Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BEA778205E9D11EF98F4E027C4F9AE02.roa
File: BEA778205E9D11EF98F4E027C4F9AE02.roa (raw, json)
Hash identifier: iMKZxaFENZTLwOIHx6HjRBmOEpqJy9tlp8UzVhB7tW8=
Subject key identifier: 57:86:B6:4B:86:C0:48:E4:AE:60:26:1E:A4:CB:29:75:D8:AA:ED:FF
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9712
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BEA778205E9D11EF98F4E027C4F9AE02.roa
Signing time: Tue 20 Aug 2024 02:41:47 +0000
ROA not before: Tue 20 Aug 2024 02:41:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.225.0.0/22 maxlen: 24
45.112.192.0/22 maxlen: 24
45.115.92.0/22 maxlen: 24
103.14.197.0/24 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.47.152.0/24 maxlen: 24
103.51.92.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.68.206.0/23 maxlen: 24
103.86.20.0/22 maxlen: 24
103.108.76.0/22 maxlen: 24
103.142.64.0/23 maxlen: 24
103.171.236.0/23 maxlen: 24
103.180.216.0/23 maxlen: 24
103.184.198.0/23 maxlen: 24
103.186.38.0/23 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
203.191.56.0/22 maxlen: 24
2400:d180:66::/48 maxlen: 48
2400:d180:67::/48 maxlen: 48
2400:d180:68::/48 maxlen: 48
2400:d180:69::/48 maxlen: 48
2400:d180:70::/48 maxlen: 48
2400:d180:71::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38674 (0x9712)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Aug 20 02:41:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66c4026b-ce79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:01:eb:98:ed:e0:a4:8b:5e:66:be:9d:ff:81:
39:8b:ed:d4:d4:e7:e3:13:85:9f:7f:f2:c5:65:dc:
75:e5:b6:35:53:c2:0f:ff:c9:80:5e:e6:4c:c1:5a:
f0:fa:20:ef:90:a8:d8:8a:9b:2b:64:d3:e7:a4:fc:
ea:50:f2:d8:4d:f8:fa:93:fd:f0:7d:24:37:a3:11:
aa:9c:4d:ab:6c:8d:55:d1:28:1a:da:33:0f:95:d2:
04:40:5b:2d:25:d2:9a:8e:b7:b4:6f:50:6b:60:df:
0c:b6:d1:f4:b0:bc:7d:86:5b:8e:25:69:03:bf:b4:
59:57:24:68:e5:c2:d4:87:14:1d:49:33:c8:41:dc:
e9:12:a9:30:ea:89:f6:c2:81:ec:05:cb:3f:f0:33:
4c:ec:d4:a3:e4:02:a5:f0:e2:f7:ac:6c:67:05:5b:
98:1c:0e:cf:5f:e1:c3:4b:0c:ee:5f:f0:b6:ce:b5:
02:f6:64:26:b8:82:66:b7:28:d9:81:e8:33:e7:ad:
ec:6b:06:f7:b2:e3:7e:d5:5d:f7:a6:0d:38:0a:cc:
30:90:1c:98:06:1f:2a:c1:57:41:e7:df:b6:6a:8c:
df:db:d9:09:e8:de:83:86:35:4f:f4:ca:1c:a1:a0:
c6:65:ff:e0:2e:f8:24:8e:8b:17:78:dd:41:e7:37:
db:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:86:B6:4B:86:C0:48:E4:AE:60:26:1E:A4:CB:29:75:D8:AA:ED:FF
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BEA778205E9D11EF98F4E027C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.0.0/22
45.112.192.0/22
45.115.92.0/22
103.14.197.0/24
103.27.168.0/24
103.27.170.0/23
103.47.152.0/24
103.51.92.0/22
103.52.48.0/22
103.55.84.0/22
103.68.206.0/23
103.86.20.0/22
103.108.76.0/22
103.142.64.0/23
103.171.236.0/23
103.180.216.0/23
103.184.198.0/23
103.186.38.0/23
103.200.48.0/22
103.206.64.0/22
103.226.224.0/22
103.228.172.0/22
203.191.56.0/22
IPv6:
2400:d180:66::-2400:d180:69:ffff:ffff:ffff:ffff:ffff
2400:d180:70::/47
Signature Algorithm: sha256WithRSAEncryption
15:e1:b4:5c:59:c3:38:56:21:a8:91:36:58:64:bc:07:37:e1:
76:ec:6a:c2:5d:b6:44:bc:d9:80:fe:aa:40:e4:25:88:e6:3e:
a7:38:3e:7b:70:d3:22:98:8a:55:0c:d1:78:c1:6c:b5:71:3d:
6e:80:5e:68:b2:26:ec:87:3d:d1:e0:12:cb:d3:66:d6:9d:37:
8e:3d:f6:3a:a5:5e:f5:cd:82:60:c1:cd:a7:e9:f8:3e:a6:3c:
63:34:77:d5:8f:62:95:37:d3:6d:0a:db:02:3d:18:45:d6:98:
81:8d:a3:f1:8d:4c:44:53:57:e3:75:ff:cc:46:73:54:13:e9:
70:16:ed:8a:3c:1b:cd:c6:6f:7d:14:fe:09:32:d7:df:6c:9b:
fb:b6:03:1f:1e:35:d3:5c:63:4d:dc:9b:12:97:7a:81:3a:7a:
f6:cb:d8:18:8d:fb:0d:cb:ea:69:00:6b:11:e7:3f:44:09:e0:
43:35:f9:ba:dd:34:c7:26:0b:06:cd:a9:63:10:75:dd:66:55:
95:03:75:f5:fc:bc:e4:ec:5d:0e:ef:04:da:f2:d9:c7:2e:03:
b6:14:99:02:b9:2e:10:25:91:84:77:04:5c:f2:8d:eb:cb:f4:
63:92:29:ce:26:5f:fd:8e:37:d7:a1:5e:f2:33:8f:08:73:05:
34:ea:36:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:27:00 2025 by rpki-client