Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/46850E2EFDAC11EC93DB7851C4F9AE02.roa
File: 46850E2EFDAC11EC93DB7851C4F9AE02.roa (raw, json)
Hash identifier: Pttdi+BjPrzpRQjDwAU1ckyWrqKijXuZCZJA3TNJ8Ik=
Subject key identifier: 43:08:BB:5F:EE:C5:4D:16:C3:C8:4D:83:7E:78:4C:7E:3D:2D:9F:63
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 58AB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/46850E2EFDAC11EC93DB7851C4F9AE02.roa
Signing time: Thu 07 Jul 2022 04:21:30 +0000
ROA not before: Thu 07 Jul 2022 04:21:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 133720
IP address blocks: 43.241.124.0/24 maxlen: 24
43.241.126.0/24 maxlen: 24
43.241.127.0/24 maxlen: 24
43.255.220.0/22 maxlen: 24
45.249.40.0/22 maxlen: 24
103.6.184.0/22 maxlen: 24
103.25.168.0/22 maxlen: 24
103.39.244.0/22 maxlen: 24
103.49.240.0/22 maxlen: 24
103.74.16.0/22 maxlen: 24
103.87.52.0/22 maxlen: 24
103.179.48.0/23 maxlen: 24
103.182.12.0/23 maxlen: 24
103.230.148.0/22 maxlen: 24
103.240.8.0/22 maxlen: 24
103.248.28.0/22 maxlen: 24
103.249.248.0/22 maxlen: 24
139.5.24.0/22 maxlen: 24
139.5.28.0/22 maxlen: 24
139.5.44.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22699 (0x58ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jul 7 04:21:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62c65f4a-7478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:53:54:e5:af:3b:f3:e8:3a:9e:f9:cd:88:00:
55:cc:ce:3f:c8:e0:e3:9a:84:84:e3:49:c3:21:e9:
7b:c1:9f:0e:02:87:96:7c:ff:39:54:93:d2:b3:1f:
c1:73:96:9c:82:a0:da:9b:bf:d2:26:8f:ea:30:46:
f1:3e:98:5d:a5:06:9b:68:99:50:76:5c:34:78:c5:
79:c5:00:3c:41:4f:3c:2d:8b:06:ca:25:6f:71:32:
5d:99:a0:40:16:29:df:8c:9f:bf:89:1f:c9:76:d4:
44:0d:ca:19:ba:4f:5b:00:8d:44:4f:ff:60:14:3d:
a9:fb:56:4b:53:99:7c:8b:c3:e4:01:9d:43:5c:2c:
d9:ac:95:b0:1f:85:88:57:59:6b:6b:35:1b:91:a4:
09:f0:6e:15:5a:3f:c1:74:a4:6b:7e:32:5a:2e:dc:
43:19:05:a5:a5:85:8b:0c:d6:92:65:f8:05:72:76:
a9:9b:b5:b0:26:00:dc:b5:3e:ec:af:36:e0:9a:c5:
35:1b:0b:7d:da:61:60:07:23:3d:b4:2c:1d:5c:55:
64:79:37:8d:25:a9:d1:99:d4:a8:3e:3a:c7:13:6b:
bf:93:38:7b:e4:e9:47:62:45:a1:d9:e2:72:1d:b5:
d3:05:03:9a:fd:d0:2c:3a:1b:3b:da:b7:d7:5b:15:
5a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:08:BB:5F:EE:C5:4D:16:C3:C8:4D:83:7E:78:4C:7E:3D:2D:9F:63
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/46850E2EFDAC11EC93DB7851C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.241.124.0/24
43.241.126.0/23
43.255.220.0/22
45.249.40.0/22
103.6.184.0/22
103.25.168.0/22
103.39.244.0/22
103.49.240.0/22
103.74.16.0/22
103.87.52.0/22
103.179.48.0/23
103.182.12.0/23
103.230.148.0/22
103.240.8.0/22
103.248.28.0/22
103.249.248.0/22
139.5.24.0/21
139.5.44.0/22
Signature Algorithm: sha256WithRSAEncryption
28:64:35:e4:4a:67:5b:95:ac:ef:13:12:7d:ee:15:b1:03:87:
f8:c0:f4:54:d9:a4:70:66:3f:65:d2:7a:2e:d1:69:85:e5:52:
48:53:a0:7a:58:05:5f:c9:a1:ed:3e:b6:3d:ad:18:6a:16:34:
2a:fc:51:b5:ee:0b:91:9e:f5:e3:46:04:5b:0a:83:a1:71:63:
43:6a:54:04:72:05:11:c0:97:74:ea:48:92:98:37:b9:2d:32:
1f:8a:81:a9:7c:32:85:c3:67:51:21:62:10:fd:74:c9:59:eb:
7b:7b:a8:8f:4a:b0:c5:fe:20:ab:25:4b:8e:ed:c4:fa:85:29:
66:be:a9:a8:77:ce:d8:ad:19:61:ed:b4:8c:e9:7b:89:9b:e2:
a9:36:71:7b:d6:54:87:b6:6a:71:74:77:3d:aa:de:0b:5a:09:
fb:15:d1:55:7b:56:2d:86:db:9f:8a:23:9e:b5:71:ad:8b:9b:
a8:9a:f7:96:5d:ef:56:19:73:74:70:e2:48:55:80:08:d2:d4:
0b:9d:4e:bf:5a:92:c3:1f:d5:7f:cf:50:43:27:e9:47:1e:80:
c3:73:16:e2:a3:a2:79:91:90:27:a1:82:3c:07:8a:dd:f6:80:
20:d9:f0:5b:39:a2:d8:b5:12:6a:f9:c5:b4:53:8e:4a:e4:ef:
70:5b:26:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:01:58 2025 by rpki-client