Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/633D6EE84F5411EF8EAD7847C4F9AE02.roa
File: 633D6EE84F5411EF8EAD7847C4F9AE02.roa (raw, json)
Hash identifier: wB5RmxPVS3nvxYZo1PXwZbfM7/JLBX/ywduu/kgRnaI=
Subject key identifier: C2:66:D4:34:C6:2C:24:7E:59:48:A4:9F:D6:D3:3F:AF:07:D1:0F:99
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 966B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/633D6EE84F5411EF8EAD7847C4F9AE02.roa
Signing time: Fri 09 Aug 2024 08:22:53 +0000
ROA not before: Fri 09 Aug 2024 08:22:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.225.0.0/22 maxlen: 24
45.112.192.0/22 maxlen: 24
45.115.92.0/22 maxlen: 24
103.14.197.0/24 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.47.152.0/24 maxlen: 24
103.51.92.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.68.206.0/23 maxlen: 24
103.86.20.0/22 maxlen: 24
103.108.76.0/22 maxlen: 24
103.142.64.0/23 maxlen: 24
103.171.236.0/23 maxlen: 24
103.180.216.0/23 maxlen: 24
103.183.132.0/23 maxlen: 24
103.183.134.0/23 maxlen: 24
103.183.136.0/23 maxlen: 24
103.183.168.0/23 maxlen: 24
103.183.176.0/23 maxlen: 24
103.183.196.0/23 maxlen: 24
103.183.206.0/23 maxlen: 24
103.183.222.0/23 maxlen: 24
103.183.224.0/23 maxlen: 24
103.183.234.0/23 maxlen: 24
103.184.4.0/23 maxlen: 24
103.184.6.0/23 maxlen: 24
103.184.38.0/23 maxlen: 24
103.184.116.0/23 maxlen: 24
103.184.140.0/23 maxlen: 24
103.184.142.0/23 maxlen: 24
103.184.158.0/23 maxlen: 24
103.184.160.0/23 maxlen: 24
103.184.198.0/23 maxlen: 24
103.184.200.0/23 maxlen: 24
103.184.202.0/23 maxlen: 24
103.184.226.0/23 maxlen: 24
103.185.180.0/23 maxlen: 24
103.186.38.0/23 maxlen: 24
103.187.50.0/23 maxlen: 24
103.187.60.0/23 maxlen: 24
103.187.72.0/23 maxlen: 24
103.190.56.0/23 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.224.36.0/22 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
203.191.56.0/22 maxlen: 24
2400:d180:66::/48 maxlen: 48
2400:d180:67::/48 maxlen: 48
2400:d180:68::/48 maxlen: 48
2400:d180:69::/48 maxlen: 48
2400:d180:70::/48 maxlen: 48
2400:d180:71::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38507 (0x966b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Aug 9 08:22:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66b5d1dd-522a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:85:97:1f:49:bc:83:44:bb:fd:af:98:20:13:
c2:45:64:30:ee:27:86:58:a3:5f:fa:0b:c3:87:d6:
6f:88:91:fe:61:52:fb:d4:8a:ff:e2:fd:03:2e:b3:
84:87:26:8a:66:fd:34:70:a7:a4:f9:50:c6:dd:fe:
75:89:0f:b5:19:5f:6e:85:a5:70:3a:54:31:77:9b:
13:b1:41:35:90:8b:69:b8:3b:2a:2f:f7:55:78:b7:
ae:f5:b4:04:3a:4e:05:f7:d6:5a:92:62:63:e5:a9:
46:77:c9:c0:9f:b1:60:23:a7:04:49:28:ac:db:da:
a6:cb:11:09:a4:c1:a9:d1:d6:ca:34:d2:b5:e1:53:
a2:5f:d3:d1:3c:90:ed:41:a3:07:af:54:02:03:c3:
97:3a:86:da:96:48:47:ee:26:ad:82:23:28:e9:e8:
80:6e:b1:dd:11:93:43:d9:e5:27:fe:0c:0e:3c:96:
55:73:b2:74:30:df:3d:fb:ba:5d:e2:2c:b8:93:c0:
24:b5:33:45:a0:ab:ad:40:e7:0b:7e:e8:27:29:8e:
c1:c9:21:e0:c9:25:c0:0d:3a:c2:11:35:48:1c:94:
f8:1e:3f:7e:da:b5:bf:f7:33:4a:66:73:22:68:6a:
52:3a:ed:3f:42:6b:fd:f2:31:8d:d2:69:0a:ec:3e:
13:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:66:D4:34:C6:2C:24:7E:59:48:A4:9F:D6:D3:3F:AF:07:D1:0F:99
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/633D6EE84F5411EF8EAD7847C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.0.0/22
45.112.192.0/22
