Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9327B3A65F8111EFBD452C1FC4F9AE02.roa
File: 9327B3A65F8111EFBD452C1FC4F9AE02.roa (raw, json)
Hash identifier: nx4lBg3nyRNCjw/+8OmsjBSegXVvyBhTtUVeiOPj5ss=
Subject key identifier: 03:F1:BD:CB:6A:B9:DF:2F:DC:13:A7:7D:AF:06:6B:9F:69:2B:87:63
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 993E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9327B3A65F8111EFBD452C1FC4F9AE02.roa
Signing time: Wed 18 Sep 2024 10:55:34 +0000
ROA not before: Wed 18 Sep 2024 10:55:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133594
IP address blocks: 14.102.0.0/22 maxlen: 24
14.102.3.0/24 maxlen: 24
14.102.12.0/22 maxlen: 24
14.102.12.0/24 maxlen: 24
14.102.20.0/22 maxlen: 24
14.102.24.0/22 maxlen: 24
14.102.28.0/22 maxlen: 24
14.102.32.0/22 maxlen: 24
14.102.36.0/22 maxlen: 24
14.102.40.0/22 maxlen: 24
14.102.43.0/24 maxlen: 24
14.102.44.0/22 maxlen: 24
14.102.48.0/22 maxlen: 24
14.102.56.0/22 maxlen: 24
14.102.57.0/24 maxlen: 24
14.102.64.0/22 maxlen: 24
14.102.66.0/24 maxlen: 24
14.102.68.0/22 maxlen: 24
14.102.72.0/22 maxlen: 24
14.102.76.0/23 maxlen: 24
14.102.78.0/24 maxlen: 24
14.102.80.0/22 maxlen: 24
14.102.88.0/24 maxlen: 24
14.102.92.0/22 maxlen: 24
14.102.96.0/22 maxlen: 24
14.102.100.0/22 maxlen: 24
14.102.104.0/22 maxlen: 24
14.102.108.0/22 maxlen: 24
14.102.112.0/22 maxlen: 24
14.102.116.0/22 maxlen: 24
14.102.120.0/22 maxlen: 24
14.102.123.0/24 maxlen: 24
14.102.124.0/22 maxlen: 24
110.172.136.0/24 maxlen: 24
110.172.150.0/24 maxlen: 24
110.172.168.0/24 maxlen: 24
111.235.64.0/22 maxlen: 24
118.91.176.0/24 maxlen: 24
202.89.70.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39230 (0x993e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Sep 18 10:55:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66eab1a5-4225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3a:b0:d6:09:eb:f5:e0:a6:82:88:7a:f2:f6:
a6:d2:b9:ed:af:a6:18:b1:88:3d:e0:ee:4c:7e:c1:
f7:ab:4c:f8:46:18:49:6b:4c:9a:2d:82:ab:9f:8d:
7c:20:4b:66:2e:7e:7d:20:b9:65:52:92:1c:69:3a:
95:91:24:a9:a5:b2:6f:54:ff:6c:cf:55:92:64:b7:
21:d8:d0:4a:28:ac:15:eb:7a:9e:9d:41:6b:b1:b4:
88:b2:3f:72:8c:df:51:2c:78:d5:e5:40:87:a0:21:
9d:e9:e7:42:95:4e:dc:08:c4:35:c8:58:02:e6:6a:
a3:3a:22:0d:ff:25:89:4f:29:17:4a:c9:b5:aa:68:
a3:61:01:7a:f2:c9:9e:cb:33:39:76:7e:46:fc:ff:
fe:d9:e5:35:c5:42:f7:77:60:a8:40:30:86:24:f5:
8b:59:19:0b:ce:ae:13:68:0a:81:6f:f1:25:67:c7:
03:3d:06:08:50:a9:fa:45:15:18:7b:01:01:99:96:
de:a5:5a:0f:af:ec:62:b9:b5:14:1a:20:d9:6a:94:
68:49:b8:8f:c7:f5:fd:95:35:3c:f7:9f:dd:7b:04:
c4:8b:e9:2b:cf:25:9a:f6:08:09:1b:1c:2d:39:dc:
4b:85:97:67:32:27:04:33:6c:25:a9:f4:54:16:67:
95:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F1:BD:CB:6A:B9:DF:2F:DC:13:A7:7D:AF:06:6B:9F:69:2B:87:63
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9327B3A65F8111EFBD452C1FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.102.0.0/22
14.102.12.0/22
14.102.20.0-14.102.51.255
14.102.56.0/22
14.102.64.0-14.102.78.255
14.102.80.0/22
14.102.88.0/24
14.102.92.0-14.102.127.255
110.172.136.0/24
110.172.150.0/24
110.172.168.0/24
111.235.64.0/22
118.91.176.0/24
202.89.70.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:b3:cf:d5:e1:e4:5b:dc:ad:6b:3f:68:2f:de:7d:bb:34:4e:
64:97:de:23:e3:ba:c8:2c:de:b2:b6:3d:70:d7:f3:07:42:4f:
7a:76:e4:08:98:b6:1d:79:49:f0:2f:24:35:5e:76:e8:14:4d:
05:95:5a:ce:79:9d:59:60:0b:a5:04:cf:d5:07:46:d1:20:9c:
61:bc:21:59:6f:03:fe:74:aa:e7:cc:50:d8:e6:5c:e0:4e:1e:
53:41:23:b8:65:d1:ab:51:81:dd:44:b6:4a:55:9f:8d:83:60:
97:5f:d5:9a:66:7e:e8:12:62:26:05:c8:6c:84:02:ff:05:30:
fa:1c:7b:14:18:0c:e9:c4:68:01:96:22:c2:fb:99:2c:3c:1d:
7a:bb:82:17:89:5a:d9:81:d6:02:14:3f:ee:8f:3f:0f:38:b1:
b5:03:47:c3:2e:b5:ac:3e:44:97:1c:4b:55:4d:09:e3:03:bd:
7d:21:93:c7:61:27:3b:bf:d2:f3:c2:75:6d:17:50:ff:b2:f2:
b9:8c:38:96:18:fe:4e:8d:5f:74:66:f4:24:a1:d2:0e:3c:c3:
06:5b:38:20:2e:f9:e0:36:80:50:83:09:14:06:60:3b:e6:4a:
a3:01:2c:65:95:02:0d:42:91:32:58:1f:43:bd:be:02:53:3c:
3c:65:e6:58
-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgIDAJk+MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDkxODEwNTUzNFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjZlYWIxYTUtNDIyNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMI6sNYJ6/XgpoKIevL2ptK57a+mGLGIPeDuTH7B96tM+EYYSWtMmi2Cq5+N
fCBLZi5+fSC5ZVKSHGk6lZEkqaWyb1T/bM9VkmS3IdjQSiisFet6np1Ba7G0iLI/
cozfUSx41eVAh6AhnennQpVO3AjENchYAuZqozoiDf8liU8pF0rJtapoo2EBevLJ
nsszOXZ+Rvz//tnlNcVC93dgqEAwhiT1i1kZC86uE2gKgW/xJWfHAz0GCFCp+kUV
GHsBAZmW3qVaD6/sYrm1FBog2WqUaEm4j8f1/ZU1PPef3XsExIvpK88lmvYICRsc
LTncS4WXZzInBDNsJan0VBZnlakCAwEAAaOCAvwwggL4MB0GA1UdDgQWBBQD8b3L
arnfL9wTp32vBmufaSuHYzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzkzMjdCM0E2
NUY4MTExRUZCRDQ1MkMxRkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGFBggrBgEFBQcBBwEB
/wR2MHQwcgQCAAEwbAMEAg5mAAMEAg5mDDAMAwQCDmYUAwQCDmYwAwQCDmY4MAwD
BAYOZkADBAAOZk4DBAIOZlADBAAOZlgwDAMEAg5mXAMEBw5mAAMEAG6siAMEAG6s
lgMEAG6sqAMEAm/rQAMEAHZbsAMEAMpZRjANBgkqhkiG9w0BAQsFAAOCAQEAoLPP
1eHkW9ytaz9oL959uzROZJfeI+O6yCzesrY9cNfzB0JPenbkCJi2HXlJ8C8kNV52
6BRNBZVaznmdWWALpQTP1QdG0SCcYbwhWW8D/nSq58xQ2OZc4E4eU0EjuGXRq1GB
3US2SlWfjYNgl1/VmmZ+6BJiJgXIbIQC/wUw+hx7FBgM6cRoAZYiwvuZLDwderuC
F4la2YHWAhQ/7o8/DzixtQNHwy61rD5ElxxLVU0J4wO9fSGTx2EnO7/S88J1bRdQ
/7LyuYw4lhj+To1fdGb0JKHSDjzDBls4IC754DaAUIMJFAZgO+ZKowEsZZUCDUKR
MlgfQ72+AlM8PGXmWA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:17:48 2025 by rpki-client