Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4E6BBF7EEFDD11ED81AE706DC4F9AE02.roa
File: 4E6BBF7EEFDD11ED81AE706DC4F9AE02.roa (raw, json)
Hash identifier: 1cb4+ske71Tt+nzTw21mxGXZTgyVk8dG55cU4PI0Td4=
Subject key identifier: 3A:E3:CC:F5:A0:98:6F:31:F9:A9:26:E1:65:BC:79:6D:77:79:32:1B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7AE9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4E6BBF7EEFDD11ED81AE706DC4F9AE02.roa
Signing time: Fri 29 Sep 2023 06:13:04 +0000
ROA not before: Fri 29 Sep 2023 06:13:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58678
IP address blocks: 43.241.28.0/22 maxlen: 24
43.241.128.0/22 maxlen: 24
43.241.132.0/22 maxlen: 24
43.242.208.0/24 maxlen: 24
43.242.209.0/24 maxlen: 24
43.242.210.0/24 maxlen: 24
43.242.211.0/24 maxlen: 24
43.242.224.0/22 maxlen: 24
43.242.228.0/22 maxlen: 24
45.64.84.0/22 maxlen: 24
45.114.192.0/22 maxlen: 24
45.117.0.0/22 maxlen: 23
45.117.0.0/23 maxlen: 24
45.117.3.0/24 maxlen: 24
45.127.120.0/22 maxlen: 24
45.250.248.0/24 maxlen: 24
45.250.249.0/24 maxlen: 24
45.250.250.0/24 maxlen: 24
103.14.232.0/22 maxlen: 24
103.17.12.0/23 maxlen: 24
103.26.52.0/22 maxlen: 22
103.26.52.0/24 maxlen: 24
103.26.53.0/24 maxlen: 24
103.26.54.0/24 maxlen: 24
103.26.55.0/24 maxlen: 24
103.26.56.0/22 maxlen: 24
103.42.160.0/22 maxlen: 24
103.48.56.0/23 maxlen: 24
103.48.58.0/24 maxlen: 24
103.48.59.0/24 maxlen: 24
103.48.100.0/22 maxlen: 24
103.57.96.0/23 maxlen: 24
103.59.188.0/22 maxlen: 24
103.59.212.0/22 maxlen: 24
103.66.80.0/22 maxlen: 22
103.66.80.0/24 maxlen: 24
103.66.81.0/24 maxlen: 24
103.66.82.0/24 maxlen: 24
103.66.83.0/24 maxlen: 24
103.69.238.0/23 maxlen: 24
103.74.236.0/22 maxlen: 24
103.77.152.0/22 maxlen: 23
103.77.152.0/23 maxlen: 24
103.77.154.0/24 maxlen: 24
103.89.40.0/22 maxlen: 24
103.111.132.0/22 maxlen: 24
103.112.32.0/24 maxlen: 24
103.112.33.0/24 maxlen: 24
103.112.34.0/24 maxlen: 24
103.112.35.0/24 maxlen: 24
103.132.228.0/23 maxlen: 24
103.137.152.0/22 maxlen: 24
103.148.207.0/24 maxlen: 24
103.153.151.0/24 maxlen: 24
103.155.170.0/24 maxlen: 24
103.162.190.0/23 maxlen: 24
103.163.188.0/24 maxlen: 24
103.163.189.0/24 maxlen: 24
103.168.62.0/24 maxlen: 24
103.168.63.0/24 maxlen: 24
103.173.208.0/23 maxlen: 24
103.174.30.0/24 maxlen: 24
103.174.38.0/24 maxlen: 24
103.178.212.0/23 maxlen: 24
103.181.209.0/24 maxlen: 24
103.185.11.0/24 maxlen: 24
103.185.174.0/23 maxlen: 24
103.204.119.0/24 maxlen: 24
103.209.18.0/24 maxlen: 24
103.209.19.0/24 maxlen: 24
103.215.114.0/23 maxlen: 24
103.216.144.0/22 maxlen: 24
103.218.100.0/22 maxlen: 24
103.219.164.0/24 maxlen: 24
103.219.165.0/24 maxlen: 24
103.219.166.0/24 maxlen: 24
103.219.167.0/24 maxlen: 24
103.220.80.0/22 maxlen: 24
103.220.212.0/22 maxlen: 24
103.226.0.0/22 maxlen: 24
103.226.4.0/22 maxlen: 24
103.226.28.0/22 maxlen: 24
103.232.24.0/22 maxlen: 24
124.108.16.0/22 maxlen: 24
2001:df6:f180::/48 maxlen: 48
2404:bd00::/48 maxlen: 48
2404:bd00:1::/48 maxlen: 48
2404:bd00:2::/48 maxlen: 48
2404:bd00:3::/48 maxlen: 48
2404:bd00:4::/48 maxlen: 48
2404:bd00:5::/48 maxlen: 48
2404:bd00:6::/48 maxlen: 48
2404:bd00:7::/48 maxlen: 48
2404:bd00:8::/48 maxlen: 48
2404:bd00:a::/48 maxlen: 48
2404:bd00:b::/48 maxlen: 48
2404:bd00:c::/48 maxlen: 48
