Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/484120FA4FC011EFBD141314C4F9AE02.roa
File: 484120FA4FC011EFBD141314C4F9AE02.roa (raw, json)
Hash identifier: tyS8IgGSClPGnd5xVEcs9GxOnSWYLU519KrL4JUfIHk=
Subject key identifier: CD:4F:13:CE:C5:17:63:7F:D1:C0:CF:24:A5:38:C5:9A:4C:3D:C9:E3
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 95BB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/484120FA4FC011EFBD141314C4F9AE02.roa
Signing time: Thu 01 Aug 2024 04:41:14 +0000
ROA not before: Thu 01 Aug 2024 04:41:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 18002
IP address blocks: 14.102.0.0/24 maxlen: 24
14.102.1.0/24 maxlen: 24
14.102.2.0/24 maxlen: 24
14.102.3.0/24 maxlen: 24
14.102.4.0/24 maxlen: 24
14.102.5.0/24 maxlen: 24
14.102.6.0/24 maxlen: 24
14.102.7.0/24 maxlen: 24
14.102.8.0/24 maxlen: 24
14.102.9.0/24 maxlen: 24
14.102.10.0/24 maxlen: 24
14.102.11.0/24 maxlen: 24
14.102.12.0/24 maxlen: 24
14.102.13.0/24 maxlen: 24
14.102.14.0/24 maxlen: 24
14.102.15.0/24 maxlen: 24
14.102.16.0/24 maxlen: 24
14.102.22.0/24 maxlen: 24
14.102.23.0/24 maxlen: 24
14.102.24.0/24 maxlen: 24
14.102.25.0/24 maxlen: 24
14.102.26.0/24 maxlen: 24
14.102.27.0/24 maxlen: 24
14.102.28.0/24 maxlen: 24
14.102.29.0/24 maxlen: 24
14.102.30.0/24 maxlen: 24
14.102.31.0/24 maxlen: 24
14.102.32.0/24 maxlen: 24
14.102.33.0/24 maxlen: 24
14.102.34.0/24 maxlen: 24
14.102.35.0/24 maxlen: 24
14.102.36.0/24 maxlen: 24
14.102.37.0/24 maxlen: 24
14.102.38.0/24 maxlen: 24
14.102.40.0/24 maxlen: 24
14.102.41.0/24 maxlen: 24
14.102.42.0/24 maxlen: 24
14.102.43.0/24 maxlen: 24
14.102.44.0/24 maxlen: 24
14.102.45.0/24 maxlen: 24
14.102.46.0/24 maxlen: 24
14.102.47.0/24 maxlen: 24
14.102.48.0/24 maxlen: 24
14.102.49.0/24 maxlen: 24
14.102.50.0/24 maxlen: 24
14.102.52.0/24 maxlen: 24
14.102.53.0/24 maxlen: 24
14.102.54.0/24 maxlen: 24
14.102.55.0/24 maxlen: 24
14.102.56.0/24 maxlen: 24
14.102.57.0/24 maxlen: 24
14.102.58.0/24 maxlen: 24
14.102.59.0/24 maxlen: 24
14.102.64.0/24 maxlen: 24
14.102.65.0/24 maxlen: 24
14.102.66.0/24 maxlen: 24
14.102.67.0/24 maxlen: 24
14.102.68.0/24 maxlen: 24
14.102.69.0/24 maxlen: 24
14.102.70.0/24 maxlen: 24
14.102.71.0/24 maxlen: 24
14.102.72.0/24 maxlen: 24
14.102.73.0/24 maxlen: 24
14.102.74.0/24 maxlen: 24
14.102.75.0/24 maxlen: 24
14.102.76.0/24 maxlen: 24
14.102.77.0/24 maxlen: 24
14.102.78.0/24 maxlen: 24
14.102.80.0/24 maxlen: 24
14.102.81.0/24 maxlen: 24
14.102.82.0/24 maxlen: 24
14.102.83.0/24 maxlen: 24
14.102.88.0/24 maxlen: 24
14.102.91.0/24 maxlen: 24
14.102.92.0/24 maxlen: 24
14.102.93.0/24 maxlen: 24
14.102.95.0/24 maxlen: 24
14.102.96.0/24 maxlen: 24
14.102.97.0/24 maxlen: 24
14.102.100.0/24 maxlen: 24
14.102.101.0/24 maxlen: 24
