Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/52E769289C7B11ED96690F39C4F9AE02.roa
File: 52E769289C7B11ED96690F39C4F9AE02.roa (raw, json)
Hash identifier: NYyv+Fpzm1umZu03c8gRkCB4mD6YvsQCMt0e7v0Wmok=
Subject key identifier: 56:D1:13:BA:95:33:6A:20:75:5F:2F:5D:46:F5:D6:A8:47:8C:CE:D4
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 63CA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/52E769289C7B11ED96690F39C4F9AE02.roa
Signing time: Wed 25 Jan 2023 06:41:41 +0000
ROA not before: Wed 25 Jan 2023 06:41:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 133311
IP address blocks: 103.98.79.0/24 maxlen: 24
103.100.80.0/22 maxlen: 24
103.127.60.0/23 maxlen: 24
103.127.76.0/24 maxlen: 24
103.127.77.0/24 maxlen: 24
103.156.206.0/23 maxlen: 24
103.158.178.0/24 maxlen: 24
103.158.179.0/24 maxlen: 24
103.159.200.0/24 maxlen: 24
103.160.28.0/23 maxlen: 24
103.163.54.0/23 maxlen: 23
103.174.126.0/23 maxlen: 24
103.174.240.0/23 maxlen: 24
103.181.22.0/23 maxlen: 23
103.181.23.0/24 maxlen: 24
103.199.98.0/24 maxlen: 24
103.199.99.0/24 maxlen: 24
103.199.116.0/24 maxlen: 24
103.201.136.0/24 maxlen: 24
103.201.137.0/24 maxlen: 24
103.201.138.0/24 maxlen: 24
103.208.72.0/22 maxlen: 24
103.225.174.0/24 maxlen: 24
160.202.156.0/24 maxlen: 24
160.202.157.0/24 maxlen: 24
160.202.158.0/24 maxlen: 24
160.202.159.0/24 maxlen: 24
2001:df1:95c0::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25546 (0x63ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jan 25 06:41:41 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63d0cf24-f974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ca:b6:2c:5c:bf:08:70:41:67:3d:43:77:1b:
72:ce:eb:1c:09:94:49:17:65:2a:2c:dc:1b:56:bf:
4f:3b:c8:af:58:d3:66:93:fc:60:e9:8d:00:5e:b0:
97:a2:be:58:81:ef:7b:1a:0a:0d:f6:de:83:84:e2:
dc:50:bf:02:9c:26:c4:67:01:98:69:34:05:30:48:
aa:7d:92:25:a3:81:b7:01:56:2c:0a:be:eb:1f:b7:
51:0e:5a:0d:cb:aa:65:a5:6c:2f:87:df:73:a8:2c:
b4:8b:10:92:1e:db:4e:ac:e1:87:c6:60:a6:9b:86:
bb:b8:0a:91:ac:68:c4:d4:e2:89:52:bd:79:fe:40:
a9:40:e7:d0:6d:21:6a:54:68:ba:43:43:a4:75:12:
2f:95:4f:f1:a5:3f:cd:f6:82:b8:e9:89:fe:e9:ca:
74:66:b5:c1:cc:20:6b:40:5e:e8:c5:f5:b8:8e:ee:
33:ba:b9:a2:2a:6b:da:ba:96:b7:c1:74:8d:24:cb:
b1:36:17:e4:94:bf:5d:40:6a:98:73:19:e3:33:ba:
a7:5d:54:eb:93:68:6b:6d:36:a1:8d:7e:b3:cd:3d:
87:a4:ed:47:1a:d4:6d:12:a6:b1:11:d7:86:13:33:
b1:c0:ed:14:31:77:69:42:4a:bb:e7:3f:ce:75:a4:
11:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D1:13:BA:95:33:6A:20:75:5F:2F:5D:46:F5:D6:A8:47:8C:CE:D4
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/52E769289C7B11ED96690F39C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.98.79.0/24
103.100.80.0/22
103.127.60.0/23
103.127.76.0/23
103.156.206.0/23
103.158.178.0/23
103.159.200.0/24
103.160.28.0/23
103.163.54.0/23
103.174.126.0/23
103.174.240.0/23
103.181.22.0/23
103.199.98.0/23
103.199.116.0/24
103.201.136.0-103.201.138.255
103.208.72.0/22
103.225.174.0/24
160.202.156.0/22
IPv6:
2001:df1:95c0::/48
Signature Algorithm: sha256WithRSAEncryption
51:fd:94:94:c9:34:a7:ca:53:40:6d:b3:a9:2a:63:18:ec:4d:
fe:5a:c1:7c:29:3f:1e:19:55:cc:86:5f:ac:8d:8e:36:98:43:
40:0d:cb:9b:36:c6:99:72:be:39:af:ce:d7:b8:04:e6:4f:72:
30:dc:71:3b:b8:a7:a5:77:3c:f6:3f:c1:39:e7:a0:8c:b7:cc:
8f:2e:84:79:38:3b:9d:66:26:20:76:e8:cd:bc:87:b7:4e:22:
05:58:f1:bb:0d:78:1e:9d:2a:c2:ab:69:c7:52:0a:43:c9:27:
8f:30:0b:77:6e:bb:20:b3:0b:6f:6a:ec:17:c7:a9:45:fa:7a:
72:d5:3f:bc:0e:3c:83:98:f7:72:bd:92:10:0a:14:48:d3:64:
23:97:b4:c0:0f:3f:f9:be:49:cf:b8:32:c2:52:73:3c:c7:92:
af:c9:c8:1e:80:8b:f4:30:3f:c3:a0:d3:d9:8b:bc:6b:39:5c:
86:72:ef:ee:00:ce:4c:d5:64:87:fa:73:03:f9:2f:54:18:09:
8a:f2:87:95:c3:2b:8d:53:43:47:f2:6a:d7:67:24:51:19:1c:
f0:3c:ff:24:0f:d8:de:5f:50:33:e0:f5:33:6c:fe:c5:ef:ac:
80:bc:cc:9e:86:b3:4a:8b:cc:3c:16:ff:79:ac:41:9d:34:9a:
ea:fe:38:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:06:48 2025 by rpki-client