Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D353E9728CBF11ED8112584CC4F9AE02.roa
File: D353E9728CBF11ED8112584CC4F9AE02.roa (raw, json)
Hash identifier: mqPn5+/Q+tZkbMIFKVscc2MZzpTjK0hQGnvtaYtNzTM=
Subject key identifier: DC:A7:03:08:F8:CE:FD:2B:50:8D:07:D2:F2:6A:1F:B4:4A:2E:52:12
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6528
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D353E9728CBF11ED8112584CC4F9AE02.roa
Signing time: Fri 17 Feb 2023 12:31:45 +0000
ROA not before: Fri 17 Feb 2023 12:31:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55352
IP address blocks: 43.231.132.0/22 maxlen: 24
43.231.212.0/22 maxlen: 24
43.231.236.0/22 maxlen: 24
43.231.252.0/22 maxlen: 24
43.247.136.0/22 maxlen: 24
45.112.8.0/22 maxlen: 24
45.112.56.0/22 maxlen: 24
45.115.56.0/24 maxlen: 24
45.115.57.0/24 maxlen: 24
45.115.58.0/24 maxlen: 24
45.115.59.0/24 maxlen: 24
45.126.144.0/22 maxlen: 24
45.251.12.0/24 maxlen: 24
45.251.13.0/24 maxlen: 24
45.251.14.0/24 maxlen: 24
45.251.15.0/24 maxlen: 24
59.152.56.0/22 maxlen: 24
59.153.0.0/22 maxlen: 24
59.153.120.0/22 maxlen: 24
103.8.164.0/22 maxlen: 24
103.29.156.0/22 maxlen: 24
103.60.208.0/22 maxlen: 24
103.75.60.0/23 maxlen: 24
103.102.92.0/22 maxlen: 24
103.111.112.0/22 maxlen: 24
103.114.2.0/23 maxlen: 23
103.114.3.0/24 maxlen: 24
103.119.188.0/22 maxlen: 24
103.156.212.0/23 maxlen: 24
103.176.240.0/23 maxlen: 24
103.179.212.0/23 maxlen: 24
103.197.224.0/22 maxlen: 24
103.198.164.0/22 maxlen: 24
103.200.104.0/22 maxlen: 24
103.204.160.0/22 maxlen: 24
103.205.172.0/22 maxlen: 24
103.220.40.0/22 maxlen: 24
103.221.248.0/22 maxlen: 24
103.226.140.0/22 maxlen: 24
103.226.144.0/22 maxlen: 24
103.226.188.0/22 maxlen: 24
103.226.204.0/22 maxlen: 24
103.226.236.0/22 maxlen: 24
103.226.240.0/22 maxlen: 24
103.239.171.0/24 maxlen: 24
103.249.132.0/22 maxlen: 24
111.125.217.0/24 maxlen: 24
111.125.218.0/23 maxlen: 24
111.125.224.0/24 maxlen: 24
111.125.226.0/24 maxlen: 24
111.125.228.0/24 maxlen: 24
111.125.233.0/24 maxlen: 24
111.125.252.0/22 maxlen: 24
124.66.172.0/22 maxlen: 24
175.100.176.0/20 maxlen: 24
202.168.144.0/22 maxlen: 24
2406:9e00:20::/48 maxlen: 48
2406:9e00:21::/48 maxlen: 48
2406:9e00:22::/48 maxlen: 48
2406:9e00:23::/48 maxlen: 48
2406:9e00:24::/48 maxlen: 48
2406:9e00:25::/48 maxlen: 48
2406:9e00:26::/48 maxlen: 48
2406:9e00:27::/48 maxlen: 48
2406:9e00:28::/48 maxlen: 48
2406:9e00:29::/48 maxlen: 48
2406:9e00:2a::/48 maxlen: 48
2406:9e00:2b::/48 maxlen: 48
2406:9e00:2c::/48 maxlen: 48
2406:9e00:2d::/48 maxlen: 48
2406:9e00:2e::/48 maxlen: 48
