Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/799BBB8A53BF11EFB7C75148C4F9AE02.roa
File: 799BBB8A53BF11EFB7C75148C4F9AE02.roa (raw, json)
Hash identifier: gGdh4CCiovI3+JmWK6pjXhqHL8lUic9C0VxR16Fyzeg=
Subject key identifier: 8B:83:A6:AE:AE:17:5B:9D:18:9A:FE:04:3A:07:AC:E2:33:F5:D3:48
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 963E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/799BBB8A53BF11EFB7C75148C4F9AE02.roa
Signing time: Tue 06 Aug 2024 06:49:36 +0000
ROA not before: Tue 06 Aug 2024 06:49:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133647
IP address blocks: 14.102.17.0/24 maxlen: 24
14.102.18.0/24 maxlen: 24
14.102.19.0/24 maxlen: 24
14.102.20.0/24 maxlen: 24
14.102.21.0/24 maxlen: 24
14.102.46.0/24 maxlen: 24
14.102.47.0/24 maxlen: 24
14.102.49.0/24 maxlen: 24
14.102.51.0/24 maxlen: 24
14.102.58.0/24 maxlen: 24
14.102.61.0/24 maxlen: 24
14.102.94.0/24 maxlen: 24
14.102.102.0/24 maxlen: 24
43.229.162.0/24 maxlen: 24
43.230.156.0/22 maxlen: 24
45.115.252.0/22 maxlen: 24
45.116.68.0/22 maxlen: 24
45.116.106.0/24 maxlen: 24
45.116.107.0/24 maxlen: 24
103.38.70.0/24 maxlen: 24
103.43.4.0/22 maxlen: 24
103.50.4.0/22 maxlen: 24
103.55.6.0/23 maxlen: 24
103.61.102.0/23 maxlen: 24
103.69.216.0/22 maxlen: 24
103.70.144.0/22 maxlen: 24
103.70.176.0/23 maxlen: 24
103.79.112.0/22 maxlen: 24
103.87.48.0/24 maxlen: 24
103.87.49.0/24 maxlen: 24
103.91.68.0/22 maxlen: 24
103.93.176.0/22 maxlen: 24
103.109.72.0/23 maxlen: 24
103.122.85.0/24 maxlen: 24
103.129.194.0/24 maxlen: 24
103.129.195.0/24 maxlen: 24
103.144.37.0/24 maxlen: 24
103.156.168.0/23 maxlen: 24
103.157.160.0/23 maxlen: 24
103.159.154.0/23 maxlen: 24
103.161.230.0/23 maxlen: 24
103.161.232.0/24 maxlen: 24
103.161.233.0/24 maxlen: 24
103.174.105.0/24 maxlen: 24
103.175.76.0/24 maxlen: 24
103.175.77.0/24 maxlen: 24
103.176.71.0/24 maxlen: 24
103.177.61.0/24 maxlen: 24
103.214.97.0/24 maxlen: 24
103.220.28.0/24 maxlen: 24
103.220.29.0/24 maxlen: 24
103.220.30.0/24 maxlen: 24
103.220.31.0/24 maxlen: 24
103.237.172.0/24 maxlen: 24
103.237.173.0/24 maxlen: 24
103.237.174.0/24 maxlen: 24
103.237.175.0/24 maxlen: 24
110.172.137.0/24 maxlen: 24
110.172.141.0/24 maxlen: 24
110.172.142.0/24 maxlen: 24
110.172.144.0/24 maxlen: 24
110.172.163.0/24 maxlen: 24
110.172.172.0/24 maxlen: 24
110.172.188.0/24 maxlen: 24
118.91.190.0/24 maxlen: 24
175.111.180.0/24 maxlen: 24
175.111.182.0/24 maxlen: 24
175.111.183.0/24 maxlen: 24
202.89.73.0/24 maxlen: 24
202.89.79.0/24 maxlen: 24
2001:df0:dc80::/48 maxlen: 48
2001:df1:b280::/48 maxlen: 48
2001:df1:f440::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38462 (0x963e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Aug 6 06:49:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66b1c780-6abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d4:4e:93:15:69:11:8d:45:40:cf:4d:ef:00:
