Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3CC0D8DA7EE511EE8EA6E421C4F9AE02.roa
File: 3CC0D8DA7EE511EE8EA6E421C4F9AE02.roa (raw, json)
Hash identifier: 0T48rM1+1v6BamOPYnDbcVmC/QvGkR04ZmyMgZIPuNE=
Subject key identifier: 85:E6:37:9B:8E:95:AF:DD:8C:64:94:26:20:4A:D9:3D:5D:E4:E3:02
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7D62
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3CC0D8DA7EE511EE8EA6E421C4F9AE02.roa
Signing time: Thu 09 Nov 2023 09:49:13 +0000
ROA not before: Thu 09 Nov 2023 09:49:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58678
IP address blocks: 43.241.28.0/22 maxlen: 24
43.241.128.0/22 maxlen: 24
43.241.132.0/22 maxlen: 24
43.242.208.0/24 maxlen: 24
43.242.209.0/24 maxlen: 24
43.242.210.0/24 maxlen: 24
43.242.211.0/24 maxlen: 24
43.242.224.0/22 maxlen: 24
43.242.228.0/22 maxlen: 24
45.64.84.0/22 maxlen: 24
45.114.192.0/22 maxlen: 24
45.117.0.0/22 maxlen: 23
45.117.0.0/23 maxlen: 24
45.117.3.0/24 maxlen: 24
45.127.120.0/22 maxlen: 24
45.250.248.0/24 maxlen: 24
45.250.249.0/24 maxlen: 24
45.250.250.0/24 maxlen: 24
103.14.232.0/22 maxlen: 24
103.17.12.0/23 maxlen: 24
103.26.52.0/22 maxlen: 22
103.26.52.0/24 maxlen: 24
103.26.53.0/24 maxlen: 24
103.26.54.0/24 maxlen: 24
103.26.55.0/24 maxlen: 24
103.26.56.0/22 maxlen: 24
103.42.160.0/22 maxlen: 24
103.48.56.0/23 maxlen: 24
103.48.58.0/24 maxlen: 24
103.48.59.0/24 maxlen: 24
103.48.100.0/22 maxlen: 24
103.57.96.0/23 maxlen: 24
103.59.212.0/22 maxlen: 24
103.66.80.0/22 maxlen: 22
103.66.80.0/24 maxlen: 24
103.66.81.0/24 maxlen: 24
103.66.82.0/24 maxlen: 24
103.66.83.0/24 maxlen: 24
103.69.238.0/24 maxlen: 24
103.74.236.0/22 maxlen: 24
103.77.152.0/22 maxlen: 23
103.77.152.0/23 maxlen: 24
103.77.154.0/24 maxlen: 24
103.89.40.0/22 maxlen: 24
103.111.132.0/22 maxlen: 24
103.112.32.0/24 maxlen: 24
103.112.33.0/24 maxlen: 24
103.112.34.0/24 maxlen: 24
103.112.35.0/24 maxlen: 24
103.117.184.0/24 maxlen: 24
103.117.187.0/24 maxlen: 24
103.132.228.0/23 maxlen: 24
103.137.152.0/22 maxlen: 24
103.148.207.0/24 maxlen: 24
103.153.151.0/24 maxlen: 24
103.155.170.0/24 maxlen: 24
103.162.190.0/23 maxlen: 24
103.163.188.0/24 maxlen: 24
103.163.189.0/24 maxlen: 24
103.168.62.0/24 maxlen: 24
103.168.63.0/24 maxlen: 24
103.173.208.0/23 maxlen: 24
103.174.30.0/24 maxlen: 24
103.174.38.0/24 maxlen: 24
103.178.212.0/23 maxlen: 24
103.181.209.0/24 maxlen: 24
103.185.11.0/24 maxlen: 24
103.185.174.0/23 maxlen: 24
103.204.119.0/24 maxlen: 24
103.209.18.0/24 maxlen: 24
103.209.19.0/24 maxlen: 24
103.215.114.0/23 maxlen: 24
103.216.144.0/22 maxlen: 24
103.218.100.0/22 maxlen: 24
103.219.164.0/24 maxlen: 24
103.219.165.0/24 maxlen: 24
103.219.166.0/24 maxlen: 24
103.219.167.0/24 maxlen: 24
103.220.80.0/22 maxlen: 24
103.220.212.0/22 maxlen: 24
103.226.0.0/22 maxlen: 24
103.226.4.0/22 maxlen: 24
103.226.28.0/22 maxlen: 24
103.232.24.0/22 maxlen: 24
124.108.16.0/22 maxlen: 24
2001:df6:f180::/48 maxlen: 48
2404:bd00::/48 maxlen: 48
2404:bd00:1::/48 maxlen: 48
2404:bd00:2::/48 maxlen: 48
2404:bd00:3::/48 maxlen: 48
2404:bd00:4::/48 maxlen: 48
2404:bd00:5::/48 maxlen: 48
2404:bd00:6::/48 maxlen: 48
2404:bd00:7::/48 maxlen: 48
2404:bd00:8::/48 maxlen: 48
2404:bd00:a::/48 maxlen: 48
2404:bd00:b::/48 maxlen: 48