2406:9e00:2f::/48 maxlen: 48
2406:9e00:30::/48 maxlen: 48
2406:9e00:31::/48 maxlen: 48
2406:9e00:32::/48 maxlen: 48
2406:9e00:33::/48 maxlen: 48
2406:9e00:34::/48 maxlen: 48
2406:9e00:35::/48 maxlen: 48
2406:9e00:36::/48 maxlen: 48
2406:9e00:37::/48 maxlen: 48
2406:9e00:38::/48 maxlen: 48
2406:9e00:39::/48 maxlen: 48
2406:9e00:3a::/48 maxlen: 48
2406:9e00:3b::/48 maxlen: 48
2406:9e00:3c::/48 maxlen: 48
2406:9e00:3d::/48 maxlen: 48
2406:9e00:3e::/48 maxlen: 48
2406:9e00:3f::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25896 (0x6528)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Feb 17 12:31:45 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63ef73b0-f671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f7:da:e1:15:9d:6d:ff:14:50:a4:15:68:3d:
61:92:19:c4:02:3d:92:6c:17:90:4f:dc:3a:ef:19:
d9:b4:47:9e:07:d1:2f:fa:3a:35:a2:66:04:95:ea:
12:95:83:3a:af:d3:59:20:aa:7e:b0:93:d4:96:fd:
1d:5f:b8:f9:0a:de:66:d8:f6:78:48:fe:c5:5a:38:
dc:48:bd:3b:de:6a:64:2f:73:12:8b:ac:63:bb:47:
52:61:c7:69:14:42:20:5b:3c:9c:e4:02:f9:0c:1a:
1f:52:4f:b8:1b:44:af:e1:89:d9:b2:27:10:bc:19:
ec:1b:07:90:51:83:4a:95:9f:fd:98:b8:2f:61:c2:
99:e1:ca:33:8d:9d:4b:8e:4d:55:af:85:96:50:10:
81:6b:c7:7c:f1:02:10:72:a1:b7:1d:00:b4:a6:22:
ee:76:8f:3b:f9:91:e2:af:81:72:d9:af:33:39:c7:
d1:e0:d0:03:a6:6d:a9:08:48:26:56:10:8e:9d:0c:
35:37:10:00:ac:7d:38:72:1d:84:92:67:49:d0:9b:
22:74:28:48:34:b5:78:d5:0c:34:65:7f:e1:11:60:
2b:e7:10:5f:34:ad:1e:5c:e5:77:26:99:c6:ac:a1:
bc:24:9c:85:d5:2b:aa:16:77:da:ec:b0:24:5d:ed:
72:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A7:03:08:F8:CE:FD:2B:50:8D:07:D2:F2:6A:1F:B4:4A:2E:52:12
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D353E9728CBF11ED8112584CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.231.132.0/22
43.231.212.0/22
43.231.236.0/22
43.231.252.0/22
43.247.136.0/22
45.112.8.0/22
45.112.56.0/22
45.115.56.0/22
45.126.144.0/22
45.251.12.0/22
59.152.56.0/22
59.153.0.0/22
59.153.120.0/22
103.8.164.0/22
103.29.156.0/22
103.60.208.0/22
103.75.60.0/23
103.102.92.0/22
103.111.112.0/22
103.114.2.0/23
103.119.188.0/22
103.156.212.0/23
103.176.240.0/23
103.179.212.0/23
103.197.224.0/22
103.198.164.0/22
103.200.104.0/22
103.204.160.0/22
103.205.172.0/22
103.220.40.0/22
103.221.248.0/22
103.226.140.0-103.226.147.255
103.226.188.0/22
103.226.204.0/22
103.226.236.0-103.226.243.255
103.239.171.0/24
103.249.132.0/22
111.125.217.0-111.125.219.255
111.125.224.0/24
111.125.226.0/24
111.125.228.0/24
111.125.233.0/24
111.125.252.0/22
124.66.172.0/22
175.100.176.0/20
202.168.144.0/22
IPv6:
