc
AwQCZ+EoAwQCkDBMAwQCoy+MAwQCoy+YMA0GCSqGSIb3DQEBCwUAA4IBAQARwA8G
RX5tDwW8RkiKwHjdu5zNwUJDuE0CwcQtvxyYSI73N0q0Nip5RuAHuKBT82zY4ULT
1UTijdBoVzKjUAWk+HvjWU6c7UOG2krgW6MkN2SD+dZZQ/395CtO6n/kypyGUx3e
xTHeAZIgUlotORaO+dF0u+b/GKG3wQvWVsdaqJoSJuxN1Go7hCtphQOplZY+QVgv
IDe7jYCfCRhxxgauPBmBXi6XKwNMw3zGt2W5Ai8qFLfVnMZ+GZXkPGY1eZFNSwfK
H/Ztye+V1n5ZVyKsxFXhLNAj5UHxjfdyvhdA+TncDaB7AD/oWxw6cFSk4G6FUboc
N1D7XY5oVuVTj8ZE
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:15:03 2025 by rpki-client