Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CF0CEBF4B9A411ED8C34B75FC4F9AE02.roa
File: CF0CEBF4B9A411ED8C34B75FC4F9AE02.roa (raw, json)
Hash identifier: Fy0e9NG6EUnCG9quXzuTqAvZ5SpSU46RvA/b97E9YBI=
Subject key identifier: 44:C9:F9:27:2E:6B:D0:29:49:D0:AB:F1:30:00:E2:0E:E0:55:32:A1
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7420
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CF0CEBF4B9A411ED8C34B75FC4F9AE02.roa
Signing time: Fri 16 Jun 2023 12:42:03 +0000
ROA not before: Fri 16 Jun 2023 12:42:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135718
IP address blocks: 36.255.156.0/24 maxlen: 24
36.255.157.0/24 maxlen: 24
36.255.158.0/24 maxlen: 24
36.255.159.0/24 maxlen: 24
103.66.112.0/24 maxlen: 24
103.66.113.0/24 maxlen: 24
103.66.114.0/24 maxlen: 24
103.66.115.0/24 maxlen: 24
103.92.120.0/22 maxlen: 24
103.101.56.0/23 maxlen: 24
103.101.58.0/24 maxlen: 24
103.113.35.0/24 maxlen: 24
103.119.245.0/24 maxlen: 24
103.119.246.0/24 maxlen: 24
103.119.247.0/24 maxlen: 24
103.138.105.0/24 maxlen: 24
103.145.8.0/23 maxlen: 24
103.148.164.0/24 maxlen: 24
103.159.201.0/24 maxlen: 24
103.165.87.0/24 maxlen: 24
103.172.10.0/24 maxlen: 24
103.174.144.0/23 maxlen: 24
103.182.110.0/23 maxlen: 24
103.190.238.0/24 maxlen: 24
103.204.188.0/24 maxlen: 24
103.204.189.0/24 maxlen: 24
103.204.190.0/24 maxlen: 24
103.204.191.0/24 maxlen: 24
2001:df5:f680::/48 maxlen: 48
2402:6a40::/48 maxlen: 48
2402:6a40:1::/48 maxlen: 48
2402:6a40:2::/48 maxlen: 48
2402:6a40:3::/48 maxlen: 48
2402:6a40:4::/48 maxlen: 48
2402:6a40:5::/48 maxlen: 48
2402:6a40:6::/48 maxlen: 48
2402:6a40:7::/48 maxlen: 48
2402:6a40:8::/48 maxlen: 48
2402:6a40:9::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29728 (0x7420)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jun 16 12:42:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=648c589a-28fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ec:05:f5:3a:ba:fb:90:bf:2b:9a:c8:05:7b:
ae:de:8d:05:9e:b0:3e:29:1c:a7:a6:25:7d:da:67:
bd:9c:03:46:2b:e9:fc:dc:70:e8:6b:20:e9:4d:7e:
0b:ce:3a:d5:26:d1:9c:be:b0:a0:d9:8c:78:8e:ee:
82:6d:a7:ce:ce:12:13:eb:fd:12:5c:77:33:7b:7d:
d6:78:b4:e6:1b:fd:f3:2c:36:39:2e:d3:27:33:c1:
86:53:76:ac:99:d4:e6:52:28:1a:75:13:39:6a:f8:
d5:d7:e8:32:6a:e2:05:be:3b:38:a2:61:5b:08:6f:
1e:00:a5:28:7f:2c:fc:98:4e:19:6b:69:28:e4:05:
f2:22:bd:2d:9f:ff:06:32:36:b2:33:da:26:ac:72:
f7:19:60:8a:bb:98:76:db:b0:83:a2:10:56:21:a7:
ef:a0:16:1e:32:aa:e2:3e:f6:9f:9f:32:b0:3d:53:
18:83:60:3a:c2:d7:cd:48:69:7a:1d:f4:a2:8c:bd:
6c:23:9b:f7:ae:43:5c:44:6f:21:be:9f:e7:e5:92:
7d:f8:9c:d7:65:7a:ac:ad:49:5f:cb:af:d2:1d:43:
d6:7e:70:75:52:29:a6:8e:85:67:0c:7c:b5:e9:43:
14:5d:c2:4c:a4:87:8e:06:62:09:c9:f0:50:79:c7:
25:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C9:F9:27:2E:6B:D0:29:49:D0:AB:F1:30:00:E2:0E:E0:55:32:A1
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CF0CEBF4B9A411ED8C34B75FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.156.0/22
103.66.112.0/22
103.92.120.0/22
103.101.56.0-103.101.58.255
103.113.35.0/24
103.119.245.0-103.119.247.255
103.138.105.0/24
103.145.8.0/23
103.148.164.0/24
103.159.201.0/24
103.165.87.0/24
103.172.10.0/24
103.174.144.0/23
103.182.110.0/23
103.190.238.0/24
103.204.188.0/22
IPv6:
2001:df5:f680::/48
2402:6a40::-2402:6a40:9:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a4:54:a8:e1:f8:54:cd:96:99:8d:18:a4:c6:2c:9d:51:75:77:
2c:de:ba:c1:fd:71:82:70:43:59:75:a5:9a:68:06:d9:f8:a2:
be:a7:71:64:09:af:bd:93:dc:da:ee:0c:cd:5f:d9:78:b4:99:
fb:ba:bc:ac:bb:d3:97:b3:b9:4b:ad:89:95:ef:75:e6:42:80:
21:a2:61:47:87:e6:44:1e:e7:91:fc:ef:98:f6:ec:d9:80:00:
7d:12:71:e8:53:cd:4b:ed:19:30:eb:33:ee:e5:f2:86:36:70:
c0:5a:84:3e:c0:4b:06:c1:b3:53:62:26:45:85:0a:12:db:99:
3b:9f:02:59:fc:49:48:8b:ea:47:0a:74:6e:2e:17:49:eb:03:
3d:f9:1d:80:d4:6b:e9:eb:9b:00:fc:58:de:bd:bf:ec:29:f4:
bb:d7:f2:03:2e:2d:84:ab:1d:b2:13:80:56:5d:76:d1:0a:16:
1d:f6:6e:c3:11:96:9f:57:8e:81:88:0c:b0:71:04:27:d9:14:
a7:3b:4f:d5:48:3e:cf:5a:26:01:7c:73:a7:bf:32:e4:ea:f5:
b3:bc:f4:cd:48:39:28:6d:5f:c2:7f:fc:15:4b:f6:d6:61:dd:
8f:30:d7:2f:c1:b2:22:a5:2a:0e:b4:ef:fa:aa:0c:f6:62:2d:
cd:02:07:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:27:38 2025 by rpki-client