Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8281B426913A11EFA48AB64CC4F9AE02.roa
File: 8281B426913A11EFA48AB64CC4F9AE02.roa (raw, json)
Hash identifier: 130wX65HmVvWhe+JceANCt3wVkc8pPZG9a22RazC1mM=
Subject key identifier: B9:DA:0E:B9:56:B5:02:35:BB:21:8E:B0:A2:DF:48:53:CA:4A:DE:36
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9E04
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8281B426913A11EFA48AB64CC4F9AE02.roa
Signing time: Thu 28 Nov 2024 05:13:42 +0000
ROA not before: Thu 28 Nov 2024 05:13:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58678
IP address blocks: 43.241.28.0/22 maxlen: 24
43.241.128.0/22 maxlen: 24
43.241.132.0/22 maxlen: 24
43.242.208.0/24 maxlen: 24
43.242.209.0/24 maxlen: 24
43.242.210.0/24 maxlen: 24
43.242.211.0/24 maxlen: 24
43.242.224.0/22 maxlen: 24
43.242.228.0/22 maxlen: 24
45.64.84.0/22 maxlen: 24
45.114.192.0/22 maxlen: 24
45.117.0.0/22 maxlen: 24
45.127.120.0/22 maxlen: 24
45.250.248.0/24 maxlen: 24
45.250.249.0/24 maxlen: 24
45.250.250.0/24 maxlen: 24
103.14.232.0/22 maxlen: 24
103.17.12.0/23 maxlen: 24
103.26.52.0/22 maxlen: 22
103.26.52.0/24 maxlen: 24
103.26.53.0/24 maxlen: 24
103.26.54.0/24 maxlen: 24
103.26.55.0/24 maxlen: 24
103.26.56.0/22 maxlen: 24
103.42.160.0/22 maxlen: 24
103.48.56.0/23 maxlen: 24
103.48.58.0/24 maxlen: 24
103.48.59.0/24 maxlen: 24
103.48.100.0/22 maxlen: 24
103.57.96.0/23 maxlen: 24
103.59.212.0/22 maxlen: 24
103.66.80.0/22 maxlen: 22
103.66.80.0/24 maxlen: 24
103.66.81.0/24 maxlen: 24
103.66.82.0/24 maxlen: 24
103.66.83.0/24 maxlen: 24
103.69.238.0/24 maxlen: 24
103.74.236.0/22 maxlen: 24
103.77.152.0/22 maxlen: 23
103.77.152.0/23 maxlen: 24
103.77.154.0/24 maxlen: 24
103.89.40.0/22 maxlen: 24
103.111.132.0/22 maxlen: 24
103.112.32.0/24 maxlen: 24
103.112.33.0/24 maxlen: 24
103.112.34.0/24 maxlen: 24
103.112.35.0/24 maxlen: 24
103.117.184.0/24 maxlen: 24
103.117.187.0/24 maxlen: 24
103.132.228.0/23 maxlen: 24
103.137.152.0/22 maxlen: 24
103.148.207.0/24 maxlen: 24
103.153.151.0/24 maxlen: 24
103.155.170.0/24 maxlen: 24
103.162.190.0/23 maxlen: 24
103.163.188.0/24 maxlen: 24
103.163.189.0/24 maxlen: 24
103.166.112.0/23 maxlen: 24
103.168.62.0/24 maxlen: 24
103.168.63.0/24 maxlen: 24
103.173.208.0/23 maxlen: 24
103.174.30.0/24 maxlen: 24
103.174.38.0/24 maxlen: 24
103.178.212.0/23 maxlen: 24
103.181.209.0/24 maxlen: 24
103.185.11.0/24 maxlen: 24
103.204.119.0/24 maxlen: 24
103.209.18.0/24 maxlen: 24
103.209.19.0/24 maxlen: 24
103.215.114.0/23 maxlen: 24
103.216.144.0/22 maxlen: 24
103.218.100.0/22 maxlen: 24
103.219.164.0/24 maxlen: 24
103.219.165.0/24 maxlen: 24
103.219.166.0/24 maxlen: 24
103.219.167.0/24 maxlen: 24
103.220.80.0/22 maxlen: 24
103.220.212.0/22 maxlen: 24
103.226.0.0/22 maxlen: 24
103.226.4.0/22 maxlen: 24
103.226.28.0/22 maxlen: 24
103.232.24.0/22 maxlen: 24
124.108.16.0/22 maxlen: 24
2001:df6:f180::/48 maxlen: 48
2404:bd00::/48 maxlen: 48
2404:bd00:1::/48 maxlen: 48
2404:bd00:2::/48 maxlen: 48
2404:bd00:3::/48 maxlen: 48
2404:bd00:4::/48 maxlen: 48
2404:bd00:5::/48 maxlen: 48
2404:bd00:6::/48 maxlen: 48
2404:bd00:7::/48 maxlen: 48
2404:bd00:8::/48 maxlen: 48
2404:bd00:a::/48 maxlen: 48
2404:bd00:b::/48 maxlen: 48
2404:bd00:c::/48 maxlen: 48
