Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5DEF5AB050B611EFBA4EE683C4F9AE02.roa
File: 5DEF5AB050B611EFBA4EE683C4F9AE02.roa (raw, json)
Hash identifier: lmr6JHMGYgNuE64UjKUAUBNq3RE0yC/60Rzf8Ab5pwk=
Subject key identifier: 32:F6:B4:1C:2C:CD:74:64:2D:29:C0:A6:26:7B:71:19:9B:25:9E:C6
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9693
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5DEF5AB050B611EFBA4EE683C4F9AE02.roa
Signing time: Mon 12 Aug 2024 08:07:27 +0000
ROA not before: Mon 12 Aug 2024 08:07:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 18002
IP address blocks: 14.102.0.0/24 maxlen: 24
14.102.1.0/24 maxlen: 24
14.102.2.0/24 maxlen: 24
14.102.3.0/24 maxlen: 24
14.102.4.0/24 maxlen: 24
14.102.5.0/24 maxlen: 24
14.102.6.0/24 maxlen: 24
14.102.7.0/24 maxlen: 24
14.102.8.0/24 maxlen: 24
14.102.9.0/24 maxlen: 24
14.102.10.0/24 maxlen: 24
14.102.11.0/24 maxlen: 24
14.102.12.0/24 maxlen: 24
14.102.13.0/24 maxlen: 24
14.102.14.0/24 maxlen: 24
14.102.15.0/24 maxlen: 24
14.102.16.0/24 maxlen: 24
14.102.22.0/24 maxlen: 24
14.102.23.0/24 maxlen: 24
14.102.24.0/24 maxlen: 24
14.102.25.0/24 maxlen: 24
14.102.26.0/24 maxlen: 24
14.102.27.0/24 maxlen: 24
14.102.28.0/24 maxlen: 24
14.102.29.0/24 maxlen: 24
14.102.30.0/24 maxlen: 24
14.102.31.0/24 maxlen: 24
14.102.32.0/24 maxlen: 24
14.102.33.0/24 maxlen: 24
14.102.34.0/24 maxlen: 24
14.102.35.0/24 maxlen: 24
14.102.36.0/24 maxlen: 24
14.102.37.0/24 maxlen: 24
14.102.38.0/24 maxlen: 24
14.102.40.0/24 maxlen: 24
14.102.41.0/24 maxlen: 24
14.102.42.0/24 maxlen: 24
14.102.43.0/24 maxlen: 24
14.102.44.0/24 maxlen: 24
14.102.45.0/24 maxlen: 24
14.102.46.0/24 maxlen: 24
14.102.47.0/24 maxlen: 24
14.102.48.0/24 maxlen: 24
14.102.49.0/24 maxlen: 24
14.102.50.0/24 maxlen: 24
14.102.52.0/24 maxlen: 24
14.102.53.0/24 maxlen: 24
14.102.54.0/24 maxlen: 24
14.102.55.0/24 maxlen: 24
14.102.56.0/24 maxlen: 24
14.102.57.0/24 maxlen: 24
14.102.58.0/24 maxlen: 24
14.102.59.0/24 maxlen: 24
14.102.64.0/24 maxlen: 24
14.102.65.0/24 maxlen: 24
14.102.66.0/24 maxlen: 24
14.102.67.0/24 maxlen: 24
14.102.68.0/24 maxlen: 24
14.102.69.0/24 maxlen: 24
14.102.70.0/24 maxlen: 24
14.102.71.0/24 maxlen: 24
14.102.72.0/24 maxlen: 24
14.102.73.0/24 maxlen: 24
14.102.74.0/24 maxlen: 24
14.102.75.0/24 maxlen: 24
14.102.76.0/24 maxlen: 24
14.102.77.0/24 maxlen: 24
14.102.78.0/24 maxlen: 24
14.102.80.0/24 maxlen: 24
14.102.81.0/24 maxlen: 24
14.102.82.0/24 maxlen: 24
14.102.83.0/24 maxlen: 24
14.102.88.0/24 maxlen: 24
14.102.91.0/24 maxlen: 24
14.102.92.0/24 maxlen: 24
14.102.93.0/24 maxlen: 24
14.102.95.0/24 maxlen: 24
14.102.96.0/24 maxlen: 24
14.102.97.0/24 maxlen: 24
14.102.100.0/24 maxlen: 24
14.102.101.0/24 maxlen: 24
14.102.103.0/24 maxlen: 24