86:97:e7:aa:1f:d5:74:9c:2e:62:6d:67:18:2d:d3:
35:b9:8f:68:5c:29:d6:03:24:59:65:e7:78:ca:d5:
d4:58:95:07:4d:3f:94:b0:59:34:db:5b:fc:d9:d5:
74:14:a7:96:7f:0a:1d:12:49:47:d7:bb:98:a9:25:
79:d6:76:43:e1:e1:a4:9a:52:9c:58:e1:8d:b5:f4:
1f:d3:5c:cc:21:30:42:4d:49:57:21:ae:e2:41:4a:
96:7b:5a:9f:98:3d:4b:77:be:17:37:a4:0e:36:1e:
d6:b7:84:81:2a:15:2e:15:cb:ec:8d:1d:7a:83:42:
25:1f:2a:58:22:3b:15:bb:34:9e:df:4d:75:2f:de:
20:80:43:db:d3:e6:15:9b:a4:34:62:60:22:97:78:
3c:8f:55:47:f9:88:14:dc:16:7b:2f:11:50:3d:37:
f1:30:e0:3b:b8:d1:c9:98:c1:59:45:7c:a0:1f:42:
38:29:d4:dc:c5:d6:bf:8c:91:e2:02:a6:8f:23:bf:
3e:52:0f:1f:7f:f4:03:1b:c3:20:36:86:6b:fd:92:
9b:fb:70:03:c9:5a:5b:2b:44:ca:e1:fd:97:d3:8d:
87:8b:62:f2:05:6f:1a:cb:e2:2f:08:0c:03:e6:1e:
c7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:83:A6:AE:AE:17:5B:9D:18:9A:FE:04:3A:07:AC:E2:33:F5:D3:48
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/799BBB8A53BF11EFB7C75148C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.102.17.0-14.102.21.255
14.102.46.0/23
14.102.49.0/24
14.102.51.0/24
14.102.58.0/24
14.102.61.0/24
14.102.94.0/24
14.102.102.0/24
43.229.162.0/24
43.230.156.0/22
45.115.252.0/22
45.116.68.0/22
45.116.106.0/23
103.38.70.0/24
103.43.4.0/22
103.50.4.0/22
103.55.6.0/23
103.61.102.0/23
103.69.216.0/22
103.70.144.0/22
103.70.176.0/23
103.79.112.0/22
103.87.48.0/23
103.91.68.0/22
103.93.176.0/22
103.109.72.0/23
103.122.85.0/24
103.129.194.0/23
103.144.37.0/24
103.156.168.0/23
103.157.160.0/23
103.159.154.0/23
103.161.230.0-103.161.233.255
103.174.105.0/24
103.175.76.0/23
103.176.71.0/24
103.177.61.0/24
103.214.97.0/24
103.220.28.0/22
103.237.172.0/22
110.172.137.0/24
110.172.141.0-110.172.142.255
110.172.144.0/24
110.172.163.0/24
110.172.172.0/24
110.172.188.0/24
118.91.190.0/24
175.111.180.0/24
175.111.182.0/23
202.89.73.0/24
202.89.79.0/24
IPv6:
2001:df0:dc80::/48
2001:df1:b280::/48
2001:df1:f440::/48
Signature Algorithm: sha256WithRSAEncryption
66:a1:5c:4e:4c:23:8e:ec:fa:41:b0:35:9d:8d:fc:c7:24:6a:
19:0b:12:30:9a:72:be:68:0a:38:66:a8:29:90:65:df:0f:2c:
7a:e3:28:74:6f:49:89:2d:0d:46:79:40:c1:ac:fe:f7:ec:30:
60:e4:65:54:c6:d2:f7:58:d3:44:df:0d:a7:5f:98:a0:f8:b4:
67:66:f4:8e:36:17:57:f4:c5:cf:68:b1:d3:14:64:45:dd:4f:
cf:f1:a1:75:56:56:d0:a7:bd:40:88:27:ed:03:dd:56:20:8c:
b3:5c:4d:b7:9f:99:99:4e:82:39:e3:9c:cf:d0:53:6b:15:36:
c1:9d:64:9f:f8:77:37:88:c1:ea:b5:32:ba:02:96:26:bb:7b:
19:c2:70:44:8d:f7:1a:ed:93:d2:7a:6c:56:e7:1a:e9:67:13:
09:4d:d2:d8:74:29:7a:b6:53:ad:07:4a:59:0b:dc:32:46:bc:
00:86:56:8d:74:db:13:b4:87:a1:1d:5f:e8:9e:46:c2:ee:13:
50:b4:70:51:7b:e4:2d:39:9d:4c:2e:e3:07:63:16:19:cc:b7:
f2:e8:ad:0e:62:4a:40:8c:16:8d:a4:e1:1c:4f:a8:de:dd:f3:
1c:f9:63:7a:a9:db:70:85:29:0b:94:37:28:14:d2:f8:46:64:
7d:3e:68:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:27:02 2025 by rpki-client