Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/66205522614111EFB448BF55C4F9AE02.roa
File: 66205522614111EFB448BF55C4F9AE02.roa (raw, json)
Hash identifier: gcjIlkLfq9UgFgpEsJ5V3GbtY246Q7avE1iE40Oq9G0=
Subject key identifier: A2:66:A0:F6:FD:08:D6:63:5B:53:FC:DD:A5:0E:98:90:90:A9:B2:E8
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9771
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/66205522614111EFB448BF55C4F9AE02.roa
Signing time: Fri 23 Aug 2024 11:18:19 +0000
ROA not before: Fri 23 Aug 2024 11:18:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133647
IP address blocks: 14.102.58.0/24 maxlen: 24
43.229.162.0/24 maxlen: 24
43.230.156.0/22 maxlen: 24
45.115.252.0/22 maxlen: 24
45.116.68.0/22 maxlen: 24
103.38.70.0/24 maxlen: 24
103.43.4.0/22 maxlen: 24
103.50.4.0/22 maxlen: 24
103.55.6.0/23 maxlen: 24
103.61.102.0/23 maxlen: 24
103.69.216.0/22 maxlen: 24
103.70.144.0/22 maxlen: 24
103.70.176.0/23 maxlen: 24
103.79.112.0/22 maxlen: 24
103.87.48.0/24 maxlen: 24
103.87.49.0/24 maxlen: 24
103.91.68.0/22 maxlen: 24
103.93.176.0/22 maxlen: 24
103.109.72.0/23 maxlen: 24
103.122.85.0/24 maxlen: 24
103.129.194.0/24 maxlen: 24
103.129.195.0/24 maxlen: 24
103.144.37.0/24 maxlen: 24
103.156.168.0/23 maxlen: 24
103.157.160.0/23 maxlen: 24
103.159.154.0/23 maxlen: 24
103.161.230.0/23 maxlen: 24
103.161.232.0/24 maxlen: 24
103.161.233.0/24 maxlen: 24
103.174.105.0/24 maxlen: 24
103.175.76.0/24 maxlen: 24
103.175.77.0/24 maxlen: 24
103.176.71.0/24 maxlen: 24
103.177.61.0/24 maxlen: 24
103.214.97.0/24 maxlen: 24
103.220.28.0/24 maxlen: 24
103.220.29.0/24 maxlen: 24
103.220.30.0/24 maxlen: 24
103.220.31.0/24 maxlen: 24
103.237.172.0/24 maxlen: 24
103.237.173.0/24 maxlen: 24
103.237.174.0/24 maxlen: 24
103.237.175.0/24 maxlen: 24
110.172.141.0/24 maxlen: 24
110.172.163.0/24 maxlen: 24
110.172.172.0/24 maxlen: 24
110.172.188.0/24 maxlen: 24
175.111.180.0/24 maxlen: 24
175.111.182.0/24 maxlen: 24
175.111.183.0/24 maxlen: 24
202.89.73.0/24 maxlen: 24
2001:df0:dc80::/48 maxlen: 48
2001:df1:b280::/48 maxlen: 48
2001:df1:f440::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38769 (0x9771)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Aug 23 11:18:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66c86ffa-3d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:32:61:a5:58:6b:d2:1c:53:1d:73:4f:f3:ed:
b6:33:af:38:0f:0e:ec:e1:3b:92:d8:dc:1b:43:c0:
18:5e:40:82:e5:9e:9b:67:b3:e3:9d:47:6e:68:0d:
44:0f:41:8c:d5:02:58:96:63:ca:9b:25:0f:56:e0:
d9:84:c2:21:8a:50:1d:be:23:94:27:8b:e6:bf:07:
e1:a2:7f:05:dd:48:2b:75:de:25:cb:b8:09:d9:f6:
42:ff:23:40:7a:98:86:77:64:59:2a:47:f9:4d:b0:
1f:17:eb:a3:4c:14:38:89:dd:d4:5f:38:db:8c:95:
02:ad:8a:94:21:c7:d5:64:fb:68:7a:09:70:43:d7:
63:5c:e7:46:84:96:9c:25:70:fe:85:55:1b:9b:38:
65:2b:52:04:37:72:3f:b8:79:77:40:af:a9:ba:1f:
01:4a:bd:91:23:dc:c9:99:35:19:ea:90:6b:33:4c:
ad:4c:1c:a3:a4:b9:24:a6:e0:1f:49:57:73:9c:ee:
f1:90:40:65:ff:af:2c:37:de:f3:14:11:53:19:19:
19:05:70:39:30:21:f1:ea:5a:fe:b7:57:28:1a:e3:
80:f1:c9:5c:c5:80:ec:6e:62:81:cc:cc:5d:48:de:
9b:96:d9:cc:d3:0c:80:52:9f:34:7c:2e:6b:26:7c:
83:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:66:A0:F6:FD:08:D6:63:5B:53:FC:DD:A5:0E:98:90:90:A9:B2:E8
