Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8A4C2FC8B38C11EF95456831C4F9AE02.roa
File: 8A4C2FC8B38C11EF95456831C4F9AE02.roa (raw, json)
Hash identifier: 9f1fwMn20uQdlyq3L+y9aAbXELUw8XdPF5Vnd6X35FY=
Subject key identifier: 85:13:9C:55:EA:54:24:B0:26:6F:31:CA:32:CB:37:51:26:BC:91:EE
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9EA5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8A4C2FC8B38C11EF95456831C4F9AE02.roa
Signing time: Fri 06 Dec 2024 04:42:47 +0000
ROA not before: Fri 06 Dec 2024 04:42:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 18002
IP address blocks: 14.102.0.0/22 maxlen: 24
14.102.0.0/24 maxlen: 24
14.102.1.0/24 maxlen: 24
14.102.2.0/24 maxlen: 24
14.102.3.0/24 maxlen: 24
14.102.22.0/23 maxlen: 24
14.102.22.0/24 maxlen: 24
14.102.23.0/24 maxlen: 24
14.102.24.0/22 maxlen: 24
14.102.24.0/24 maxlen: 24
14.102.25.0/24 maxlen: 24
14.102.26.0/24 maxlen: 24
14.102.27.0/24 maxlen: 24
14.102.28.0/22 maxlen: 24
14.102.28.0/24 maxlen: 24
14.102.29.0/24 maxlen: 24
14.102.30.0/24 maxlen: 24
14.102.31.0/24 maxlen: 24
14.102.32.0/22 maxlen: 24
14.102.32.0/24 maxlen: 24
14.102.33.0/24 maxlen: 24
14.102.34.0/24 maxlen: 24
14.102.35.0/24 maxlen: 24
14.102.36.0/23 maxlen: 24
14.102.36.0/24 maxlen: 24
14.102.37.0/24 maxlen: 24
14.102.38.0/24 maxlen: 24
14.102.40.0/22 maxlen: 24
14.102.40.0/24 maxlen: 24
14.102.41.0/24 maxlen: 24
14.102.42.0/24 maxlen: 24
14.102.43.0/24 maxlen: 24
14.102.44.0/24 maxlen: 24
14.102.45.0/24 maxlen: 24
14.102.48.0/24 maxlen: 24
14.102.50.0/24 maxlen: 24
14.102.56.0/23 maxlen: 24
14.102.56.0/24 maxlen: 24
14.102.57.0/24 maxlen: 24
14.102.59.0/24 maxlen: 24
14.102.64.0/22 maxlen: 24
14.102.64.0/24 maxlen: 24
14.102.65.0/24 maxlen: 24
14.102.66.0/24 maxlen: 24
14.102.67.0/24 maxlen: 24
14.102.68.0/22 maxlen: 24
14.102.68.0/24 maxlen: 24
14.102.69.0/24 maxlen: 24
14.102.70.0/24 maxlen: 24
14.102.71.0/24 maxlen: 24
14.102.72.0/22 maxlen: 24
14.102.72.0/24 maxlen: 24
14.102.73.0/24 maxlen: 24
14.102.74.0/24 maxlen: 24
14.102.75.0/24 maxlen: 24
14.102.76.0/23 maxlen: 24
14.102.78.0/24 maxlen: 24
14.102.80.0/22 maxlen: 24
14.102.80.0/24 maxlen: 24
14.102.81.0/24 maxlen: 24
14.102.82.0/24 maxlen: 24
14.102.83.0/24 maxlen: 24
14.102.88.0/24 maxlen: 24
14.102.91.0/24 maxlen: 24
14.102.92.0/22 maxlen: 24
14.102.92.0/24 maxlen: 24
14.102.93.0/24 maxlen: 24
14.102.95.0/24 maxlen: 24
14.102.96.0/23 maxlen: 24
14.102.96.0/24 maxlen: 24
14.102.97.0/24 maxlen: 24
14.102.100.0/23 maxlen: 24
14.102.103.0/24 maxlen: 24
14.102.104.0/22 maxlen: 24
14.102.104.0/24 maxlen: 24
14.102.105.0/24 maxlen: 24
14.102.106.0/23 maxlen: 24
14.102.108.0/22 maxlen: 24
14.102.108.0/24 maxlen: 24
14.102.109.0/24 maxlen: 24
