Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F17ACC122EC711EF9A338A73C4F9AE02.roa
File: F17ACC122EC711EF9A338A73C4F9AE02.roa (raw, json)
Hash identifier: hpd5jN2mJUCq/8AY2yCtrx6TQXCB4wKwUjBJw2aZAyw=
Subject key identifier: 7C:90:3D:8D:15:93:82:45:D4:48:5E:A2:51:3B:23:4A:54:F1:C0:D5
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 953A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F17ACC122EC711EF9A338A73C4F9AE02.roa
Signing time: Thu 25 Jul 2024 11:49:08 +0000
ROA not before: Thu 25 Jul 2024 11:49:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133647
IP address blocks: 14.102.17.0/24 maxlen: 24
14.102.18.0/24 maxlen: 24
14.102.19.0/24 maxlen: 24
14.102.20.0/24 maxlen: 24
14.102.21.0/24 maxlen: 24
14.102.46.0/24 maxlen: 24
14.102.47.0/24 maxlen: 24
14.102.49.0/24 maxlen: 24
14.102.51.0/24 maxlen: 24
14.102.58.0/24 maxlen: 24
14.102.61.0/24 maxlen: 24
14.102.94.0/24 maxlen: 24
14.102.102.0/24 maxlen: 24
43.229.162.0/24 maxlen: 24
43.230.156.0/22 maxlen: 24
45.115.252.0/22 maxlen: 24
45.116.68.0/24 maxlen: 24
45.116.106.0/24 maxlen: 24
45.116.107.0/24 maxlen: 24
103.38.70.0/24 maxlen: 24
103.43.4.0/22 maxlen: 24
103.50.4.0/22 maxlen: 24
103.55.6.0/23 maxlen: 24
103.61.102.0/23 maxlen: 24
103.69.216.0/22 maxlen: 24
103.70.144.0/22 maxlen: 24
103.70.176.0/23 maxlen: 24
103.79.112.0/22 maxlen: 24
103.87.48.0/24 maxlen: 24
103.87.49.0/24 maxlen: 24
103.91.68.0/22 maxlen: 24
103.93.176.0/22 maxlen: 24
103.109.72.0/23 maxlen: 24
103.122.85.0/24 maxlen: 24
103.129.194.0/24 maxlen: 24
103.129.195.0/24 maxlen: 24
103.144.37.0/24 maxlen: 24
103.156.168.0/23 maxlen: 24
103.157.160.0/23 maxlen: 24
103.159.154.0/23 maxlen: 24
103.161.230.0/23 maxlen: 24
103.161.232.0/24 maxlen: 24
103.161.233.0/24 maxlen: 24
103.174.105.0/24 maxlen: 24
103.175.76.0/24 maxlen: 24
103.175.77.0/24 maxlen: 24
103.176.71.0/24 maxlen: 24
103.177.61.0/24 maxlen: 24
103.214.97.0/24 maxlen: 24
103.220.28.0/24 maxlen: 24
103.220.29.0/24 maxlen: 24
103.220.30.0/24 maxlen: 24
103.220.31.0/24 maxlen: 24
103.237.172.0/24 maxlen: 24
103.237.173.0/24 maxlen: 24
103.237.174.0/24 maxlen: 24
103.237.175.0/24 maxlen: 24
110.172.137.0/24 maxlen: 24
110.172.141.0/24 maxlen: 24
110.172.142.0/24 maxlen: 24
110.172.144.0/24 maxlen: 24
110.172.163.0/24 maxlen: 24
110.172.172.0/24 maxlen: 24
110.172.188.0/24 maxlen: 24
118.91.184.0/24 maxlen: 24
118.91.190.0/24 maxlen: 24
175.111.180.0/24 maxlen: 24
175.111.182.0/24 maxlen: 24
175.111.183.0/24 maxlen: 24
202.89.73.0/24 maxlen: 24
202.89.79.0/24 maxlen: 24
2001:df0:dc80::/48 maxlen: 48
2001:df1:b280::/48 maxlen: 48
2001:df1:f440::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38202 (0x953a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jul 25 11:49:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66a23bb4-d9e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0c:ce:fd:b6:dd:49:8f:2a:6a:0f:12:f6:9c:
