Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/375C7A006ED611EC989AA031C4F9AE02.roa
File: 375C7A006ED611EC989AA031C4F9AE02.roa (raw, json)
Hash identifier: IrD6yXmaHtdZ+B6zmhLbehTJaUzUKzCweUrLURhV8AM=
Subject key identifier: A8:92:08:78:E2:59:AB:99:9D:65:FF:B7:AC:93:48:4F:5D:86:8D:FD
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 4BB9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/375C7A006ED611EC989AA031C4F9AE02.roa
Signing time: Thu 07 Apr 2022 07:41:44 +0000
ROA not before: Thu 07 Apr 2022 07:41:44 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 58678
IP address blocks: 43.241.28.0/22 maxlen: 24
43.241.128.0/22 maxlen: 24
43.241.132.0/22 maxlen: 24
43.242.208.0/24 maxlen: 24
43.242.209.0/24 maxlen: 24
43.242.210.0/24 maxlen: 24
43.242.211.0/24 maxlen: 24
43.242.224.0/22 maxlen: 24
43.242.228.0/22 maxlen: 24
45.64.84.0/22 maxlen: 24
45.114.192.0/22 maxlen: 24
45.117.0.0/22 maxlen: 24
45.119.132.0/22 maxlen: 24
45.127.120.0/22 maxlen: 24
45.250.248.0/24 maxlen: 24
45.250.249.0/24 maxlen: 24
45.250.250.0/24 maxlen: 24
103.14.232.0/22 maxlen: 24
103.26.52.0/22 maxlen: 22
103.26.52.0/24 maxlen: 24
103.26.53.0/24 maxlen: 24
103.26.54.0/24 maxlen: 24
103.26.55.0/24 maxlen: 24
103.26.56.0/22 maxlen: 24
103.42.160.0/22 maxlen: 24
103.48.56.0/22 maxlen: 24
103.48.100.0/22 maxlen: 24
103.59.188.0/22 maxlen: 24
103.59.207.0/24 maxlen: 24
103.59.212.0/22 maxlen: 24
103.74.236.0/22 maxlen: 24
103.77.152.0/22 maxlen: 23
103.77.152.0/23 maxlen: 24
103.77.154.0/24 maxlen: 24
103.89.40.0/22 maxlen: 24
103.111.132.0/22 maxlen: 24
103.112.33.0/24 maxlen: 24
103.112.34.0/24 maxlen: 24
103.112.35.0/24 maxlen: 24
103.137.152.0/22 maxlen: 24
103.148.65.0/24 maxlen: 24
103.155.170.0/24 maxlen: 24
103.162.190.0/23 maxlen: 24
103.163.188.0/24 maxlen: 24
103.163.189.0/24 maxlen: 24
103.168.62.0/24 maxlen: 24
103.168.63.0/24 maxlen: 24
103.174.38.0/24 maxlen: 24
103.177.180.0/24 maxlen: 24
103.177.181.0/24 maxlen: 24
103.181.208.0/24 maxlen: 24
103.185.174.0/23 maxlen: 24
103.204.119.0/24 maxlen: 24
103.209.18.0/24 maxlen: 24
103.209.19.0/24 maxlen: 24
103.216.144.0/22 maxlen: 24
103.218.100.0/22 maxlen: 24
103.219.164.0/24 maxlen: 24
103.219.165.0/24 maxlen: 24
103.219.166.0/24 maxlen: 24
103.219.167.0/24 maxlen: 24
103.220.80.0/22 maxlen: 24
103.220.212.0/22 maxlen: 24
103.226.0.0/22 maxlen: 24
103.226.4.0/22 maxlen: 24
103.226.28.0/22 maxlen: 24
103.232.24.0/22 maxlen: 24
124.108.16.0/22 maxlen: 24
2404:bd00::/48 maxlen: 48
2404:bd00:1::/48 maxlen: 48
2404:bd00:2::/48 maxlen: 48
2404:bd00:3::/48 maxlen: 48
2404:bd00:4::/48 maxlen: 48
2404:bd00:5::/48 maxlen: 48
2404:bd00:6::/48 maxlen: 48
2404:bd00:7::/48 maxlen: 48
2404:bd00:8::/48 maxlen: 48
2404:bd00:a::/48 maxlen: 48
2404:bd00:b::/48 maxlen: 48
2404:bd00:c::/48 maxlen: 48
2404:bd00:d::/48 maxlen: 48
2404:bd00:e::/48 maxlen: 48