14.102.103.0/24 maxlen: 24
14.102.104.0/24 maxlen: 24
14.102.105.0/24 maxlen: 24
14.102.106.0/23 maxlen: 24
14.102.108.0/24 maxlen: 24
14.102.109.0/24 maxlen: 24
14.102.110.0/24 maxlen: 24
14.102.111.0/24 maxlen: 24
14.102.112.0/24 maxlen: 24
14.102.113.0/24 maxlen: 24
14.102.114.0/24 maxlen: 24
14.102.115.0/24 maxlen: 24
14.102.116.0/24 maxlen: 24
14.102.117.0/24 maxlen: 24
14.102.118.0/24 maxlen: 24
14.102.119.0/24 maxlen: 24
14.102.120.0/24 maxlen: 24
14.102.121.0/24 maxlen: 24
14.102.122.0/24 maxlen: 24
14.102.123.0/24 maxlen: 24
14.102.124.0/24 maxlen: 24
14.102.125.0/24 maxlen: 24
14.102.126.0/24 maxlen: 24
14.102.127.0/24 maxlen: 24
43.245.136.0/22 maxlen: 24
43.251.212.0/22 maxlen: 24
61.14.228.0/22 maxlen: 24
103.5.200.0/22 maxlen: 24
103.87.100.0/22 maxlen: 24
103.122.84.0/24 maxlen: 24
103.158.131.0/24 maxlen: 24
103.160.24.0/24 maxlen: 24
103.175.72.0/24 maxlen: 24
103.175.73.0/24 maxlen: 24
103.176.8.0/23 maxlen: 24
110.172.128.0/18 maxlen: 21
110.172.128.0/19 maxlen: 23
110.172.130.0/23 maxlen: 24
110.172.132.0/24 maxlen: 24
110.172.134.0/23 maxlen: 24
110.172.136.0/24 maxlen: 24
110.172.138.0/23 maxlen: 24
110.172.140.0/22 maxlen: 24
110.172.144.0/23 maxlen: 24
110.172.147.0/24 maxlen: 24
110.172.150.0/23 maxlen: 24
110.172.152.0/21 maxlen: 24
110.172.160.0/20 maxlen: 23
110.172.160.0/23 maxlen: 24
110.172.162.0/24 maxlen: 24
110.172.164.0/24 maxlen: 24
110.172.166.0/23 maxlen: 24
110.172.168.0/24 maxlen: 24
110.172.170.0/23 maxlen: 24
110.172.172.0/24 maxlen: 24
110.172.174.0/23 maxlen: 24
110.172.176.0/22 maxlen: 23
110.172.177.0/24 maxlen: 24
110.172.178.0/23 maxlen: 24
110.172.184.0/21 maxlen: 24
111.235.64.0/22 maxlen: 24
114.69.224.0/19 maxlen: 21
114.69.224.0/21 maxlen: 23
114.69.224.0/23 maxlen: 24
114.69.226.0/24 maxlen: 24
114.69.228.0/22 maxlen: 24
114.69.232.0/22 maxlen: 23
114.69.232.0/24 maxlen: 24
114.69.234.0/23 maxlen: 24
114.69.240.0/20 maxlen: 23
114.69.240.0/24 maxlen: 24
114.69.242.0/23 maxlen: 24
114.69.244.0/22 maxlen: 24
114.69.248.0/23 maxlen: 24
114.69.252.0/22 maxlen: 24
118.91.176.0/20 maxlen: 21
118.91.176.0/22 maxlen: 23
118.91.176.0/23 maxlen: 24
118.91.178.0/24 maxlen: 24
118.91.188.0/22 maxlen: 23
118.91.189.0/24 maxlen: 24
118.91.190.0/23 maxlen: 24
150.107.192.0/22 maxlen: 24
202.89.64.0/20 maxlen: 20
202.89.64.0/24 maxlen: 24
202.89.65.0/24 maxlen: 24
202.89.66.0/24 maxlen: 24
202.89.67.0/24 maxlen: 24
202.89.68.0/24 maxlen: 24
202.89.69.0/24 maxlen: 24
202.89.70.0/24 maxlen: 24
202.89.71.0/24 maxlen: 24
202.89.72.0/24 maxlen: 24
202.89.73.0/24 maxlen: 24
202.89.74.0/24 maxlen: 24
202.89.75.0/24 maxlen: 24
202.89.76.0/24 maxlen: 24
202.89.77.0/24 maxlen: 24
202.89.78.0/24 maxlen: 24
