Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5B18AC5893FE11EE91B9AB4CC4F9AE02.roa
File: 5B18AC5893FE11EE91B9AB4CC4F9AE02.roa (raw, json)
Hash identifier: crBW4897PGKZ/UuhiOsaMMkPnODCa9/eW0GpHqr0v+Y=
Subject key identifier: 07:17:4C:55:98:03:2A:53:4A:C6:9E:DE:BA:A8:BD:F1:B5:35:47:CA
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9117
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5B18AC5893FE11EE91B9AB4CC4F9AE02.roa
Signing time: Thu 30 May 2024 16:30:42 +0000
ROA not before: Thu 30 May 2024 16:30:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58678
IP address blocks: 43.241.28.0/22 maxlen: 24
43.241.128.0/22 maxlen: 24
43.241.132.0/22 maxlen: 24
43.242.208.0/24 maxlen: 24
43.242.209.0/24 maxlen: 24
43.242.210.0/24 maxlen: 24
43.242.211.0/24 maxlen: 24
43.242.224.0/22 maxlen: 24
43.242.228.0/22 maxlen: 24
45.64.84.0/22 maxlen: 24
45.114.192.0/22 maxlen: 24
45.117.0.0/22 maxlen: 23
45.117.0.0/23 maxlen: 24
45.117.3.0/24 maxlen: 24
45.127.120.0/22 maxlen: 24
45.250.248.0/24 maxlen: 24
45.250.249.0/24 maxlen: 24
45.250.250.0/24 maxlen: 24
103.14.232.0/22 maxlen: 24
103.17.12.0/23 maxlen: 24
103.26.52.0/22 maxlen: 22
103.26.52.0/24 maxlen: 24
103.26.53.0/24 maxlen: 24
103.26.54.0/24 maxlen: 24
103.26.55.0/24 maxlen: 24
103.26.56.0/22 maxlen: 24
103.42.160.0/22 maxlen: 24
103.48.56.0/23 maxlen: 24
103.48.58.0/24 maxlen: 24
103.48.59.0/24 maxlen: 24
103.48.100.0/22 maxlen: 24
103.57.96.0/23 maxlen: 24
103.59.212.0/22 maxlen: 24
103.66.80.0/22 maxlen: 22
103.66.80.0/24 maxlen: 24
103.66.81.0/24 maxlen: 24
103.66.82.0/24 maxlen: 24
103.66.83.0/24 maxlen: 24
103.69.238.0/24 maxlen: 24
103.74.236.0/22 maxlen: 24
103.77.152.0/22 maxlen: 23
103.77.152.0/23 maxlen: 24
103.77.154.0/24 maxlen: 24
103.89.40.0/22 maxlen: 24
103.111.132.0/22 maxlen: 24
103.112.32.0/24 maxlen: 24
103.112.33.0/24 maxlen: 24
103.112.34.0/24 maxlen: 24
103.112.35.0/24 maxlen: 24
103.117.184.0/24 maxlen: 24
103.117.187.0/24 maxlen: 24
103.132.228.0/23 maxlen: 24
103.137.152.0/22 maxlen: 24
103.148.207.0/24 maxlen: 24
103.153.151.0/24 maxlen: 24
103.155.170.0/24 maxlen: 24
103.162.190.0/23 maxlen: 24
103.163.188.0/24 maxlen: 24
103.163.189.0/24 maxlen: 24
103.168.62.0/24 maxlen: 24
103.168.63.0/24 maxlen: 24
103.173.208.0/23 maxlen: 24
103.174.30.0/24 maxlen: 24
103.174.38.0/24 maxlen: 24
103.178.212.0/23 maxlen: 24
103.181.209.0/24 maxlen: 24
103.185.11.0/24 maxlen: 24
103.204.119.0/24 maxlen: 24
103.209.18.0/24 maxlen: 24
103.209.19.0/24 maxlen: 24
103.215.114.0/23 maxlen: 24
103.216.144.0/22 maxlen: 24
103.218.100.0/22 maxlen: 24
103.219.164.0/24 maxlen: 24
103.219.165.0/24 maxlen: 24
103.219.166.0/24 maxlen: 24
103.219.167.0/24 maxlen: 24
103.220.80.0/22 maxlen: 24
103.220.212.0/22 maxlen: 24
103.226.0.0/22 maxlen: 24
103.226.4.0/22 maxlen: 24
103.226.28.0/22 maxlen: 24
103.232.24.0/22 maxlen: 24
124.108.16.0/22 maxlen: 24
2001:df6:f180::/48 maxlen: 48
2404:bd00::/48 maxlen: 48
2404:bd00:1::/48 maxlen: 48
2404:bd00:2::/48 maxlen: 48
2404:bd00:3::/48 maxlen: 48
2404:bd00:4::/48 maxlen: 48
2404:bd00:5::/48 maxlen: 48
2404:bd00:6::/48 maxlen: 48
2404:bd00:7::/48 maxlen: 48
2404:bd00:8::/48 maxlen: 48
2404:bd00:a::/48 maxlen: 48
