Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/810809ECF06511EC9445D064C4F9AE02.roa
File: 810809ECF06511EC9445D064C4F9AE02.roa (raw, json)
Hash identifier: taB1J/Yikp52eTmj76DObbxr4xJ4rqqDE9ObGVlwkDk=
Subject key identifier: 1E:55:51:CD:EA:CA:E5:AC:A6:D6:E4:58:96:21:6C:0F:4D:5C:CF:4F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 57C1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/810809ECF06511EC9445D064C4F9AE02.roa
Signing time: Tue 21 Jun 2022 10:51:44 +0000
ROA not before: Tue 21 Jun 2022 10:51:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140125
IP address blocks: 103.82.48.0/22 maxlen: 24
103.114.64.0/22 maxlen: 24
103.163.14.0/23 maxlen: 24
103.167.212.0/23 maxlen: 24
103.167.224.0/23 maxlen: 24
103.168.0.0/23 maxlen: 24
103.168.32.0/23 maxlen: 24
103.168.60.0/23 maxlen: 24
103.170.36.0/23 maxlen: 24
103.170.38.0/23 maxlen: 24
103.170.148.0/23 maxlen: 24
103.171.108.0/23 maxlen: 24
103.171.110.0/23 maxlen: 24
103.171.174.0/23 maxlen: 24
103.173.14.0/23 maxlen: 24
103.173.98.0/23 maxlen: 24
103.177.226.0/23 maxlen: 24
103.178.166.0/23 maxlen: 24
103.178.202.0/23 maxlen: 24
103.179.94.0/23 maxlen: 24
103.179.96.0/23 maxlen: 24
103.179.100.0/23 maxlen: 24
103.179.118.0/23 maxlen: 24
103.179.120.0/23 maxlen: 24
103.179.224.0/23 maxlen: 24
103.179.226.0/23 maxlen: 24
103.180.110.0/23 maxlen: 24
103.180.168.0/23 maxlen: 24
103.180.172.0/23 maxlen: 24
103.180.174.0/23 maxlen: 24
103.180.212.0/23 maxlen: 24
103.180.214.0/23 maxlen: 24
103.180.236.0/23 maxlen: 24
103.180.238.0/23 maxlen: 24
103.181.4.0/23 maxlen: 24
103.181.64.0/23 maxlen: 24
103.181.84.0/23 maxlen: 24
103.181.86.0/23 maxlen: 24
103.181.110.0/23 maxlen: 24
103.181.114.0/23 maxlen: 24
103.181.150.0/23 maxlen: 24
103.181.152.0/23 maxlen: 24
103.181.154.0/23 maxlen: 24
103.181.174.0/23 maxlen: 24
103.181.198.0/23 maxlen: 24
103.182.58.0/23 maxlen: 24
103.183.216.0/23 maxlen: 24
103.187.92.0/23 maxlen: 24
103.194.118.0/24 maxlen: 24
103.212.134.0/24 maxlen: 24
103.229.208.0/22 maxlen: 24
103.252.40.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22465 (0x57c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jun 21 10:51:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62b1a2c0-f5d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5e:e1:50:32:5d:14:7d:ad:96:85:f7:56:53:
13:f7:8e:58:a0:c4:7e:d9:55:5d:ce:86:9b:26:6e:
7a:b1:95:65:27:04:97:7c:83:99:36:40:4d:f3:a3:
5b:f0:6f:bc:b4:7f:5b:9a:a1:55:58:0a:12:d1:6a:
1a:3f:0e:9d:6b:c6:75:cc:ee:b9:27:e7:83:40:42:
52:c9:9a:23:9a:62:4e:95:d6:2e:71:93:b1:e0:18:
24:07:0e:3e:01:50:80:1e:cc:31:fe:72:47:13:2a:
84:c8:ae:3e:65:ce:cd:8e:7c:8c:bd:3d:18:f0:da:
32:e6:24:af:32:05:8c:71:b8:e3:fd:7e:4d:0b:80:
0c:dc:70:5f:49:45:50:e0:53:51:7d:00:d8:96:a4:
42:fa:ef:13:40:8f:21:e9:f3:c6:a1:e9:01:a0:7f:
30:41:c2:f0:07:8b:74:cd:b5:0c:03:74:7a:4e:2b:
9f:1f:40:c4:af:20:f1:47:e1:6a:a4:2e:dc:60:b2:
ca:fa:3b:77:b5:b5:89:3a:83:54:66:d2:60:e1:01:
be:f7:32:d7:ee:40:0f:1f:db:78:be:47:e6:02:bf:
0f:18:fb:de:b6:23:1f:0e:b8:b1:ac:97:ca:a3:e0:
d9:87:39:49:74:f4:9c:81:3b:63:83:45:4d:39:6c:
fb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:55:51:CD:EA:CA:E5:AC:A6:D6:E4:58:96:21:6C:0F:4D:5C:CF:4F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/810809ECF06511EC9445D064C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.82.48.0/22
103.114.64.0/22
103.163.14.0/23
103.167.212.0/23
103.167.224.0/23
103.168.0.0/23
103.168.32.0/23
103.168.60.0/23
103.170.36.0/22
103.170.148.0/23
103.171.108.0/22
103.171.174.0/23
103.173.14.0/23
103.173.98.0/23
103.177.226.0/23
103.178.166.0/23
103.178.202.0/23
103.179.94.0-103.179.97.255
103.179.100.0/23
103.179.118.0-103.179.121.255
103.179.224.0/22
103.180.110.0/23
103.180.168.0/23
103.180.172.0/22
103.180.212.0/22
103.180.236.0/22
103.181.4.0/23
103.181.64.0/23
103.181.84.0/22
103.181.110.0/23
103.181.114.0/23
103.181.150.0-103.181.155.255
103.181.174.0/23
103.181.198.0/23
103.182.58.0/23
103.183.216.0/23
103.187.92.0/23
103.194.118.0/24
103.212.134.0/24
103.229.208.0/22
103.252.40.0/22
Signature Algorithm: sha256WithRSAEncryption
43:3d:b1:7b:b1:de:b1:ec:db:da:eb:14:72:6d:1c:58:f4:63:
a8:6a:98:05:b8:f6:c5:05:ee:35:cb:8c:55:d0:fe:12:9f:ac:
39:5c:d1:ff:6f:f4:ad:ff:87:38:0b:f9:be:82:bb:f1:be:4a:
8b:83:78:bd:f9:d9:b3:d0:22:29:92:0d:84:87:36:17:61:b3:
67:b3:b8:73:b9:08:62:33:d4:95:01:30:ef:09:a8:e5:ac:7b:
78:fe:80:2e:60:53:35:ef:1f:00:15:24:88:b4:a1:c4:4c:b2:
af:e6:dd:78:e1:3c:bd:ad:d5:95:8f:70:41:4b:dd:24:fa:e9:
39:41:94:dc:33:cd:d0:a5:cb:fa:26:66:b7:06:1c:bb:50:a7:
a5:a1:ef:fd:f3:c8:c1:5f:a0:70:2e:0b:9a:ee:b3:37:db:77:
8e:05:c0:7d:4a:53:75:16:6d:84:e7:31:ef:77:f8:cd:3d:6e:
df:e7:d4:78:b6:a8:17:7f:be:c4:62:3a:65:4f:5d:c1:ef:09:
73:2f:f2:84:da:4f:c4:ba:40:f1:22:d7:33:bb:ca:74:89:e4:
76:18:79:69:70:19:db:2a:0a:26:7d:aa:21:4d:a6:88:aa:05:
5b:56:e4:50:b2:7e:b7:9e:9f:2d:39:44:c0:c5:46:2b:e7:41:
6f:46:3f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:00:47 2025 by rpki-client