45.115.92.0/22
103.14.197.0/24
103.27.168.0/24
103.27.170.0/23
103.47.152.0/24
103.51.92.0/22
103.52.48.0/22
103.55.84.0/22
103.68.206.0/23
103.86.20.0/22
103.108.76.0/22
103.142.64.0/23
103.171.236.0/23
103.180.216.0/23
103.183.132.0-103.183.137.255
103.183.168.0/23
103.183.176.0/23
103.183.196.0/23
103.183.206.0/23
103.183.222.0-103.183.225.255
103.183.234.0/23
103.184.4.0/22
103.184.38.0/23
103.184.116.0/23
103.184.140.0/22
103.184.158.0-103.184.161.255
103.184.198.0-103.184.203.255
103.184.226.0/23
103.185.180.0/23
103.186.38.0/23
103.187.50.0/23
103.187.60.0/23
103.187.72.0/23
103.190.56.0/23
103.200.48.0/22
103.206.64.0/22
103.224.36.0/22
103.226.224.0/22
103.228.172.0/22
203.191.56.0/22
IPv6:
2400:d180:66::-2400:d180:69:ffff:ffff:ffff:ffff:ffff
2400:d180:70::/47
Signature Algorithm: sha256WithRSAEncryption
04:19:a0:de:0b:38:97:e0:39:51:c0:97:6e:c7:31:7e:d8:3f:
aa:c5:bf:4c:4e:ce:d1:d1:cd:a5:89:78:83:62:88:e0:d9:88:
15:c8:e9:73:51:9d:ae:e4:29:dc:35:91:f7:95:99:85:80:6f:
58:b3:b7:2b:d2:eb:27:98:1e:d7:14:d0:5f:af:0f:c2:df:d9:
57:5b:9e:e1:bf:22:81:79:59:38:14:d2:98:3a:fc:c0:8f:f2:
bb:e0:82:e1:c6:97:80:dc:18:72:50:4e:da:e3:27:ac:e8:b8:
24:8d:71:d7:c9:61:04:65:82:3a:62:d0:3b:2f:9d:6f:9a:80:
6a:05:cf:82:22:c1:44:e0:8e:5b:63:4d:41:55:15:e0:62:4b:
ef:9f:a3:0b:30:e8:29:61:b6:06:7e:e8:5b:f3:a8:9d:52:0e:
f9:8f:54:40:40:53:30:2d:35:5e:fa:1f:e3:b8:25:68:06:31:
b6:fa:53:72:df:30:25:02:09:de:30:4e:a4:94:04:4d:57:ce:
f9:b1:7e:80:fb:97:aa:ab:99:25:d8:2e:4b:7d:d3:26:cc:43:
54:9c:3d:f2:f0:ca:04:e3:b8:8e:78:18:5d:f4:05:8f:93:0b:
07:b6:8d:68:23:2d:70:2d:be:54:71:6f:4b:82:1f:7c:c8:4e:
a0:b1:b3:aa
-----BEGIN CERTIFICATE-----
MIIGtzCCBZ+gAwIBAgIDAJZrMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDgwOTA4MjI1M1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjZiNWQxZGQtNTIyYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMyFlx9JvINEu/2vmCATwkVkMO4nhlijX/oLw4fWb4iR/mFS+9SK/+L9Ay6z
hIcmimb9NHCnpPlQxt3+dYkPtRlfboWlcDpUMXebE7FBNZCLabg7Ki/3VXi3rvW0
BDpOBffWWpJiY+WpRnfJwJ+xYCOnBEkorNvapssRCaTBqdHWyjTSteFTol/T0TyQ
7UGjB69UAgPDlzqG2pZIR+4mrYIjKOnogG6x3RGTQ9nlJ/4MDjyWVXOydDDfPfu6
XeIsuJPAJLUzRaCrrUDnC37oJymOwckh4MklwA06whE1SByU+B4/ftq1v/czSmZz
ImhqUjrtP0Jr/fIxjdJpCuw+E7sCAwEAAaOCA9owggPWMB0GA1UdDgQWBBTCZtQ0
xiwkfllIpJ/W0z+vB9EPmTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzYzM0Q2RUU4
NEY1NDExRUY4RUFENzg0N0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIIBYgYIKwYBBQUHAQcB
Af8EggFRMIIBTTCCASQEAgABMIIBHAMEAivhAAMEAi1wwAMEAi1zXAMEAGcOxQME
AGcbqAMEAWcbqgMEAGcvmAMEAmczXAMEAmc0MAMEAmc3VAMEAWdEzgMEAmdWFAME
AmdsTAMEAWeOQAMEAWer7AMEAWe02DAMAwQCZ7eEAwQBZ7eIAwQBZ7eoAwQBZ7ew
AwQBZ7fEAwQBZ7fOMAwDBAFnt94DBAFnt+ADBAFnt+oDBAJnuAQDBAFnuCYDBAFn
uHQDBAJnuIwwDAMEAWe4ngMEAWe4oDAMAwQBZ7jGAwQCZ7jIAwQBZ7jiAwQBZ7m0
AwQBZ7omAwQBZ7syAwQBZ7s8AwQBZ7tIAwQBZ744AwQCZ8gwAwQCZ85AAwQCZ+Ak
AwQCZ+LgAwQCZ+SsAwQCy784MCMEAgACMB0wEgMHASQA0YAAZgMHASQA0YAAaAMH
ASQA0YAAcDANBgkqhkiG9w0BAQsFAAOCAQEABBmg3gs4l+A5UcCXbscxftg/qsW/
TE7O0dHNpYl4g2KI4NmIFcjpc1GdruQp3DWR95WZhYBvWLO3K9LrJ5ge1xTQX68P
wt/ZV1ue4b8igXlZOBTSmDr8wI/yu+CC4caXgNwYclBO2uMnrOi4JI1x18lhBGWC
OmLQOy+db5qAagXPgiLBROCOW2NNQVUV4GJL75+jCzDoKWG2Bn7oW/OonVIO+Y9U
QEBTMC01Xvof47glaAYxtvpTct8wJQIJ3jBOpJQETVfO+bF+gPuXqquZJdguS33T
JsxDVJw98vDKBOO4jngYXfQFj5MLB7aNaCMtcC2+VHFvS4IffMhOoLGzqg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:30:03 2025 by rpki-client