202.89.79.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38331 (0x95bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Aug 1 04:41:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66ab11e9-bbfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:40:b9:8a:20:38:48:76:b9:6b:19:04:14:f5:
a7:b6:39:52:6d:4e:83:df:2b:92:57:19:5c:af:97:
74:80:8c:14:0c:22:a8:2c:e9:46:3a:d6:91:ef:6e:
6f:9b:b3:20:0f:c8:13:ca:15:72:3d:65:a6:f3:37:
9b:21:27:8f:b1:27:5f:52:1a:0a:59:b1:25:1e:29:
db:89:56:0e:5c:5e:dd:d4:2f:a4:4e:4c:6e:41:07:
77:52:d8:f3:97:6e:65:26:d0:bf:52:fd:56:ca:90:
34:f5:a0:e8:84:3d:82:71:82:2e:9a:9b:81:b7:13:
ea:5f:26:88:3c:d2:b3:23:78:fc:7d:f8:40:f2:0e:
6e:fb:73:de:3c:69:3a:4a:5a:98:0b:8e:8c:f4:d9:
9d:86:64:96:97:65:80:23:ac:a5:21:c9:7d:6e:bf:
cf:18:ad:65:5d:e1:2d:84:4e:77:14:1d:4d:23:23:
92:41:cf:8b:e7:5e:90:ce:e9:4d:82:65:f5:a6:d6:
64:0e:81:1d:b6:c8:78:8f:aa:7b:40:a2:d4:73:a7:
3e:05:a5:c0:67:3b:c3:6f:2f:c6:6a:94:6f:71:36:
61:08:c9:11:f7:12:a9:fd:4f:d0:9c:90:9d:0d:15:
f9:0c:57:dc:49:8f:03:9f:4c:3e:7b:05:aa:5d:9b:
64:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4F:13:CE:C5:17:63:7F:D1:C0:CF:24:A5:38:C5:9A:4C:3D:C9:E3
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/484120FA4FC011EFBD141314C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.102.0.0-14.102.16.255
14.102.22.0-14.102.38.255
14.102.40.0-14.102.50.255
14.102.52.0-14.102.59.255
14.102.64.0-14.102.78.255
14.102.80.0/22
14.102.88.0/24
14.102.91.0-14.102.93.255
14.102.95.0-14.102.97.255
14.102.100.0/23
14.102.103.0-14.102.127.255
43.245.136.0/22
43.251.212.0/22
61.14.228.0/22
103.5.200.0/22
103.87.100.0/22
103.122.84.0/24
103.158.131.0/24
103.160.24.0/24
103.175.72.0/23
103.176.8.0/23
110.172.128.0/18
111.235.64.0/22
114.69.224.0/19
118.91.176.0/20
150.107.192.0/22
202.89.64.0/20
Signature Algorithm: sha256WithRSAEncryption
59:24:61:d8:d1:a7:0e:04:5b:f0:23:f6:7b:d5:da:ea:67:96:
dd:cc:0c:06:0f:82:93:99:a1:13:73:03:53:c9:da:e2:b0:65:
43:3d:09:cf:14:8a:e3:9d:d9:90:d6:10:8d:6e:bd:76:d0:c6:
96:b7:41:e5:03:9b:e7:8b:0d:93:41:d1:7c:3d:68:6d:2d:fd:
c9:42:a0:20:1d:0f:eb:8e:e3:47:e2:59:48:70:b3:86:25:d7:
19:84:03:c2:f9:80:fb:f5:c5:b8:0e:2a:04:fa:c9:bd:51:f5:
a0:82:93:ab:fc:9e:13:a9:f9:47:c0:74:28:b8:ec:9e:c9:f0:
be:b3:0e:d9:87:22:03:f2:9a:c5:40:f0:11:28:14:14:18:a4:
5d:47:4c:ac:1d:d7:35:1e:7a:fd:34:94:51:9c:c3:03:7a:2f:
27:94:bf:89:2c:7a:47:4d:35:a2:68:12:90:e4:fd:eb:74:33:
b8:c4:8e:d4:31:23:06:5f:0a:f2:3f:8b:f6:66:eb:7b:11:fa:
12:1b:57:e5:86:a4:2b:f1:df:1a:dc:e6:e2:78:0f:0a:86:5d:
02:86:6c:40:67:96:8b:0e:67:18:61:2f:c3:28:2d:3f:1a:4f:
11:9c:9c:63:de:7a:54:1c:a7:18:0b:fe:ce:e4:fd:19:ad:85:
21:f0:10:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:14:54 2025 by rpki-client