2404:bd00:f::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19385 (0x4bb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Apr 7 07:41:44 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=624e95b7-b8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ff:e9:a7:27:92:f2:43:77:63:ea:46:e4:55:
81:f9:c5:04:87:b6:2a:7d:1d:73:42:5e:30:3d:c0:
56:ee:6b:66:8a:7e:d3:60:4c:9e:3a:8c:13:94:c8:
11:c9:51:77:d3:3e:58:ed:78:90:a9:92:47:09:60:
bf:d4:78:27:f7:72:85:b1:e8:51:55:ba:b3:e4:7d:
ec:90:d2:4b:d6:89:85:2d:67:15:d4:70:a3:2b:5b:
19:31:b5:43:8d:96:cd:95:7c:71:74:d5:ef:c7:14:
78:2c:bb:32:94:47:2f:e5:e0:97:3f:50:1e:46:ae:
b1:b3:14:db:2f:a4:87:53:33:b4:cb:73:af:fd:9a:
bb:8b:a8:75:8a:21:80:08:3e:0a:1b:e1:5e:05:40:
d9:bd:b1:ba:16:02:7d:83:b9:83:71:e1:64:d1:f2:
f9:f0:84:6d:af:08:c0:a4:d5:d4:f2:d7:14:79:3e:
eb:79:ea:c2:85:8d:0b:99:d3:51:9a:aa:30:f3:1a:
71:0f:05:ec:bb:29:5d:55:89:d9:26:37:8b:28:ca:
05:e4:f7:ed:48:29:4d:e7:49:68:77:f1:34:a2:b9:
24:d7:df:5c:a3:10:d3:f3:fd:13:22:92:57:74:84:
b3:c8:d1:67:e5:e9:44:67:ac:9f:6b:f2:d7:df:d3:
49:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:92:08:78:E2:59:AB:99:9D:65:FF:B7:AC:93:48:4F:5D:86:8D:FD
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/375C7A006ED611EC989AA031C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.241.28.0/22
43.241.128.0/21
43.242.208.0/22
43.242.224.0/21
45.64.84.0/22
45.114.192.0/22
45.117.0.0/22
45.119.132.0/22
45.127.120.0/22
45.250.248.0-45.250.250.255
103.14.232.0/22
103.26.52.0-103.26.59.255
103.42.160.0/22
103.48.56.0/22
103.48.100.0/22
103.59.188.0/22
103.59.207.0/24
103.59.212.0/22
103.74.236.0/22
103.77.152.0/22
103.89.40.0/22
103.111.132.0/22
103.112.33.0-103.112.35.255
103.137.152.0/22
103.148.65.0/24
103.155.170.0/24
103.162.190.0/23
103.163.188.0/23
103.168.62.0/23
103.174.38.0/24
103.177.180.0/23
103.181.208.0/24
103.185.174.0/23
103.204.119.0/24
103.209.18.0/23
103.216.144.0/22
103.218.100.0/22
103.219.164.0/22
103.220.80.0/22
103.220.212.0/22
103.226.0.0/21
103.226.28.0/22
103.232.24.0/22
124.108.16.0/22
IPv6:
2404:bd00::-2404:bd00:8:ffff:ffff:ffff:ffff:ffff
2404:bd00:a::-2404:bd00:f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8f:04:86:8c:75:8e:50:7c:a7:85:1a:8c:28:7f:d8:04:50:00:
93:97:52:97:a7:52:eb:e0:6a:ba:c6:65:43:94:cd:98:fc:ca:
04:dd:81:91:cd:4c:6b:2d:0f:32:2e:8b:47:c1:25:d0:55:e7:
a7:9a:48:a1:a0:41:22:89:af:26:7e:ea:a5:49:7f:df:27:eb:
f0:56:20:66:b8:81:49:dd:7c:73:29:27:94:33:ff:02:9e:f0:
6f:ea:30:89:d4:aa:05:b4:b3:0b:54:18:b2:20:8d:03:b0:a3:
8a:89:b9:97:ef:e0:46:28:40:07:89:85:29:5b:91:b2:38:a0:
ba:21:52:50:df:c6:16:33:7b:6e:4a:11:41:e5:30:f1:6a:b7:
0c:b2:12:ff:21:0b:b8:9b:f9:49:13:4d:11:9d:a5:da:37:85:
2e:84:16:53:51:43:c1:73:bd:ec:8f:de:d5:c6:32:2c:95:d9:
c6:d8:a8:a3:38:96:58:4e:5b:90:88:e7:51:35:ef:8d:a7:ae:
44:09:f4:c3:be:45:50:9c:ff:de:15:fe:6d:62:17:d9:10:d6:
67:ce:12:c5:bb:d2:55:79:e7:53:9a:10:ad:c1:2f:56:70:98:
6e:92:13:ac:8c:f5:b8:17:9a:48:7d:f7:58:b0:8e:9d:0b:c2:
20:b6:d7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:18:21 2025 by rpki-client