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/66205522614111EFB448BF55C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.102.58.0/24
43.229.162.0/24
43.230.156.0/22
45.115.252.0/22
45.116.68.0/22
103.38.70.0/24
103.43.4.0/22
103.50.4.0/22
103.55.6.0/23
103.61.102.0/23
103.69.216.0/22
103.70.144.0/22
103.70.176.0/23
103.79.112.0/22
103.87.48.0/23
103.91.68.0/22
103.93.176.0/22
103.109.72.0/23
103.122.85.0/24
103.129.194.0/23
103.144.37.0/24
103.156.168.0/23
103.157.160.0/23
103.159.154.0/23
103.161.230.0-103.161.233.255
103.174.105.0/24
103.175.76.0/23
103.176.71.0/24
103.177.61.0/24
103.214.97.0/24
103.220.28.0/22
103.237.172.0/22
110.172.141.0/24
110.172.163.0/24
110.172.172.0/24
110.172.188.0/24
175.111.180.0/24
175.111.182.0/23
202.89.73.0/24
IPv6:
2001:df0:dc80::/48
2001:df1:b280::/48
2001:df1:f440::/48
Signature Algorithm: sha256WithRSAEncryption
19:33:13:fe:bb:27:8a:f3:a1:bc:2f:ef:65:3e:80:73:b3:c7:
b5:aa:9e:d7:b0:e5:84:ab:6e:d6:e6:4f:5c:2c:c9:13:6e:0b:
98:49:d6:c6:41:39:ac:ee:28:93:22:e3:d8:08:d8:37:9d:a0:
cf:70:e0:8b:c5:d1:63:d9:45:40:a9:23:90:27:29:41:62:89:
1e:49:f5:24:a4:c7:ea:d0:66:90:0d:4a:10:0b:5d:c8:38:df:
f2:5b:dd:4a:c9:c6:d5:a2:19:3d:34:51:09:db:fe:d1:62:ef:
1e:31:16:2a:66:1c:ca:9a:5a:f4:61:8b:39:eb:aa:ce:b4:bf:
70:50:07:6c:3f:7f:d2:58:9a:af:8d:42:8d:f7:79:f7:e6:10:
31:31:0c:b7:9a:1e:c1:da:fe:da:e9:45:0c:a8:da:5c:57:9e:
ff:e4:95:bf:8a:d7:39:22:5a:1d:37:66:5a:68:a3:4a:16:13:
50:35:8c:38:9f:1a:1a:88:b1:f1:fb:33:00:c8:8a:0a:fe:fc:
02:4a:c9:69:06:c3:02:9f:28:39:27:8f:90:0a:83:63:82:f1:
54:e7:88:3d:2d:dd:23:fe:ba:01:32:98:8d:90:ca:2d:36:e7:
be:a8:bd:2d:7e:aa:ec:ee:71:bc:90:91:c5:5c:b2:08:58:0f:
4f:7c:1e:4c
-----BEGIN CERTIFICATE-----
MIIGiTCCBXGgAwIBAgIDAJdxMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDgyMzExMTgxOVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjZjODZmZmEtM2Q0ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ8yYaVYa9IcUx1zT/PttjOvOA8O7OE7ktjcG0PAGF5AguWem2ez451HbmgN
RA9BjNUCWJZjypslD1bg2YTCIYpQHb4jlCeL5r8H4aJ/Bd1IK3XeJcu4Cdn2Qv8j
QHqYhndkWSpH+U2wHxfro0wUOInd1F8424yVAq2KlCHH1WT7aHoJcEPXY1znRoSW
nCVw/oVVG5s4ZStSBDdyP7h5d0CvqbofAUq9kSPcyZk1GeqQazNMrUwco6S5JKbg
H0lXc5zu8ZBAZf+vLDfe8xQRUxkZGQVwOTAh8epa/rdXKBrjgPHJXMWA7G5igczM
XUjem5bZzNMMgFKfNHwuayZ8g7cCAwEAAaOCA6wwggOoMB0GA1UdDgQWBBSiZqD2
/QjWY1tT/N2lDpiQkKmy6DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzY2MjA1NTIy
NjE0MTExRUZCNDQ4QkY1NUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIIBNAYIKwYBBQUHAQcB
Af8EggEjMIIBHzCB+QQCAAEwgfIDBAAOZjoDBAAr5aIDBAIr5pwDBAItc/wDBAIt
dEQDBABnJkYDBAJnKwQDBAJnMgQDBAFnNwYDBAFnPWYDBAJnRdgDBAJnRpADBAFn
RrADBAJnT3ADBAFnVzADBAJnW0QDBAJnXbADBAFnbUgDBABnelUDBAFngcIDBABn
kCUDBAFnnKgDBAFnnaADBAFnn5owDAMEAWeh5gMEAWeh6AMEAGeuaQMEAWevTAME
AGewRwMEAGexPQMEAGfWYQMEAmfcHAMEAmftrAMEAG6sjQMEAG6sowMEAG6srAME
AG6svAMEAK9vtAMEAa9vtgMEAMpZSTAhBAIAAjAbAwcAIAEN8NyAAwcAIAEN8bKA
AwcAIAEN8fRAMA0GCSqGSIb3DQEBCwUAA4IBAQAZMxP+uyeK86G8L+9lPoBzs8e1
qp7XsOWEq27W5k9cLMkTbguYSdbGQTms7iiTIuPYCNg3naDPcOCLxdFj2UVAqSOQ
JylBYokeSfUkpMfq0GaQDUoQC13ION/yW91KycbVohk9NFEJ2/7RYu8eMRYqZhzK
mlr0YYs566rOtL9wUAdsP3/SWJqvjUKN93n35hAxMQy3mh7B2v7a6UUMqNpcV57/
5JW/itc5IlodN2ZaaKNKFhNQNYw4nxoaiLHx+zMAyIoK/vwCSslpBsMCnyg5J4+Q
CoNjgvFU54g9Ld0j/roBMpiNkMotNue+qL0tfqrs7nG8kJHFXLIIWA9PfB5M
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:27:53 2025 by rpki-client