Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2B09F1D25E0D11EFA4E6D922C4F9AE02.roa
File: 2B09F1D25E0D11EFA4E6D922C4F9AE02.roa (raw, json)
Hash identifier: vshfZMS7NTm3BJypJtM3bHPi2gbrtoX0102+BBiSC6Y=
Subject key identifier: 3A:1A:4F:62:B2:F9:D6:90:CD:0E:45:66:C6:70:B4:75:06:35:88:DC
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 970E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2B09F1D25E0D11EFA4E6D922C4F9AE02.roa
Signing time: Mon 19 Aug 2024 09:26:52 +0000
ROA not before: Mon 19 Aug 2024 09:26:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133647
IP address blocks: 14.102.20.0/24 maxlen: 24
14.102.21.0/24 maxlen: 24
14.102.46.0/24 maxlen: 24
14.102.47.0/24 maxlen: 24
14.102.49.0/24 maxlen: 24
14.102.51.0/24 maxlen: 24
14.102.58.0/24 maxlen: 24
14.102.94.0/24 maxlen: 24
14.102.102.0/24 maxlen: 24
43.229.162.0/24 maxlen: 24
43.230.156.0/22 maxlen: 24
45.115.252.0/22 maxlen: 24
45.116.68.0/22 maxlen: 24
103.38.70.0/24 maxlen: 24
103.43.4.0/22 maxlen: 24
103.50.4.0/22 maxlen: 24
103.55.6.0/23 maxlen: 24
103.61.102.0/23 maxlen: 24
103.69.216.0/22 maxlen: 24
103.70.144.0/22 maxlen: 24
103.70.176.0/23 maxlen: 24
103.79.112.0/22 maxlen: 24
103.87.48.0/24 maxlen: 24
103.87.49.0/24 maxlen: 24
103.91.68.0/22 maxlen: 24
103.93.176.0/22 maxlen: 24
103.109.72.0/23 maxlen: 24
103.122.85.0/24 maxlen: 24
103.129.194.0/24 maxlen: 24
103.129.195.0/24 maxlen: 24
103.144.37.0/24 maxlen: 24
103.156.168.0/23 maxlen: 24
103.157.160.0/23 maxlen: 24
103.159.154.0/23 maxlen: 24
103.161.230.0/23 maxlen: 24
103.161.232.0/24 maxlen: 24
103.161.233.0/24 maxlen: 24
103.174.105.0/24 maxlen: 24
103.175.76.0/24 maxlen: 24
103.175.77.0/24 maxlen: 24
103.176.71.0/24 maxlen: 24
103.177.61.0/24 maxlen: 24
103.214.97.0/24 maxlen: 24
103.220.28.0/24 maxlen: 24
103.220.29.0/24 maxlen: 24
103.220.30.0/24 maxlen: 24
103.220.31.0/24 maxlen: 24
103.237.172.0/24 maxlen: 24
103.237.173.0/24 maxlen: 24
103.237.174.0/24 maxlen: 24
103.237.175.0/24 maxlen: 24
110.172.137.0/24 maxlen: 24
110.172.141.0/24 maxlen: 24
110.172.142.0/24 maxlen: 24
110.172.144.0/24 maxlen: 24
110.172.163.0/24 maxlen: 24
110.172.172.0/24 maxlen: 24
110.172.188.0/24 maxlen: 24
118.91.190.0/24 maxlen: 24
175.111.180.0/24 maxlen: 24
175.111.182.0/24 maxlen: 24
175.111.183.0/24 maxlen: 24
202.89.73.0/24 maxlen: 24
202.89.79.0/24 maxlen: 24
2001:df0:dc80::/48 maxlen: 48
2001:df1:b280::/48 maxlen: 48
2001:df1:f440::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38670 (0x970e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Aug 19 09:26:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66c30fdc-73e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:4a:1d:fe:6b:9f:94:19:59:47:cb:a0:12:de:
5a:c2:f7:ac:69:7f:b0:bd:e1:da:44:20:42:6c:28:
09:1e:0a:38:03:41:6e:c3:7d:ff:e5:ba:f6:18:90:
6b:81:54:02:07:71:73:2b:f0:a1:da:9a:9c:20:9e:
cf:0a:ff:4a:b7:0b:72:94:dc:f4:ae:be:cf:b1:d0:
0d:fd:09:55:40:30:e5:ea:19:c4:8f:96:e5:39:1a:
c8:ce:d1:08:06:80:99:9b:83:e3:3b:b4:4d:39:20:
86:2a:78:e1:3e:64:1d:23:52:39:ad:90:7f:78:5f:
f8:4e:14:50:a3:db:41:a3:cc:d3:18:13:be:c6:f4:
7e:65:d5:d4:7d:ad:87:4c:8a:3c:c1:48:b4:c1:d9:
49:b0:90:e5:73:e8:a3:5d:00:3a:9d:fe:5f:ca:9b:
aa:3d:fc:ce:97:9b:e8:8f:84:83:f3:d6:38:6e:55:
93:6a:2d:95:f6:a9:a3:46:dd:56:34:8c:bc:88:4c:
05:d9:21:5f:bd:52:f6:cf:aa:75:11:99:39:f8:94:
8b:a6:ef:60:08:09:b6:cd:05:7b:10:0f:ab:f4:87:
50:b0:fc:5b:67:19:57:59:0a:d0:54:37:2c:ff:0a:
ad:e6:49:76:35:4a:49:89:b5:f8:9f:43:88:c3:09:
eb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1A:4F:62:B2:F9:D6:90:CD:0E:45:66:C6:70:B4:75:06:35:88:DC
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2B09F1D25E0D11EFA4E6D922C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.102.20.0/23
14.102.46.0/23
14.102.49.0/24
14.102.51.0/24
14.102.58.0/24
14.102.94.0/24
14.102.102.0/24
43.229.162.0/24
43.230.156.0/22
45.115.252.0/22
45.116.68.0/22
103.38.70.0/24
103.43.4.0/22
103.50.4.0/22
103.55.6.0/23
103.61.102.0/23
103.69.216.0/22
103.70.144.0/22
103.70.176.0/23
103.79.112.0/22
103.87.48.0/23
103.91.68.0/22
103.93.176.0/22
103.109.72.0/23
103.122.85.0/24
103.129.194.0/23
103.144.37.0/24
103.156.168.0/23
103.157.160.0/23
103.159.154.0/23
103.161.230.0-103.161.233.255
103.174.105.0/24
103.175.76.0/23
103.176.71.0/24
103.177.61.0/24
103.214.97.0/24
103.220.28.0/22
103.237.172.0/22
110.172.137.0/24
110.172.141.0-110.172.142.255
110.172.144.0/24
110.172.163.0/24
110.172.172.0/24
110.172.188.0/24
118.91.190.0/24
175.111.180.0/24
175.111.182.0/23
202.89.73.0/24
202.89.79.0/24
IPv6:
2001:df0:dc80::/48
2001:df1:b280::/48
2001:df1:f440::/48
Signature Algorithm: sha256WithRSAEncryption
5f:10:77:e5:f0:86:aa:cb:65:22:cb:3b:3c:61:28:22:38:9c:
a4:d8:1d:79:cd:6c:2c:85:83:39:0e:4c:f0:c2:43:83:ee:db:
ad:bf:ca:19:3e:c0:2b:ac:c6:92:99:19:b0:8a:6c:0f:f9:54:
6c:d1:a9:c5:42:a7:01:df:ac:10:39:3d:67:13:4e:ba:75:ba:
3b:c7:8a:3a:51:5b:83:30:de:7b:30:d3:30:5b:f4:6a:65:77:
91:30:55:b7:a1:75:4e:c1:f5:20:6b:60:f3:30:de:2d:6f:b9:
b2:f7:67:40:4f:7b:3e:39:68:e2:27:85:74:c6:79:94:ba:ab:
ae:6c:e6:f2:98:9e:8d:f6:78:68:f6:60:83:e7:d3:6b:c7:79:
c6:c5:d1:f2:85:a3:29:71:3e:71:85:dc:f1:0e:ef:47:73:24:
fd:32:8e:89:06:63:70:11:bb:35:aa:85:b4:b4:8d:ab:42:18:
f3:f5:83:1f:6e:ed:9e:12:7d:1d:56:19:95:71:91:09:8b:67:
b8:a4:18:24:e1:7b:a8:ed:b5:7e:1f:6f:02:90:3d:d9:09:23:
a7:d3:47:99:28:46:57:ac:53:da:a7:c7:ef:ac:6d:01:f9:35:
68:d4:37:72:3f:ce:00:26:9a:f5:8d:7d:ad:36:ab:23:db:c1:
fc:e9:2e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:06:33 2025 by rpki-client