2404:bd00:b::/48 maxlen: 48
2404:bd00:c::/48 maxlen: 48
2404:bd00:d::/48 maxlen: 48
2404:bd00:e::/48 maxlen: 48
2404:bd00:f::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37143 (0x9117)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a9b2-73c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:79:8a:36:2b:47:6c:08:4a:cc:69:01:d2:4a:
b5:6d:d5:df:90:76:30:50:a9:f4:f7:b3:f3:03:0b:
4e:8e:27:91:60:25:c3:f2:23:a6:3a:94:6e:9b:b6:
e4:6b:d5:76:59:13:5a:27:9b:9a:47:83:ed:f7:c3:
c8:4b:09:1d:2b:61:54:4e:4e:3c:ff:e5:5b:da:42:
6b:d3:ad:ff:a8:42:cf:d4:8a:49:b7:2f:09:c5:9a:
f4:ac:89:a8:c4:88:00:f5:a1:62:d1:2c:81:ae:ac:
0a:a3:f9:ba:84:ae:43:1f:f7:f5:d7:8a:be:b5:3e:
50:10:d2:e2:d8:bc:0a:42:85:1f:b4:4d:48:23:89:
d9:38:07:15:2e:06:7c:9f:ce:b0:63:e8:be:f5:5b:
b0:a5:25:35:a5:44:7c:13:e4:06:c3:34:36:1b:32:
59:87:f5:aa:4b:aa:de:87:50:c8:f8:89:c3:7c:0f:
ed:6c:cf:d2:90:38:66:33:3d:24:48:b5:b4:64:0b:
be:da:89:57:bf:9b:ad:4a:96:84:d0:48:bc:16:1d:
61:42:58:99:7b:7e:69:09:1b:d0:08:3a:56:f2:a7:
60:5d:14:c2:5e:f7:33:85:28:02:14:a5:dc:4d:03:
55:a0:38:5a:6e:b2:9d:4a:0b:bd:b0:8e:54:b0:70:
fb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:17:4C:55:98:03:2A:53:4A:C6:9E:DE:BA:A8:BD:F1:B5:35:47:CA
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5B18AC5893FE11EE91B9AB4CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.241.28.0/22
43.241.128.0/21
43.242.208.0/22
43.242.224.0/21
45.64.84.0/22
45.114.192.0/22
45.117.0.0/22
45.127.120.0/22
45.250.248.0-45.250.250.255
103.14.232.0/22
103.17.12.0/23
103.26.52.0-103.26.59.255
103.42.160.0/22
103.48.56.0/22
103.48.100.0/22
103.57.96.0/23
103.59.212.0/22
103.66.80.0/22
103.69.238.0/24
103.74.236.0/22
103.77.152.0/22
103.89.40.0/22
103.111.132.0/22
103.112.32.0/22
103.117.184.0/24
103.117.187.0/24
103.132.228.0/23
103.137.152.0/22
103.148.207.0/24
103.153.151.0/24
103.155.170.0/24
103.162.190.0/23
103.163.188.0/23
103.168.62.0/23
103.173.208.0/23
103.174.30.0/24
103.174.38.0/24
103.178.212.0/23
103.181.209.0/24
103.185.11.0/24
103.204.119.0/24
103.209.18.0/23
103.215.114.0/23
103.216.144.0/22
103.218.100.0/22
103.219.164.0/22
103.220.80.0/22
103.220.212.0/22
103.226.0.0/21
103.226.28.0/22
103.232.24.0/22
124.108.16.0/22
IPv6:
2001:df6:f180::/48
2404:bd00::-2404:bd00:8:ffff:ffff:ffff:ffff:ffff
2404:bd00:a::-2404:bd00:f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
47:d9:40:70:94:d3:f5:20:d3:55:eb:4d:93:a1:29:73:c1:b4:
80:52:3d:47:91:77:9f:36:9a:50:da:60:29:fe:8e:d1:05:8b:
70:21:8b:50:6e:cc:67:ce:c2:a0:69:04:2b:eb:3e:c4:3d:32:
c3:86:c2:af:f7:a4:69:8b:95:b8:7b:cc:6d:92:b8:02:b5:04:
1f:0b:23:3d:3a:b6:b1:5d:79:92:6d:7d:13:eb:59:ce:d3:25:
e1:14:0d:7f:d4:ee:5f:63:56:5c:8f:24:f4:40:2b:a5:71:79:
8b:88:40:9a:d3:48:9d:2f:2e:df:a5:94:e7:8f:e1:44:7a:1b:
5a:09:e3:ff:9e:a0:c7:48:36:7f:76:d5:9f:0f:cd:3a:38:a8:
e1:51:d2:ff:c7:7c:fc:97:56:4c:91:ca:9e:b2:27:35:01:8b:
11:aa:41:5f:21:1c:b9:f5:c9:bc:93:a7:78:25:8f:32:f4:0a:
14:0e:47:6c:bf:97:51:67:d1:34:1c:f0:f7:84:8b:49:60:d0:
64:45:8d:31:10:67:32:47:59:86:fb:e3:e8:ba:8f:4f:91:23:
5c:fe:e2:5f:8f:ef:76:2a:15:15:cf:ec:81:c4:85:db:c7:39:
15:f8:05:33:57:bb:6f:23:ce:31:f7:64:b6:e1:88:a5:00:3c:
55:0b:37:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:55:52 2025 by rpki-client