02:3e:19:20:22:ee:46:39:90:67:30:eb:77:78:6f:
11:9a:1d:9c:e9:c9:04:1c:70:6a:80:5d:7b:b4:2e:
97:b9:81:81:f7:65:b1:56:37:ce:af:9c:fd:b9:37:
46:01:18:7b:36:3a:0d:8f:a6:1a:3b:1d:98:dd:36:
e2:1d:b2:95:16:53:df:a1:20:55:50:ce:0a:fb:65:
7c:65:6a:7b:ca:38:ef:ad:ec:db:ab:c7:cf:19:d8:
c9:2e:37:09:17:93:f1:c4:d0:18:43:c8:10:67:19:
9f:67:bb:02:a9:80:6a:0f:6d:19:7d:2b:74:51:64:
86:c3:30:fd:93:ff:a4:ae:5c:18:78:f8:6b:30:82:
f2:77:9b:d5:a2:87:94:55:1c:46:52:84:36:1a:0b:
cf:48:6f:c6:fa:9b:65:bb:d2:a2:65:94:67:d1:b4:
54:c5:2c:97:8e:8e:7f:f3:35:d5:f1:77:f0:92:23:
0d:63:17:c3:c3:1d:56:b2:c6:f6:92:1d:fa:d2:b2:
fa:16:95:cc:5b:23:f2:55:3c:98:3d:1d:39:2f:a3:
27:64:e6:cb:ac:9b:41:a6:2c:42:94:c9:1a:c8:49:
2d:e8:55:34:b6:70:7a:64:df:10:da:2e:9d:a3:05:
00:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:90:3D:8D:15:93:82:45:D4:48:5E:A2:51:3B:23:4A:54:F1:C0:D5
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F17ACC122EC711EF9A338A73C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.102.17.0-14.102.21.255
14.102.46.0/23
14.102.49.0/24
14.102.51.0/24
14.102.58.0/24
14.102.61.0/24
14.102.94.0/24
14.102.102.0/24
43.229.162.0/24
43.230.156.0/22
45.115.252.0/22
45.116.68.0/24
45.116.106.0/23
103.38.70.0/24
103.43.4.0/22
103.50.4.0/22
103.55.6.0/23
103.61.102.0/23
103.69.216.0/22
103.70.144.0/22
103.70.176.0/23
103.79.112.0/22
103.87.48.0/23
103.91.68.0/22
103.93.176.0/22
103.109.72.0/23
103.122.85.0/24
103.129.194.0/23
103.144.37.0/24
103.156.168.0/23
103.157.160.0/23
103.159.154.0/23
103.161.230.0-103.161.233.255
103.174.105.0/24
103.175.76.0/23
103.176.71.0/24
103.177.61.0/24
103.214.97.0/24
103.220.28.0/22
103.237.172.0/22
110.172.137.0/24
110.172.141.0-110.172.142.255
110.172.144.0/24
110.172.163.0/24
110.172.172.0/24
110.172.188.0/24
118.91.184.0/24
118.91.190.0/24
175.111.180.0/24
175.111.182.0/23
202.89.73.0/24
202.89.79.0/24
IPv6:
2001:df0:dc80::/48
2001:df1:b280::/48
2001:df1:f440::/48
Signature Algorithm: sha256WithRSAEncryption
2a:0e:4d:01:87:04:26:68:cf:07:8f:13:64:ff:6d:7f:1d:14:
3b:91:93:9d:b6:c6:a4:0e:4e:67:44:11:44:e5:ca:7a:8a:05:
a3:ce:87:0c:4a:76:bc:e2:a2:c2:14:13:1b:71:d0:d0:c8:36:
4b:95:ba:d8:17:8b:48:f2:31:7d:4a:57:f0:3a:7e:53:67:ce:
47:39:92:0f:b7:8e:52:9d:35:01:8b:b2:a0:d5:c0:c2:4b:26:
41:4c:dc:27:7c:13:76:ee:27:7a:66:48:7c:e1:65:70:07:b1:
1e:4d:02:94:d2:ad:c8:7b:82:96:53:7f:cf:98:88:3b:bf:57:
5d:d4:f5:66:4b:fb:9c:00:59:08:8e:d4:3b:2a:ec:14:84:62:
e2:63:b3:eb:08:1d:e1:35:a0:0c:78:58:8f:70:c5:cf:7d:8d:
27:ed:dd:f4:70:cf:16:b3:7a:cb:e4:96:0c:a3:b1:a2:69:f2:
41:88:93:a1:a7:94:68:22:21:65:a0:a8:0f:3e:d8:42:05:a3:
a3:27:f3:08:c9:f5:15:01:22:8c:13:e7:d8:d9:29:43:10:ba:
53:94:6f:16:b2:a4:fc:35:4b:2b:49:2b:52:15:ee:0e:17:94:
35:31:89:3a:79:cb:76:7f:6f:e1:a8:3d:c3:a4:af:7d:56:0f:
24:c7:d2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:58:23 2025 by rpki-client