Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D2E40280880811ED8EE26147C4F9AE02.roa
File: D2E40280880811ED8EE26147C4F9AE02.roa (raw, json)
Hash identifier: rRUVf4CyxWaAUP0Pm7MOOIkqGJbf8NFFjdyrKDPU3VA=
Subject key identifier: 5D:41:89:08:6B:7F:76:B2:C0:BE:39:8B:B4:58:78:0A:E6:B0:31:DC
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6238
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D2E40280880811ED8EE26147C4F9AE02.roa
Signing time: Fri 30 Dec 2022 06:11:40 +0000
ROA not before: Fri 30 Dec 2022 06:11:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 133311
IP address blocks: 103.98.79.0/24 maxlen: 24
103.100.80.0/22 maxlen: 24
103.127.60.0/23 maxlen: 24
103.127.76.0/24 maxlen: 24
103.127.77.0/24 maxlen: 24
103.141.52.0/23 maxlen: 24
103.141.86.0/23 maxlen: 23
103.156.206.0/23 maxlen: 24
103.158.178.0/24 maxlen: 24
103.158.179.0/24 maxlen: 24
103.159.98.0/23 maxlen: 23
103.159.200.0/24 maxlen: 24
103.160.28.0/23 maxlen: 24
103.163.54.0/23 maxlen: 23
103.174.126.0/23 maxlen: 24
103.174.240.0/23 maxlen: 24
103.177.0.0/23 maxlen: 24
103.181.22.0/23 maxlen: 23
103.181.23.0/24 maxlen: 24
103.182.196.0/23 maxlen: 24
103.199.98.0/24 maxlen: 24
103.199.99.0/24 maxlen: 24
103.199.116.0/24 maxlen: 24
103.201.136.0/24 maxlen: 24
103.201.137.0/24 maxlen: 24
103.201.138.0/24 maxlen: 24
103.208.72.0/22 maxlen: 24
103.225.174.0/24 maxlen: 24
160.202.156.0/24 maxlen: 24
160.202.157.0/24 maxlen: 24
160.202.158.0/24 maxlen: 24
160.202.159.0/24 maxlen: 24
2001:df1:95c0::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25144 (0x6238)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Dec 30 06:11:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63ae811c-d54a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:71:d9:6a:25:24:e0:b8:30:50:2e:80:a6:bc:
41:81:8e:cd:cd:93:c7:fc:de:20:2c:e7:85:2d:a0:
98:58:39:73:d6:8a:a0:f0:b1:d6:55:54:8f:39:da:
8f:7e:de:3e:de:65:6e:a7:f7:6d:6c:02:6d:bc:2d:
97:e5:cd:c1:ad:1d:bc:9c:83:1c:d7:6f:5d:6e:ee:
f8:97:4f:e9:be:ba:2c:2f:3e:22:60:1f:06:4e:5a:
c0:45:fc:d2:4b:56:e9:04:82:e4:87:dc:d6:41:d3:
8b:b3:07:f5:32:7a:00:f8:28:f4:58:31:f5:69:b0:
d2:fc:6b:4d:a3:8d:03:b4:be:c4:be:d0:77:6b:a6:
a6:09:8b:65:36:63:13:e5:4f:71:ec:49:0e:c9:af:
e6:17:a2:c6:86:b4:65:a8:ee:ad:f2:b6:02:0e:44:
71:5b:e8:8e:19:33:f6:24:a3:36:35:b6:71:4f:dc:
de:6a:dd:e7:21:fa:ee:93:fe:6b:f8:95:8e:83:42:
4e:c5:af:f6:bb:8c:28:97:78:e0:be:b4:c0:25:dc:
d9:fe:6e:1e:ec:b5:6d:88:b3:f9:8f:f0:3a:d7:fb:
80:e7:5f:77:12:8f:90:9a:5e:7b:9f:f4:12:11:7a:
14:0b:a8:5f:3f:d1:07:4a:29:7a:6c:c8:3e:a3:29:
2e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:41:89:08:6B:7F:76:B2:C0:BE:39:8B:B4:58:78:0A:E6:B0:31:DC
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D2E40280880811ED8EE26147C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.98.79.0/24