2404:bd00:d::/48 maxlen: 48
2404:bd00:e::/48 maxlen: 48
2404:bd00:f::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40452 (0x9e04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Nov 28 05:13:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6747fc06-52f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1c:55:e3:22:d8:6c:e0:0b:02:5b:cb:c8:56:
73:00:2c:92:0e:fd:0f:fd:ac:b0:45:5a:db:5b:f0:
f9:65:26:07:bd:c9:ce:71:15:fb:7b:1d:62:1f:00:
73:2b:c5:20:cd:c2:d2:71:08:ab:9a:c1:8d:0c:6f:
1e:d8:fc:e8:9a:c9:fd:72:3a:e4:63:d0:ef:c5:dd:
2a:71:b0:df:36:f0:e4:8e:b8:26:78:08:2b:9a:47:
b6:61:53:74:c1:0f:ee:0f:4c:e3:e5:7a:ce:2d:dc:
15:10:73:76:72:0c:cd:2f:14:a8:5c:ff:1a:ad:92:
ec:bb:4a:7e:b2:f8:61:bd:c6:21:71:20:0c:f1:ee:
fe:bd:f8:c6:bb:b6:5d:65:53:1a:00:7a:09:af:9e:
24:6b:2a:2a:80:a7:a8:75:7b:dd:ed:26:f8:15:e1:
53:cb:82:20:e6:31:c1:12:d1:d9:6d:ce:a3:42:66:
7e:cb:05:3e:2f:45:12:d2:47:4f:eb:a4:9b:fd:8f:
ff:fd:23:3f:7c:25:91:5b:6b:9c:32:ee:68:46:56:
ba:bd:76:3c:ba:e4:5d:56:41:9f:5e:e2:12:23:70:
27:a2:61:db:3b:eb:01:ae:cc:d9:2d:1e:c1:42:3c:
0f:11:af:3a:4a:af:ba:23:1f:3a:53:d0:c5:00:7b:
1b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:DA:0E:B9:56:B5:02:35:BB:21:8E:B0:A2:DF:48:53:CA:4A:DE:36
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8281B426913A11EFA48AB64CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.241.28.0/22
43.241.128.0/21
43.242.208.0/22
43.242.224.0/21
45.64.84.0/22
45.114.192.0/22
45.117.0.0/22
45.127.120.0/22
45.250.248.0-45.250.250.255
103.14.232.0/22
103.17.12.0/23
103.26.52.0-103.26.59.255
103.42.160.0/22
103.48.56.0/22
103.48.100.0/22
103.57.96.0/23
103.59.212.0/22
103.66.80.0/22
103.69.238.0/24
103.74.236.0/22
103.77.152.0/22
103.89.40.0/22
103.111.132.0/22
103.112.32.0/22
103.117.184.0/24
103.117.187.0/24
103.132.228.0/23
103.137.152.0/22
103.148.207.0/24
103.153.151.0/24
103.155.170.0/24
103.162.190.0/23
103.163.188.0/23
103.166.112.0/23
103.168.62.0/23
103.173.208.0/23
103.174.30.0/24
103.174.38.0/24
103.178.212.0/23
103.181.209.0/24
103.185.11.0/24
103.204.119.0/24
103.209.18.0/23
103.215.114.0/23
103.216.144.0/22
103.218.100.0/22
103.219.164.0/22
103.220.80.0/22
103.220.212.0/22
103.226.0.0/21
103.226.28.0/22
103.232.24.0/22
124.108.16.0/22
IPv6:
2001:df6:f180::/48
2404:bd00::-2404:bd00:8:ffff:ffff:ffff:ffff:ffff
2404:bd00:a::-2404:bd00:f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a4:95:f0:23:81:aa:d4:31:b3:58:8d:68:16:bf:f4:7f:9b:e7:
ba:8f:1b:9c:80:29:51:7c:0b:40:3f:60:54:3e:d3:3b:1e:e8:
0a:8d:69:b3:8a:93:89:33:e8:79:06:66:09:d4:86:5f:ad:e4:
a2:01:d2:58:e3:42:01:fe:d4:64:b4:14:df:79:2d:0a:b6:c5:
6d:48:43:a0:f4:39:64:32:a8:a7:1b:fd:5f:9d:e4:9f:38:10:
12:b4:41:68:9e:84:72:b8:b9:f4:11:11:a9:22:e9:6b:5e:64:
52:5d:eb:50:28:dd:4c:37:4c:46:ff:fd:f5:2b:58:90:86:27:
e0:75:71:26:83:26:0c:94:33:51:b7:9b:31:af:da:b4:e3:8e:
aa:97:8b:09:10:9e:72:10:d1:7f:e6:5f:c1:5d:9d:1d:0b:6b:
eb:22:9f:57:53:14:41:e9:2c:15:f0:ad:e4:f0:09:c7:7e:cb:
fb:2c:c7:a3:0e:2c:de:5c:74:02:03:75:e8:8e:d3:90:7c:f0:
e5:c5:dd:9d:1d:8f:60:49:17:d2:4e:4d:cd:42:87:c2:c4:68:
67:ac:95:86:86:d4:ee:4d:75:2c:27:ff:0c:ac:bb:a0:9b:fd:
0f:7f:86:ac:bc:6a:99:30:88:81:4d:13:b0:8f:15:15:91:0b:
67:96:9c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:13:29 2025 by rpki-client