2404:bd00:c::/48 maxlen: 48
2404:bd00:d::/48 maxlen: 48
2404:bd00:e::/48 maxlen: 48
2404:bd00:f::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32098 (0x7d62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Nov 9 09:49:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=654cab18-a815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7f:cf:89:51:e3:06:de:c6:f8:ef:dc:98:2a:
0e:bb:3f:2f:4c:d0:54:4b:e9:59:91:b6:4b:c3:bb:
46:c9:23:39:b4:bc:81:49:eb:4c:b7:88:d7:59:ce:
59:4f:7c:d3:1c:4b:cd:d4:ea:b9:37:3c:13:83:27:
63:5b:ba:b6:a9:01:2e:a8:5f:7c:68:25:79:9c:14:
9f:6e:d7:32:08:cb:0e:6d:3f:5f:25:73:2a:c9:3b:
25:a5:a2:a6:c4:e9:ea:4f:69:e8:c7:dd:a1:b7:6b:
d9:90:f6:08:35:1e:de:d5:03:9b:97:44:0c:c2:da:
32:67:27:f1:b1:29:79:1c:d6:a0:82:55:b2:86:a7:
19:56:f5:ca:0b:e0:e3:4d:5f:26:3f:98:73:45:1a:
2c:1f:59:70:65:c0:40:26:51:52:48:08:0f:b5:d4:
e4:fc:b8:4b:54:2a:75:f8:9a:62:4a:06:e2:bc:aa:
ce:d4:77:19:02:30:d9:15:c5:9d:d4:27:49:a1:3f:
c0:e2:ca:55:26:78:4f:b7:b7:c7:86:59:26:62:8c:
3d:28:cc:21:d4:b9:5c:06:4e:b8:47:ff:f6:c6:05:
06:97:06:72:07:9f:f8:91:80:f3:69:45:3e:75:90:
1f:d2:92:a1:f7:b3:71:5c:6b:09:a0:c5:b9:ca:f7:
7d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E6:37:9B:8E:95:AF:DD:8C:64:94:26:20:4A:D9:3D:5D:E4:E3:02
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3CC0D8DA7EE511EE8EA6E421C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.241.28.0/22
43.241.128.0/21
43.242.208.0/22
43.242.224.0/21
45.64.84.0/22
45.114.192.0/22
45.117.0.0/22
45.127.120.0/22
45.250.248.0-45.250.250.255
103.14.232.0/22
103.17.12.0/23
103.26.52.0-103.26.59.255
103.42.160.0/22
103.48.56.0/22
103.48.100.0/22
103.57.96.0/23
103.59.212.0/22
103.66.80.0/22
103.69.238.0/24
103.74.236.0/22
103.77.152.0/22
103.89.40.0/22
103.111.132.0/22
103.112.32.0/22
103.117.184.0/24
103.117.187.0/24
103.132.228.0/23
103.137.152.0/22
103.148.207.0/24
103.153.151.0/24
103.155.170.0/24
103.162.190.0/23
103.163.188.0/23
103.168.62.0/23
103.173.208.0/23
103.174.30.0/24
103.174.38.0/24
103.178.212.0/23
103.181.209.0/24
103.185.11.0/24
103.185.174.0/23
103.204.119.0/24
103.209.18.0/23
103.215.114.0/23
103.216.144.0/22
103.218.100.0/22
103.219.164.0/22
103.220.80.0/22
103.220.212.0/22
103.226.0.0/21
103.226.28.0/22
103.232.24.0/22
124.108.16.0/22
IPv6:
2001:df6:f180::/48
2404:bd00::-2404:bd00:8:ffff:ffff:ffff:ffff:ffff
2404:bd00:a::-2404:bd00:f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
08:94:e2:07:9a:6c:9e:56:1c:a3:86:d4:82:65:e9:7c:d9:a4:
27:4d:8e:1f:12:48:3b:58:47:44:75:d5:88:c3:67:b6:3d:32:
ab:3c:39:42:13:af:3f:20:5e:24:d8:8c:94:d1:4a:bc:f7:17:
43:f3:bf:0b:95:b8:b7:31:62:0a:10:8a:f1:98:87:32:01:28:
0a:00:37:a2:09:9c:9f:45:92:5d:70:cb:9d:2e:fa:84:45:50:
42:94:fd:33:7f:27:41:00:dc:bd:5c:ff:67:be:74:ee:94:3a:
32:3b:16:9f:72:1c:fe:ab:5b:64:ca:49:e2:14:d6:69:d5:db:
c4:e0:95:c3:2d:9b:1b:e0:9d:7c:55:f1:6b:3b:6b:f7:d4:ed:
13:fd:99:08:1c:fd:f0:2f:16:4d:b0:c5:26:0c:1c:41:1f:7f:
2c:cc:ef:3f:54:f8:8c:68:13:e6:bb:ac:e3:8f:70:35:25:4a:
ad:1e:fe:48:a6:a6:52:a5:fb:46:ae:25:8b:b3:cd:b5:09:09:
15:e9:33:16:f5:e8:b6:8d:ff:a0:68:95:df:ea:2e:db:be:17:
ef:03:24:0c:00:47:14:74:44:b6:6e:f2:6a:d0:9a:ff:99:25:
48:7b:f9:1b:7a:59:e2:5e:dc:7b:cd:60:14:68:aa:91:1c:07:
9a:21:53:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:53:56 2025 by rpki-client