103.100.80.0/22
103.127.60.0/23
103.127.76.0/23
103.141.52.0/23
103.141.86.0/23
103.156.206.0/23
103.158.178.0/23
103.159.98.0/23
103.159.200.0/24
103.160.28.0/23
103.163.54.0/23
103.174.126.0/23
103.174.240.0/23
103.177.0.0/23
103.181.22.0/23
103.182.196.0/23
103.199.98.0/23
103.199.116.0/24
103.201.136.0-103.201.138.255
103.208.72.0/22
103.225.174.0/24
160.202.156.0/22
IPv6:
2001:df1:95c0::/48
Signature Algorithm: sha256WithRSAEncryption
1e:3a:a4:48:7e:21:60:88:01:32:ac:85:b2:2d:28:44:1c:a8:
24:78:bb:53:f0:53:fd:a6:d1:65:3f:11:85:a2:af:ab:61:6e:
17:1f:91:dd:aa:62:5a:5a:6f:e1:e0:4c:de:05:bf:3a:54:6b:
9b:9e:5d:c1:18:0c:70:78:f9:47:51:4e:87:9e:a8:20:66:aa:
f9:08:c3:87:a7:db:bd:6a:21:11:ab:2b:fc:45:00:cc:56:20:
c0:a6:be:c8:dd:f1:8b:8e:0f:f4:95:35:36:09:7f:60:18:2f:
96:11:74:8b:69:86:64:49:85:34:7f:73:ae:7f:aa:44:8a:70:
e4:a7:2b:4b:3b:5c:c4:bc:65:6a:8d:d5:ae:14:bf:07:f9:0f:
69:69:a3:16:1a:fd:6d:cd:66:8d:0a:21:90:a0:36:e4:3a:e8:
f9:70:fe:74:ba:63:94:05:e1:33:04:b3:be:c6:04:37:21:8e:
88:74:af:ee:74:27:d3:02:52:25:c3:fc:6a:00:a8:25:f2:75:
31:e6:af:28:bf:c0:eb:59:f0:bb:2d:70:5a:4f:d6:73:c5:7f:
73:27:64:59:a7:64:ef:aa:b1:6f:03:20:5d:b9:fe:1d:03:9f:
cf:06:83:55:8e:90:20:9b:2a:e4:0c:94:1b:fe:3a:4a:2d:ad:
4b:11:31:95
-----BEGIN CERTIFICATE-----
MIIGEzCCBPugAwIBAgICYjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjIxMjMwMDYxMTQwWhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2FlODExYy1kNTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx3HZaiUk4LgwUC6AprxBgY7NzZPH/N4gLOeFLaCYWDlz1oqg8LHWVVSPOdqP
ft4+3mVup/dtbAJtvC2X5c3BrR28nIMc129dbu74l0/pvrosLz4iYB8GTlrARfzS
S1bpBILkh9zWQdOLswf1MnoA+Cj0WDH1abDS/GtNo40DtL7EvtB3a6amCYtlNmMT
5U9x7EkOya/mF6LGhrRlqO6t8rYCDkRxW+iOGTP2JKM2NbZxT9zeat3nIfruk/5r
+JWOg0JOxa/2u4wol3jgvrTAJdzZ/m4e7LVtiLP5j/A61/uA5193Eo+Qml57n/QS
EXoUC6hfP9EHSil6bMg+oyku5QIDAQABo4IDNzCCAzMwHQYDVR0OBBYEFF1BiQhr
f3aywL45i7RYeArmsDHcMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRDJFNDAyODA4
ODA4MTFFRDhFRTI2MTQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgcAGCCsGAQUFBwEHAQH/
BIGwMIGtMIGZBAIAATCBkgMEAGdiTwMEAmdkUAMEAWd/PAMEAWd/TAMEAWeNNAME
AWeNVgMEAWeczgMEAWeesgMEAWefYgMEAGefyAMEAWegHAMEAWejNgMEAWeufgME
AWeu8AMEAWexAAMEAWe1FgMEAWe2xAMEAWfHYgMEAGfHdDAMAwQDZ8mIAwQAZ8mK
AwQCZ9BIAwQAZ+GuAwQCoMqcMA8EAgACMAkDBwAgAQ3xlcAwDQYJKoZIhvcNAQEL
BQADggEBAB46pEh+IWCIATKshbItKEQcqCR4u1PwU/2m0WU/EYWir6thbhcfkd2q
Ylpab+HgTN4FvzpUa5ueXcEYDHB4+UdRToeeqCBmqvkIw4en271qIRGrK/xFAMxW
IMCmvsjd8YuOD/SVNTYJf2AYL5YRdItphmRJhTR/c65/qkSKcOSnK0s7XMS8ZWqN
1a4Uvwf5D2lpoxYa/W3NZo0KIZCgNuQ66Plw/nS6Y5QF4TMEs77GBDchjoh0r+50
J9MCUiXD/GoAqCXydTHmryi/wOtZ8LstcFpP1nPFf3MnZFmnZO+qsW8DIF25/h0D
n88Gg1WOkCCbKuQMlBv+OkotrUsRMZU=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:10:44 2025 by rpki-client