Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7BF81CB4CFD211EE9201A363C4F9AE02.roa
File: 7BF81CB4CFD211EE9201A363C4F9AE02.roa (raw, json)
Hash identifier: HCmUcOJmvRlxZaBAopad0UfIa8GVelwkvvbFIF7UNNk=
Subject key identifier: 7B:AB:46:92:C7:31:F7:02:DB:1B:B8:E2:A7:45:6B:2A:52:51:46:B1
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 833F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7BF81CB4CFD211EE9201A363C4F9AE02.roa
Signing time: Tue 20 Feb 2024 09:29:02 +0000
ROA not before: Tue 20 Feb 2024 09:29:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 103.54.236.0/24 maxlen: 24
103.71.98.0/24 maxlen: 24
103.166.180.0/24 maxlen: 24
103.167.152.0/23 maxlen: 24
103.175.106.0/23 maxlen: 23
103.181.194.0/24 maxlen: 24
103.233.120.0/24 maxlen: 24
203.78.131.0/24 maxlen: 24
2001:df6:9580::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33599 (0x833f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Feb 20 09:29:02 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65d470de-29f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:49:6e:64:eb:e1:09:c1:19:b7:80:ca:02:d3:
bf:30:d8:72:cf:07:6d:a2:72:e2:54:88:aa:75:8f:
bd:72:5f:14:08:d8:85:4f:49:02:b8:c2:2e:7d:9d:
39:2f:60:f9:e0:b9:e7:d6:f7:50:9e:d5:3d:7f:4d:
d6:9c:a9:97:4c:f1:0a:d2:84:90:e9:7a:22:68:e9:
e2:9f:5f:57:c0:89:e0:20:20:5b:18:59:ec:a6:20:
c2:0a:dc:72:95:a4:e7:5a:12:d7:40:3e:8f:d3:a5:
56:88:8e:f5:e2:6c:db:11:99:1a:22:38:2e:cf:1a:
bc:87:30:55:3e:21:1e:89:f2:58:1f:3a:1d:9b:1b:
99:24:0e:79:66:61:9d:17:9a:3d:80:b1:98:f6:e9:
ac:1b:93:d3:f7:9c:60:37:11:6d:15:9d:38:36:33:
84:e2:e4:92:b8:fc:ba:5e:7a:78:af:43:ec:2b:c2:
30:40:fa:8b:fe:63:05:55:ac:b1:15:56:46:9e:64:
28:33:8a:ef:ba:da:aa:34:50:77:7a:ff:47:d1:be:
fe:ba:4a:c1:66:0c:0a:42:56:ea:26:93:39:d1:8b:
3e:82:eb:c4:25:00:e3:02:80:fe:b7:d0:67:4f:d0:
d8:63:8d:01:bf:be:4c:6a:79:4c:72:c9:0b:1c:c9:
7a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AB:46:92:C7:31:F7:02:DB:1B:B8:E2:A7:45:6B:2A:52:51:46:B1
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7BF81CB4CFD211EE9201A363C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.54.236.0/24
103.71.98.0/24
103.166.180.0/24
103.167.152.0/23
103.175.106.0/23
103.181.194.0/24
103.233.120.0/24
203.78.131.0/24
IPv6:
2001:df6:9580::/48
Signature Algorithm: sha256WithRSAEncryption
56:a6:ee:e4:c5:62:bb:4b:ef:f6:07:39:80:bd:2f:96:4a:4e:
41:40:e4:76:b4:1b:33:52:dd:f4:8d:4a:0f:cc:92:00:8b:ba:
86:06:95:d7:01:6e:86:2d:79:44:4e:35:3f:7c:8d:33:b8:08:
9d:42:0f:b6:4e:54:4b:54:fd:1f:33:9c:22:a2:84:7f:9a:9f:
36:c9:99:42:11:7f:d6:9e:96:04:ca:ae:85:74:a7:81:75:ce:
5b:ac:f0:b0:47:4e:08:28:c2:01:c4:22:5b:f7:79:51:77:77:
a9:8a:92:c0:ff:ed:d6:0d:74:72:72:b5:04:37:ae:87:e5:48:
53:8a:75:89:ca:a8:69:14:a4:81:28:c0:d9:68:49:3c:d3:f4:
ff:ed:64:10:03:4d:24:a7:0a:b6:e2:25:49:81:4d:57:d0:69:
d4:95:4a:7f:ce:cf:d0:1d:49:9b:32:98:d9:3a:1b:04:6e:bc:
17:2e:27:e5:6e:a6:6a:88:35:2b:f4:3f:c5:8e:96:62:81:43:
fb:36:13:52:ca:01:13:99:97:b9:07:62:37:55:35:e2:63:19:
9f:a2:52:92:c0:7f:70:63:ce:97:81:4d:5e:9e:8e:a1:f8:f6:
9b:a6:08:cf:6a:11:4e:8c:7c:5c:81:02:ac:8c:bb:23:23:9c:
3c:17:e7:44
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIDAIM/MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDIyMDA5MjkwMloXDTI0MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjVkNDcwZGUtMjlmODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMBJbmTr4QnBGbeAygLTvzDYcs8HbaJy4lSIqnWPvXJfFAjYhU9JArjCLn2d
OS9g+eC559b3UJ7VPX9N1pypl0zxCtKEkOl6Imjp4p9fV8CJ4CAgWxhZ7KYgwgrc
cpWk51oS10A+j9OlVoiO9eJs2xGZGiI4Ls8avIcwVT4hHonyWB86HZsbmSQOeWZh
nReaPYCxmPbprBuT0/ecYDcRbRWdODYzhOLkkrj8ul56eK9D7CvCMED6i/5jBVWs
sRVWRp5kKDOK77raqjRQd3r/R9G+/rpKwWYMCkJW6iaTOdGLPoLrxCUA4wKA/rfQ
Z0/Q2GONAb++TGp5THLJCxzJejUCAwEAAaOCAtAwggLMMB0GA1UdDgQWBBR7q0aS
xzH3AtsbuOKnRWsqUlFGsTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzdCRjgxQ0I0
Q0ZEMjExRUU5MjAxQTM2M0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMFoGCCsGAQUFBwEHAQH/
BEswSTA2BAIAATAwAwQAZzbsAwQAZ0diAwQAZ6a0AwQBZ6eYAwQBZ69qAwQAZ7XC
AwQAZ+l4AwQAy06DMA8EAgACMAkDBwAgAQ32lYAwDQYJKoZIhvcNAQELBQADggEB
AFam7uTFYrtL7/YHOYC9L5ZKTkFA5Ha0GzNS3fSNSg/MkgCLuoYGldcBboYteURO
NT98jTO4CJ1CD7ZOVEtU/R8znCKihH+anzbJmUIRf9aelgTKroV0p4F1zlus8LBH
TggowgHEIlv3eVF3d6mKksD/7dYNdHJytQQ3roflSFOKdYnKqGkUpIEowNloSTzT
9P/tZBADTSSnCrbiJUmBTVfQadSVSn/Oz9AdSZsymNk6GwRuvBcuJ+VupmqINSv0
P8WOlmKBQ/s2E1LKAROZl7kHYjdVNeJjGZ+iUpLAf3BjzpeBTV6ejqH49pumCM9q
EU6MfFyBAqyMuyMjnDwX50Q=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:04:10 2025 by rpki-client