14.102.110.0/24 maxlen: 24
14.102.111.0/24 maxlen: 24
14.102.112.0/22 maxlen: 24
14.102.112.0/24 maxlen: 24
14.102.113.0/24 maxlen: 24
14.102.114.0/24 maxlen: 24
14.102.115.0/24 maxlen: 24
14.102.116.0/22 maxlen: 24
14.102.116.0/24 maxlen: 24
14.102.117.0/24 maxlen: 24
14.102.118.0/24 maxlen: 24
14.102.119.0/24 maxlen: 24
14.102.120.0/22 maxlen: 24
14.102.120.0/24 maxlen: 24
14.102.121.0/24 maxlen: 24
14.102.122.0/24 maxlen: 24
14.102.123.0/24 maxlen: 24
14.102.125.0/24 maxlen: 24
14.102.126.0/23 maxlen: 24
14.102.126.0/24 maxlen: 24
14.102.127.0/24 maxlen: 24
43.245.136.0/22 maxlen: 24
43.251.212.0/22 maxlen: 24
61.14.228.0/23 maxlen: 24
61.14.231.0/24 maxlen: 24
103.5.200.0/22 maxlen: 24
103.59.189.0/24 maxlen: 24
103.87.100.0/22 maxlen: 24
103.122.84.0/24 maxlen: 24
103.158.131.0/24 maxlen: 24
103.160.24.0/24 maxlen: 24
103.175.72.0/24 maxlen: 24
103.175.73.0/24 maxlen: 24
103.176.8.0/23 maxlen: 24
110.172.130.0/23 maxlen: 24
110.172.132.0/24 maxlen: 24
110.172.134.0/23 maxlen: 24
110.172.136.0/24 maxlen: 24
110.172.138.0/23 maxlen: 24
110.172.140.0/24 maxlen: 24
110.172.145.0/24 maxlen: 24
110.172.147.0/24 maxlen: 24
110.172.150.0/24 maxlen: 24
110.172.151.0/24 maxlen: 24
110.172.152.0/22 maxlen: 24
110.172.156.0/22 maxlen: 24
110.172.160.0/22 maxlen: 24
110.172.164.0/24 maxlen: 24
110.172.166.0/23 maxlen: 24
110.172.168.0/24 maxlen: 24
110.172.170.0/23 maxlen: 24
110.172.174.0/23 maxlen: 24
110.172.177.0/24 maxlen: 24
110.172.178.0/23 maxlen: 24
110.172.184.0/22 maxlen: 24
111.235.64.0/22 maxlen: 24
114.69.228.0/22 maxlen: 24
114.69.232.0/24 maxlen: 24
114.69.234.0/24 maxlen: 24
114.69.235.0/24 maxlen: 24
114.69.240.0/24 maxlen: 24
114.69.242.0/23 maxlen: 24
114.69.248.0/23 maxlen: 24
114.69.252.0/22 maxlen: 24
118.91.176.0/23 maxlen: 24
118.91.178.0/24 maxlen: 24
118.91.189.0/24 maxlen: 24
118.91.191.0/24 maxlen: 24
150.107.192.0/22 maxlen: 24
202.89.64.0/24 maxlen: 24
202.89.65.0/24 maxlen: 24
202.89.66.0/24 maxlen: 24
202.89.67.0/24 maxlen: 24
202.89.68.0/24 maxlen: 24
202.89.69.0/24 maxlen: 24
202.89.70.0/24 maxlen: 24
202.89.71.0/24 maxlen: 24
202.89.72.0/24 maxlen: 24
202.89.74.0/24 maxlen: 24
202.89.76.0/24 maxlen: 24
202.89.77.0/24 maxlen: 24
202.89.78.0/24 maxlen: 24
202.89.79.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40613 (0x9ea5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Dec 6 04:42:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=675280c7-6074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:52:29:5a:54:b0:d4:02:68:50:f7:54:46:15:
56:f0:d7:cb:45:69:f5:18:df:06:f0:06:2b:c2:ae:
19:01:39:cb:1e:cf:6c:51:c6:21:26:d5:e7:8d:4d:
bd:b2:89:4b:99:44:6d:99:92:5a:78:63:ec:c2:06:
16:26:c4:11:ec:fe:37:c9:f6:10:37:50:2a:83:69:
ab:8c:36:56:dc:57:b0:8d:e5:e2:45:70:10:61:f8:
62:e5:eb:58:b3:78:57:92:22:c5:0d:c2:9c:ba:d7:
35:82:ed:ca:c2:ce:b0:6f:a5:72:a9:29:c6:45:aa:
6c:48:22:14:52:78:ef:c9:94:a4:04:0b:5c:e5:d0:
b9:81:64:f8:0c:7f:d4:d9:42:db:1e:fb:2d:8e:31:
7f:c5:91:a0:74:2e:44:ce:14:4d:35:08:1f:56:b1:
08:6e:c8:af:84:d9:0f:71:67:10:68:16:de:ab:10:
67:b5:94:fc:0d:52:72:bf:14:f0:f8:48:a1:d4:60:
a9:b9:00:85:8b:92:89:47:52:ca:27:f9:67:79:1c:
e9:f5:34:83:28:c4:c3:f1:3b:2f:c1:1f:11:5c:e8:
15:da:31:81:3f:57:4c:e6:af:cc:6c:49:80:83:ac:
f6:ae:64:95:55:98:eb:f2:f3:b5:1c:4a:f3:e2:f2:
82:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:13:9C:55:EA:54:24:B0:26:6F:31:CA:32:CB:37:51:26:BC:91:EE
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8A4C2FC8B38C11EF95456831C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.102.0.0/22
14.102.22.0-14.102.38.255
14.102.40.0-14.102.45.255
14.102.48.0/24
14.102.50.0/24
14.102.56.0/23
14.102.59.0/24
14.102.64.0-14.102.78.255
14.102.80.0/22
14.102.88.0/24
14.102.91.0-14.102.97.255
14.102.100.0/23
14.102.103.0-14.102.123.255
14.102.125.0-14.102.127.255
43.245.136.0/22
43.251.212.0/22
61.14.228.0/23
61.14.231.0/24
103.5.200.0/22
103.59.189.0/24
103.87.100.0/22
103.122.84.0/24
103.158.131.0/24
103.160.24.0/24
103.175.72.0/23
103.176.8.0/23
110.172.130.0-110.172.132.255
110.172.134.0-110.172.136.255
110.172.138.0-110.172.140.255
110.172.145.0/24
110.172.147.0/24
110.172.150.0-110.172.164.255
110.172.166.0-110.172.168.255
110.172.170.0/23
110.172.174.0/23
110.172.177.0-110.172.179.255
110.172.184.0/22
111.235.64.0/22
114.69.228.0-114.69.232.255
114.69.234.0/23
114.69.240.0/24
114.69.242.0/23
114.69.248.0/23
114.69.252.0/22
118.91.176.0-118.91.178.255
118.91.189.0/24
118.91.191.0/24
150.107.192.0/22
202.89.64.0-202.89.72.255
202.89.74.0/24
202.89.76.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:92:41:b0:25:44:8c:76:48:a3:da:80:c5:d7:40:d5:5c:64:
4c:d5:39:08:9c:2e:19:43:a8:85:bc:7c:3d:47:33:bb:4f:e9:
0f:5b:53:ea:d8:06:70:4d:3d:c0:a1:32:b2:8d:2b:e1:8a:84:
9f:76:66:dc:8c:26:5f:4a:97:4c:05:6f:c4:9b:d0:97:d2:91:
25:e3:36:2f:a7:ba:5f:9f:04:3a:cf:74:4c:fd:ef:56:71:a3:
aa:0b:3e:b6:37:50:60:19:c1:77:e3:46:4a:66:bf:f6:b4:19:
20:9b:92:f1:86:63:de:a3:49:cd:f9:67:4f:84:ea:3e:8e:83:
40:52:5f:ef:0e:e2:d9:33:df:a0:39:e2:95:9c:40:4e:ac:c4:
3a:e5:28:77:23:ff:a8:f1:5e:a4:1e:6f:b3:d7:de:08:4b:27:
0e:1d:39:cf:8e:50:71:38:9d:59:fe:fe:f2:6e:33:05:ae:b8:
bd:e7:90:38:58:ac:35:bf:97:04:c6:fc:d7:ec:ea:44:d9:e2:
d2:8a:b9:7d:fb:c6:e6:93:a3:4b:6a:db:96:a6:88:69:cd:aa:
ad:a1:9f:83:ff:bf:70:ea:70:d2:fc:82:ea:71:a7:0a:86:cd:
ba:54:cf:75:de:70:83:80:62:79:04:87:be:04:96:42:cd:3f:
cc:3e:a1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:51 2025 by rpki-client