Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/77967DC0BDE111EAAEFB6D58C4F9AE02.roa
File: 77967DC0BDE111EAAEFB6D58C4F9AE02.roa (raw, json)
Hash identifier: EGYtEtcs+as3GmIXE31aA/C9Otq2RFiH2DEohPzl+Fc=
Subject key identifier: 29:64:C0:71:0E:EC:51:00:61:B4:13:86:81:75:4E:7A:38:3C:77:65
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7702
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/77967DC0BDE111EAAEFB6D58C4F9AE02.roa
Signing time: Mon 07 Aug 2023 05:56:29 +0000
ROA not before: Mon 07 Aug 2023 05:56:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45582
IP address blocks: 1.186.75.0/24 maxlen: 24
1.186.104.0/24 maxlen: 24
1.186.105.0/24 maxlen: 24
1.186.209.0/24 maxlen: 24
27.116.16.0/21 maxlen: 24
45.112.184.0/24 maxlen: 24
45.112.185.0/24 maxlen: 24
45.112.186.0/24 maxlen: 24
45.112.187.0/24 maxlen: 24
45.118.72.0/22 maxlen: 24
45.249.48.0/24 maxlen: 24
45.249.50.0/24 maxlen: 24
103.10.132.0/22 maxlen: 24
103.22.172.0/22 maxlen: 24
103.52.36.0/22 maxlen: 24
103.124.28.0/23 maxlen: 24
103.178.208.0/23 maxlen: 24
103.196.4.0/22 maxlen: 24
103.217.212.0/22 maxlen: 24
119.235.48.0/21 maxlen: 24
182.48.214.0/24 maxlen: 24
182.48.219.0/24 maxlen: 24
182.48.254.0/24 maxlen: 24
202.131.131.0/24 maxlen: 24
202.140.56.0/24 maxlen: 24
202.140.57.0/24 maxlen: 24
2400:3680::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30466 (0x7702)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Aug 7 05:56:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64d0878d-9053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b5:6e:90:e3:c2:70:cb:73:b5:b1:1e:25:be:
07:3b:fe:5f:75:8b:d9:cc:e8:54:f8:ab:bd:37:4f:
cb:65:dc:22:58:6e:2a:ca:40:f1:6f:85:f4:49:a3:
a7:cd:a8:1f:88:09:f3:cf:7b:56:13:12:79:a0:6b:
5b:2c:03:0f:f6:78:ea:bc:58:06:82:08:5f:94:da:
ab:97:bb:98:81:e4:6e:82:53:26:6b:6b:fe:55:42:
0d:25:30:ca:6a:e2:a2:be:a3:44:cc:e1:98:b5:1e:
0a:bf:e7:7e:05:51:d3:b8:09:06:29:ed:ef:68:1a:
bd:15:6e:fc:f7:4e:65:b1:20:dc:a7:cd:91:fc:ed:
93:1f:5a:17:62:a9:d5:90:86:6a:e0:7b:f5:a6:2d:
8e:92:2d:20:96:0e:42:7b:6a:99:6a:94:73:db:66:
75:82:23:ae:b8:53:81:5a:53:d5:b8:80:45:9c:ab:
59:9f:40:a0:79:22:5e:74:c3:29:f9:15:38:a8:8f:
a4:7a:fd:35:cc:9c:11:09:4b:e0:aa:c3:af:de:1f:
d9:7a:9a:ca:15:47:84:c2:4a:7e:ca:79:6a:92:74:
8f:a2:0e:ba:05:40:73:52:a1:d9:f0:0b:45:cc:7f:
4a:8d:1d:7f:8b:02:dc:e4:e4:1d:24:0f:33:61:40:
9c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:64:C0:71:0E:EC:51:00:61:B4:13:86:81:75:4E:7A:38:3C:77:65
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/77967DC0BDE111EAAEFB6D58C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.186.75.0/24
1.186.104.0/23
1.186.209.0/24
27.116.16.0/21
45.112.184.0/22
45.118.72.0/22
45.249.48.0/24
45.249.50.0/24
103.10.132.0/22
103.22.172.0/22
103.52.36.0/22
103.124.28.0/23
103.178.208.0/23
103.196.4.0/22
103.217.212.0/22
119.235.48.0/21
182.48.214.0/24
182.48.219.0/24
182.48.254.0/24
202.131.131.0/24
202.140.56.0/23
IPv6:
2400:3680::/32
Signature Algorithm: sha256WithRSAEncryption
1a:12:76:82:82:5a:2e:a8:01:06:cb:a7:0f:8a:06:73:ca:8f:
cc:84:ef:24:1e:21:8f:e5:77:44:e1:23:64:97:cb:2c:67:8a:
f6:dc:17:7d:b7:64:36:14:0a:08:9d:a9:07:6c:73:97:a2:42:
4c:a9:1f:ff:64:50:f0:0b:b2:b7:04:54:ed:49:c3:7a:a6:70:
38:b4:b1:f5:72:61:69:78:6c:1a:d4:c1:3a:2d:72:0b:42:48:
af:38:ca:f3:91:9e:ae:14:32:bc:e8:99:d7:3b:a4:29:f4:36:
bc:b8:55:11:7d:fa:85:c6:b1:ab:80:98:03:aa:cc:50:54:3c:
7c:6a:86:65:13:23:81:c8:3a:04:62:6c:71:b4:79:6a:7e:e2:
0b:41:21:a9:b2:1b:6b:57:ab:15:67:34:d9:86:05:93:f8:23:
97:1f:de:83:06:29:93:67:bd:b2:97:61:f6:61:95:da:c7:89:
5a:ff:c7:17:05:7f:5d:00:5f:2a:14:dc:4e:1a:2e:4e:4d:ec:
c7:bb:c7:14:2a:b7:b5:9b:c3:bc:95:77:33:5e:f8:23:01:7b:
94:47:69:47:ad:8d:c8:7c:79:14:f4:ca:52:c0:9e:af:4a:f4:
3e:f6:cc:b8:19:61:e6:e9:54:31:64:41:4d:94:1b:81:27:e5:
ee:eb:99:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:30:02 2025 by rpki-client