2404:bd00:d::/48 maxlen: 48
2404:bd00:e::/48 maxlen: 48
2404:bd00:f::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31465 (0x7ae9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Sep 29 06:13:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65166af0-4779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6c:17:aa:bc:f5:b3:d3:cd:ac:94:0a:c7:16:
d5:1d:de:6f:c2:93:95:91:36:09:c0:f2:55:f7:62:
dc:23:54:a8:19:d6:67:47:4d:99:be:e6:ee:f6:f4:
2f:f2:51:b4:76:b0:b7:9d:60:2d:f1:95:bd:88:09:
de:6f:fe:69:79:b8:66:c4:65:ba:c4:6e:ee:ea:a7:
57:13:cb:75:23:d0:bb:46:5f:31:b5:45:8f:a3:37:
1b:e1:ad:af:cd:e4:28:f1:84:56:e2:e9:2e:a8:7c:
ea:be:63:bc:5e:4a:c5:9a:80:34:bc:34:b1:5e:c2:
e2:54:b2:fd:ed:90:71:1f:97:54:44:b5:e4:c9:0a:
24:9e:50:73:cc:0d:a6:37:2b:b3:6c:5f:4e:cb:b1:
25:9c:e9:43:21:99:27:40:f9:1a:34:f3:6c:c1:cc:
e9:1f:e0:60:3b:bc:3f:0f:9a:bd:44:0f:48:17:b3:
20:af:c7:e5:61:f4:e8:b3:2a:4b:c6:10:f2:78:3c:
b4:7a:3a:a1:73:71:ff:08:4f:63:a9:a7:a1:a6:d5:
09:98:ba:e8:2d:d0:3e:00:31:af:ed:f8:a9:7f:98:
02:50:2c:42:d2:3e:37:2a:41:39:b1:c7:07:10:d3:
00:d1:4c:90:96:02:2e:59:c9:ec:d2:c3:a4:72:d6:
d0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E3:CC:F5:A0:98:6F:31:F9:A9:26:E1:65:BC:79:6D:77:79:32:1B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4E6BBF7EEFDD11ED81AE706DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.241.28.0/22
43.241.128.0/21
43.242.208.0/22
43.242.224.0/21
45.64.84.0/22
45.114.192.0/22
45.117.0.0/22
45.127.120.0/22
45.250.248.0-45.250.250.255
103.14.232.0/22
103.17.12.0/23
103.26.52.0-103.26.59.255
103.42.160.0/22
103.48.56.0/22
103.48.100.0/22
103.57.96.0/23
103.59.188.0/22
103.59.212.0/22
103.66.80.0/22
103.69.238.0/23
103.74.236.0/22
103.77.152.0/22
103.89.40.0/22
103.111.132.0/22
103.112.32.0/22
103.132.228.0/23
103.137.152.0/22
103.148.207.0/24
103.153.151.0/24
103.155.170.0/24
103.162.190.0/23
103.163.188.0/23
103.168.62.0/23
103.173.208.0/23
103.174.30.0/24
103.174.38.0/24
103.178.212.0/23
103.181.209.0/24
103.185.11.0/24
103.185.174.0/23
103.204.119.0/24
103.209.18.0/23
103.215.114.0/23
103.216.144.0/22
103.218.100.0/22
103.219.164.0/22
103.220.80.0/22
103.220.212.0/22
103.226.0.0/21
103.226.28.0/22
103.232.24.0/22
124.108.16.0/22
IPv6:
2001:df6:f180::/48
2404:bd00::-2404:bd00:8:ffff:ffff:ffff:ffff:ffff
2404:bd00:a::-2404:bd00:f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
81:14:d0:38:2c:54:94:78:93:89:4d:89:90:85:d9:e5:6c:b2:
12:47:76:b7:8a:a1:38:70:b2:1b:bf:7f:5b:17:9a:4c:92:63:
26:2f:f3:4b:e9:53:d5:26:6d:59:bf:f5:bd:30:0d:49:6e:18:
e1:b5:de:7d:71:0e:ad:f9:eb:7a:02:30:2c:05:38:44:25:ee:
84:b2:0c:80:3f:70:13:51:7f:2c:66:a2:c5:9f:b7:38:5a:79:
fc:62:ac:f8:f7:37:9e:f8:8a:49:68:39:9f:f7:bc:42:d9:02:
21:37:ae:3e:35:29:f9:a0:92:a3:a2:05:ad:fa:47:b1:65:6c:
64:c6:c4:6d:95:4d:aa:31:08:bb:2c:e8:cd:f6:4e:df:35:5d:
83:d9:24:d6:e3:14:be:7e:89:04:7b:0d:b3:bf:e7:47:20:21:
25:4d:5b:13:e9:d8:df:12:6c:0b:cd:fb:48:f4:20:30:26:e1:
16:84:94:29:8c:3b:96:4f:b6:f0:69:e1:ad:6c:6d:c6:3e:40:
29:74:e0:b7:40:e1:09:b8:d4:36:90:b8:9d:bd:87:3a:d1:6a:
2e:fb:4f:54:ba:49:a0:f9:65:e8:56:c0:62:dd:c4:ae:16:6e:
80:1f:53:a9:64:a8:e0:13:b6:19:0f:f7:71:76:5e:dc:64:01:
d3:7c:f6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:51:36 2025 by rpki-client