2406:9e00:20::/43
Signature Algorithm: sha256WithRSAEncryption
ad:86:49:01:2c:6f:8b:e3:1c:11:4c:31:97:49:d8:5c:de:ab:
66:b1:41:8f:88:2f:41:c9:f9:83:57:c9:52:19:e1:73:15:3d:
ae:d6:88:90:89:92:d4:71:52:c3:fe:1b:72:9d:4d:34:cb:b9:
7e:14:5b:03:a4:57:e9:dd:07:17:6d:96:e5:de:a5:d2:04:6a:
e8:3b:9f:14:24:1b:fa:af:57:43:7e:5b:79:2f:80:25:97:37:
5d:81:16:57:fa:8c:49:93:01:64:24:27:9d:4a:3f:45:07:1b:
1b:e0:21:0b:18:ec:88:9b:39:68:8d:af:21:1d:96:be:cf:ca:
1c:97:28:70:0f:d5:29:0f:4a:1d:6a:6c:a0:2d:29:51:09:7b:
64:87:44:f4:3e:38:38:d3:d7:f7:86:d3:46:41:45:cc:84:11:
6e:25:c8:9e:90:5a:75:ef:b7:cf:3c:74:30:2c:a8:ac:c9:32:
c2:53:e7:f5:fa:0c:27:73:be:71:a7:08:25:1c:85:0d:19:52:
1f:21:be:c7:7d:b4:7c:85:53:f1:d4:a9:48:90:67:e1:48:a8:
45:46:7b:48:1f:6b:03:f2:ed:7a:90:01:ae:1f:f8:4a:62:c5:
e5:fa:ea:94:4a:d1:21:55:c7:7d:fe:9d:66:1c:10:2a:66:eb:
71:7d:f9:0a
-----BEGIN CERTIFICATE-----
MIIGsjCCBZqgAwIBAgICZSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwMjE3MTIzMTQ1WhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2VmNzNiMC1mNjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqffa4RWdbf8UUKQVaD1hkhnEAj2SbBeQT9w67xnZtEeeB9Ev+jo1omYEleoS
lYM6r9NZIKp+sJPUlv0dX7j5Ct5m2PZ4SP7FWjjcSL073mpkL3MSi6xju0dSYcdp
FEIgWzyc5AL5DBofUk+4G0Sv4YnZsicQvBnsGweQUYNKlZ/9mLgvYcKZ4cozjZ1L
jk1Vr4WWUBCBa8d88QIQcqG3HQC0piLudo87+ZHir4Fy2a8zOcfR4NADpm2pCEgm
VhCOnQw1NxAArH04ch2EkmdJ0JsidChINLV41Qw0ZX/hEWAr5xBfNK0eXOV3JpnG
rKG8JJyF1SuqFnfa7LAkXe1yRwIDAQABo4ID1jCCA9IwHQYDVR0OBBYEFNynAwj4
zv0rUI0H0vJqH7RKLlISMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRDM1M0U5NzI4
Q0JGMTFFRDgxMTI1ODRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggFeBggrBgEFBQcBBwEB
/wSCAU0wggFJMIIBNAQCAAEwggEsAwQCK+eEAwQCK+fUAwQCK+fsAwQCK+f8AwQC
K/eIAwQCLXAIAwQCLXA4AwQCLXM4AwQCLX6QAwQCLfsMAwQCO5g4AwQCO5kAAwQC
O5l4AwQCZwikAwQCZx2cAwQCZzzQAwQBZ0s8AwQCZ2ZcAwQCZ29wAwQBZ3ICAwQC
Z3e8AwQBZ5zUAwQBZ7DwAwQBZ7PUAwQCZ8XgAwQCZ8akAwQCZ8hoAwQCZ8ygAwQC
Z82sAwQCZ9woAwQCZ934MAwDBAJn4owDBAJn4pADBAJn4rwDBAJn4swwDAMEAmfi
7AMEAmfi8AMEAGfvqwMEAmf5hDAMAwQAb33ZAwQCb33YAwQAb33gAwQAb33iAwQA
b33kAwQAb33pAwQCb338AwQCfEKsAwQEr2SwAwQCyqiQMA8EAgACMAkDBwUkBp4A
ACAwDQYJKoZIhvcNAQELBQADggEBAK2GSQEsb4vjHBFMMZdJ2Fzeq2axQY+IL0HJ
+YNXyVIZ4XMVPa7WiJCJktRxUsP+G3KdTTTLuX4UWwOkV+ndBxdtluXepdIEaug7
nxQkG/qvV0N+W3kvgCWXN12BFlf6jEmTAWQkJ51KP0UHGxvgIQsY7IibOWiNryEd
lr7PyhyXKHAP1SkPSh1qbKAtKVEJe2SHRPQ+ODjT1/eG00ZBRcyEEW4lyJ6QWnXv
t888dDAsqKzJMsJT5/X6DCdzvnGnCCUchQ0ZUh8hvsd9tHyFU/HUqUiQZ+FIqEVG
e0gfawPy7XqQAa4f+EpixeX66pRK0SFVx33+nWYcECpm63F9+Qo=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:06:44 2025 by rpki-client