14.102.104.0/24 maxlen: 24
14.102.105.0/24 maxlen: 24
14.102.106.0/23 maxlen: 24
14.102.108.0/24 maxlen: 24
14.102.109.0/24 maxlen: 24
14.102.110.0/24 maxlen: 24
14.102.111.0/24 maxlen: 24
14.102.112.0/24 maxlen: 24
14.102.113.0/24 maxlen: 24
14.102.114.0/24 maxlen: 24
14.102.115.0/24 maxlen: 24
14.102.116.0/24 maxlen: 24
14.102.117.0/24 maxlen: 24
14.102.118.0/24 maxlen: 24
14.102.119.0/24 maxlen: 24
14.102.120.0/24 maxlen: 24
14.102.121.0/24 maxlen: 24
14.102.122.0/24 maxlen: 24
14.102.123.0/24 maxlen: 24
14.102.124.0/24 maxlen: 24
14.102.125.0/24 maxlen: 24
14.102.126.0/24 maxlen: 24
14.102.127.0/24 maxlen: 24
43.245.136.0/22 maxlen: 24
43.251.212.0/22 maxlen: 24
61.14.228.0/22 maxlen: 24
103.5.200.0/22 maxlen: 24
103.59.189.0/24 maxlen: 24
103.87.100.0/22 maxlen: 24
103.122.84.0/24 maxlen: 24
103.158.131.0/24 maxlen: 24
103.160.24.0/24 maxlen: 24
103.175.72.0/24 maxlen: 24
103.175.73.0/24 maxlen: 24
103.176.8.0/23 maxlen: 24
110.172.128.0/18 maxlen: 21
110.172.128.0/19 maxlen: 23
110.172.130.0/23 maxlen: 24
110.172.132.0/24 maxlen: 24
110.172.134.0/23 maxlen: 24
110.172.136.0/24 maxlen: 24
110.172.138.0/23 maxlen: 24
110.172.140.0/22 maxlen: 24
110.172.144.0/23 maxlen: 24
110.172.147.0/24 maxlen: 24
110.172.150.0/23 maxlen: 24
110.172.152.0/21 maxlen: 24
110.172.160.0/20 maxlen: 23
110.172.160.0/23 maxlen: 24
110.172.162.0/24 maxlen: 24
110.172.164.0/24 maxlen: 24
110.172.166.0/23 maxlen: 24
110.172.168.0/24 maxlen: 24
110.172.170.0/23 maxlen: 24
110.172.172.0/24 maxlen: 24
110.172.174.0/23 maxlen: 24
110.172.176.0/22 maxlen: 23
110.172.177.0/24 maxlen: 24
110.172.178.0/23 maxlen: 24
110.172.184.0/21 maxlen: 24
111.235.64.0/22 maxlen: 24
114.69.224.0/19 maxlen: 21
114.69.224.0/21 maxlen: 23
114.69.224.0/23 maxlen: 24
114.69.226.0/24 maxlen: 24
114.69.228.0/22 maxlen: 24
114.69.232.0/22 maxlen: 23
114.69.232.0/24 maxlen: 24
114.69.234.0/23 maxlen: 24
114.69.240.0/20 maxlen: 23
114.69.240.0/24 maxlen: 24
114.69.242.0/23 maxlen: 24
114.69.244.0/22 maxlen: 24
114.69.248.0/23 maxlen: 24
114.69.252.0/22 maxlen: 24
118.91.176.0/20 maxlen: 20
118.91.176.0/21 maxlen: 21
118.91.176.0/22 maxlen: 23
118.91.176.0/23 maxlen: 24
118.91.178.0/24 maxlen: 24
118.91.188.0/22 maxlen: 23
118.91.189.0/24 maxlen: 24
118.91.190.0/23 maxlen: 24
150.107.192.0/22 maxlen: 24
202.89.64.0/20 maxlen: 20
202.89.64.0/24 maxlen: 24
202.89.65.0/24 maxlen: 24
202.89.66.0/24 maxlen: 24
202.89.67.0/24 maxlen: 24
202.89.68.0/24 maxlen: 24
202.89.69.0/24 maxlen: 24
202.89.70.0/24 maxlen: 24
202.89.71.0/24 maxlen: 24
202.89.72.0/24 maxlen: 24
202.89.73.0/24 maxlen: 24
202.89.74.0/24 maxlen: 24
202.89.75.0/24 maxlen: 24
202.89.76.0/24 maxlen: 24
202.89.77.0/24 maxlen: 24
202.89.78.0/24 maxlen: 24
