Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B917F7C227D911EF8FC0457FC4F9AE02.roa
File: B917F7C227D911EF8FC0457FC4F9AE02.roa (raw, json)
Hash identifier: ynh7rnRfhabADEtvhvNtuo4Maa98d72NvG9FfngNxCA=
Subject key identifier: A1:02:CE:D9:EC:25:5D:A2:EF:76:49:13:4A:6C:70:E9:8F:39:2E:86
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9233
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B917F7C227D911EF8FC0457FC4F9AE02.roa
Signing time: Tue 11 Jun 2024 10:02:34 +0000
ROA not before: Tue 11 Jun 2024 10:02:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138296
IP address blocks: 103.2.190.0/23 maxlen: 24
103.31.140.0/23 maxlen: 24
103.31.142.0/23 maxlen: 24
103.31.220.0/23 maxlen: 24
103.41.32.0/22 maxlen: 24
103.93.192.0/22 maxlen: 24
103.111.69.0/24 maxlen: 24
103.111.70.0/24 maxlen: 24
103.111.71.0/24 maxlen: 24
103.115.154.0/23 maxlen: 24
103.119.82.0/23 maxlen: 24
103.119.172.0/23 maxlen: 24
103.123.154.0/23 maxlen: 24
103.123.224.0/24 maxlen: 24
103.123.225.0/24 maxlen: 24
103.123.226.0/24 maxlen: 24
103.123.227.0/24 maxlen: 24
103.124.22.0/23 maxlen: 24
103.124.122.0/23 maxlen: 24
103.127.116.0/23 maxlen: 24
103.127.252.0/24 maxlen: 24
103.132.100.0/23 maxlen: 24
103.134.4.0/22 maxlen: 24
103.143.8.0/24 maxlen: 24
103.143.9.0/24 maxlen: 24
103.157.178.0/23 maxlen: 24
103.157.222.0/23 maxlen: 24
103.158.48.0/23 maxlen: 24
103.163.190.0/23 maxlen: 24
103.167.176.0/23 maxlen: 24
103.171.210.0/23 maxlen: 24
103.172.86.0/23 maxlen: 24
103.172.156.0/23 maxlen: 24
103.173.120.0/23 maxlen: 24
103.173.205.0/24 maxlen: 24
103.173.244.0/24 maxlen: 24
103.173.245.0/24 maxlen: 24
103.174.244.0/23 maxlen: 24
103.175.60.0/23 maxlen: 24
103.179.46.0/23 maxlen: 24
103.179.232.0/23 maxlen: 24
103.179.236.0/23 maxlen: 24
103.181.54.0/23 maxlen: 24
103.195.80.0/23 maxlen: 24
103.204.132.0/22 maxlen: 24
103.206.26.0/23 maxlen: 24
103.207.90.0/23 maxlen: 24
103.208.90.0/23 maxlen: 24
103.209.72.0/23 maxlen: 24
103.212.172.0/23 maxlen: 24
103.215.184.0/23 maxlen: 24
103.217.138.0/23 maxlen: 24
103.218.106.0/23 maxlen: 24
103.218.180.0/23 maxlen: 24
103.218.184.0/23 maxlen: 24
103.218.186.0/23 maxlen: 24
103.220.232.0/23 maxlen: 24
103.225.30.0/23 maxlen: 24
103.225.116.0/23 maxlen: 24
103.227.104.0/23 maxlen: 24
103.228.72.0/23 maxlen: 24
103.229.90.0/23 maxlen: 24
103.244.24.0/23 maxlen: 24
103.244.94.0/23 maxlen: 24
110.44.10.0/24 maxlen: 24
110.44.11.0/24 maxlen: 24
2001:df2:380::/48 maxlen: 48
2400:4fe0::/32 maxlen: 32
2404:58c0::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37427 (0x9233)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jun 11 10:02:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=666820ba-58b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a6:8d:5e:6f:da:03:26:ee:c4:53:2d:4b:c5:
b6:9a:f4:2a:10:6d:47:a7:d6:59:1e:e5:a1:8d:c8:
65:59:b0:e4:58:50:ee:ac:17:32:da:96:c2:7b:79:
36:ed:16:01:c6:f0:e5:0e:50:69:c9:a7:5f:dc:57:
0b:4e:cf:1e:d3:cb:9b:a8:25:83:f9:a3:d3:d0:dc:
18:81:b6:9d:22:9d:18:49:c4:ac:69:9c:1c:bd:65:
ff:73:d4:a8:77:9a:ff:2b:cd:e6:d2:3f:bc:bb:9f:
28:de:cb:34:9e:a8:bb:31:c4:c3:c9:fd:34:06:f0:
36:fc:b2:df:10:64:c6:52:cd:bc:96:bc:9b:b2:cf:
fd:75:5f:e0:eb:dc:c7:3f:29:ed:88:f1:38:6e:d9:
9a:5c:58:b9:5d:15:04:55:0f:f6:bb:89:49:f1:12:
16:f1:b4:de:55:66:1a:c7:fd:6f:b8:44:ec:63:fa:
c5:62:ad:06:16:a9:bb:6d:73:9f:4f:38:cf:bc:04:
9c:97:eb:d0:6f:75:f5:a3:8d:ac:b6:bd:e4:ef:bf:
9a:2d:72:5f:5f:7a:c3:a4:fd:f4:90:7d:4a:44:db:
06:0f:d5:9f:65:e7:58:16:d0:27:6c:2c:4b:95:73:
41:8a:db:31:ff:6e:ba:ba:2d:b6:37:ce:02:0b:21:
c9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:02:CE:D9:EC:25:5D:A2:EF:76:49:13:4A:6C:70:E9:8F:39:2E:86
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B917F7C227D911EF8FC0457FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.2.190.0/23
103.31.140.0/22
103.31.220.0/23
103.41.32.0/22
103.93.192.0/22
103.111.69.0-103.111.71.255
103.115.154.0/23
103.119.82.0/23
103.119.172.0/23
103.123.154.0/23
103.123.224.0/22
103.124.22.0/23
103.124.122.0/23
103.127.116.0/23
103.127.252.0/24
103.132.100.0/23
103.134.4.0/22
103.143.8.0/23
103.157.178.0/23
103.157.222.0/23
103.158.48.0/23
103.163.190.0/23
103.167.176.0/23
103.171.210.0/23
103.172.86.0/23
103.172.156.0/23
103.173.120.0/23
103.173.205.0/24
103.173.244.0/23
103.174.244.0/23
103.175.60.0/23
103.179.46.0/23
103.179.232.0/23
103.179.236.0/23
103.181.54.0/23
103.195.80.0/23
103.204.132.0/22
103.206.26.0/23
103.207.90.0/23
103.208.90.0/23
103.209.72.0/23
103.212.172.0/23
103.215.184.0/23
103.217.138.0/23
103.218.106.0/23
103.218.180.0/23
103.218.184.0/22
103.220.232.0/23
103.225.30.0/23
103.225.116.0/23
103.227.104.0/23
103.228.72.0/23
103.229.90.0/23
103.244.24.0/23
103.244.94.0/23
110.44.10.0/23
IPv6:
2001:df2:380::/48
2400:4fe0::/32
2404:58c0::/48
Signature Algorithm: sha256WithRSAEncryption
5f:b7:bc:f5:be:27:2a:be:05:e2:e1:0b:c8:49:ff:b5:34:52:
c1:96:08:5a:02:b7:e9:e7:d4:f6:5d:92:09:c2:09:cf:e0:ac:
0e:d3:27:9d:f4:70:18:9d:a3:e7:6c:d6:e1:76:2b:b6:4a:19:
3f:f5:6c:d9:cb:dc:7d:f5:ab:7d:aa:1c:f8:99:9d:b4:80:69:
7a:82:90:b4:a4:7e:7f:81:76:5c:33:fe:82:c5:d8:ba:ce:be:
5b:e8:7c:7a:c1:f1:04:20:31:4b:00:87:f0:04:0f:9f:79:e0:
d9:32:9a:ef:88:2c:fd:00:ed:0a:de:d5:6d:f4:d7:e1:04:09:
90:cc:1e:f0:3a:25:05:e0:c4:38:78:3c:b6:76:97:cf:aa:23:
f1:13:c4:7e:cf:77:a1:c0:56:4d:e6:67:f6:59:88:b4:81:70:
26:c7:ae:00:4b:26:97:f3:c1:02:32:2a:d1:73:48:98:e7:bb:
83:7d:e3:75:d5:f2:5a:8b:2e:d4:fd:62:d1:f7:d4:30:00:91:
25:d5:3d:42:bd:0d:7c:26:5e:5c:ea:52:80:91:b9:b2:fe:7a:
0f:38:51:6b:58:af:d1:2e:38:5a:7c:36:32:44:fd:05:c6:01:
42:d6:87:32:55:6c:c4:17:8a:98:3f:ca:56:97:cc:7a:21:22:
43:aa:91:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:01:47 2025 by rpki-client