202.89.79.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38547 (0x9693)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Aug 12 08:07:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66b9c2bf-ab2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f0:bd:c1:de:85:51:c8:3f:f5:9b:c7:79:6f:
d1:49:40:58:23:bf:f6:22:16:f3:1b:1b:e8:71:98:
7f:81:b5:9f:83:b6:1b:99:26:69:56:21:6e:b0:8f:
5f:4d:da:ad:6c:79:97:d6:c8:a3:39:f5:18:78:83:
c8:ba:65:ba:9a:cb:ca:81:26:25:3b:54:21:66:18:
a6:58:8d:59:81:fd:4f:83:13:48:d5:43:ad:7a:a2:
63:18:6b:3b:5c:43:b7:f4:c9:de:38:25:15:d0:d0:
0e:7d:75:88:9f:5f:f2:ac:29:37:41:58:02:6d:69:
8e:ab:57:dd:28:6b:3b:91:c8:5d:6d:0c:10:99:48:
65:8f:ea:f2:d3:ff:be:ad:36:75:cd:b0:64:cc:c5:
03:bc:2e:5e:05:3f:e1:56:b1:7a:32:df:6c:a3:85:
62:ac:cf:77:b8:14:86:e5:6a:4e:eb:b2:6e:97:9f:
85:b8:cc:ae:7b:77:b8:06:03:6b:fa:01:c6:81:f1:
4f:54:d7:38:e4:1d:e2:ab:c4:49:60:ed:47:a0:48:
32:a7:b3:75:e4:8e:df:10:d8:b1:e0:d2:3b:dc:64:
dd:ce:fc:06:c2:50:95:59:0d:91:f1:8a:87:4d:67:
94:dc:09:c2:00:45:73:45:20:b4:3d:66:53:39:d7:
17:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F6:B4:1C:2C:CD:74:64:2D:29:C0:A6:26:7B:71:19:9B:25:9E:C6
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5DEF5AB050B611EFBA4EE683C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.102.0.0-14.102.16.255
14.102.22.0-14.102.38.255
14.102.40.0-14.102.50.255
14.102.52.0-14.102.59.255
14.102.64.0-14.102.78.255
14.102.80.0/22
14.102.88.0/24
14.102.91.0-14.102.93.255
14.102.95.0-14.102.97.255
14.102.100.0/23
14.102.103.0-14.102.127.255
43.245.136.0/22
43.251.212.0/22
61.14.228.0/22
103.5.200.0/22
103.59.189.0/24
103.87.100.0/22
103.122.84.0/24
103.158.131.0/24
103.160.24.0/24
103.175.72.0/23
103.176.8.0/23
110.172.128.0/18
111.235.64.0/22
114.69.224.0/19
118.91.176.0/20
150.107.192.0/22
202.89.64.0/20
Signature Algorithm: sha256WithRSAEncryption
b5:09:e4:5b:a7:66:a6:08:50:a5:5d:31:39:30:e3:b1:09:75:
94:83:05:d0:88:de:f7:26:19:c5:de:96:be:9a:ab:40:1b:fa:
76:1d:24:bd:4d:5d:92:a6:90:0e:9d:6a:7d:b6:2c:bc:b1:58:
45:31:b3:69:55:99:b2:82:68:02:ad:36:66:49:7a:65:ff:c2:
75:21:c0:b9:2b:58:6f:a6:15:ca:2a:07:11:2f:43:81:f0:22:
4e:d3:6d:40:4d:b8:cf:48:fa:b3:c1:73:a5:68:06:bb:fb:f7:
ee:61:e6:43:52:97:bf:a4:65:10:53:2f:82:f2:aa:f5:0f:e8:
7d:87:0b:21:45:a9:92:3f:c1:9f:0e:50:1c:85:fb:1b:63:de:
00:7d:b0:2c:a5:d8:9b:48:fc:6b:21:80:54:e7:a7:e4:a7:67:
bf:6e:e5:f8:f5:63:c5:3e:50:7a:61:0c:f6:9d:9a:df:32:20:
37:2a:f3:e5:ea:09:c1:58:d3:2c:67:8b:90:0c:9d:4a:93:b6:
9b:38:ba:59:32:03:da:61:55:37:98:63:b0:f9:9d:53:9d:8a:
60:5e:cd:12:6f:ff:07:5e:8b:54:d4:20:f3:49:92:bf:17:9b:
6a:1e:d3:33:67:ab:fc:d5:c1:c7:a1:45:57:d5:50:b9:8b:79:
12:95:20:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:58:31 2025 by rpki-client