Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F1960E76435A11EF99CA7D13C4F9AE02.roa
File: F1960E76435A11EF99CA7D13C4F9AE02.roa (raw, json)
Hash identifier: Qo0686g1lrpEJCOQUA5pZfrEHGdr/V1oX1WPgwUh8hM=
Subject key identifier: 12:15:15:37:23:F0:8D:B7:07:89:01:7F:35:AE:16:AB:33:7A:D8:1B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 94B6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F1960E76435A11EF99CA7D13C4F9AE02.roa
Signing time: Tue 16 Jul 2024 10:05:35 +0000
ROA not before: Tue 16 Jul 2024 10:05:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 18002
IP address blocks: 14.102.0.0/24 maxlen: 24
14.102.1.0/24 maxlen: 24
14.102.2.0/24 maxlen: 24
14.102.3.0/24 maxlen: 24
14.102.4.0/24 maxlen: 24
14.102.5.0/24 maxlen: 24
14.102.6.0/24 maxlen: 24
14.102.7.0/24 maxlen: 24
14.102.8.0/24 maxlen: 24
14.102.9.0/24 maxlen: 24
14.102.10.0/24 maxlen: 24
14.102.11.0/24 maxlen: 24
14.102.12.0/24 maxlen: 24
14.102.13.0/24 maxlen: 24
14.102.14.0/24 maxlen: 24
14.102.15.0/24 maxlen: 24
14.102.16.0/24 maxlen: 24
14.102.22.0/24 maxlen: 24
14.102.23.0/24 maxlen: 24
14.102.24.0/24 maxlen: 24
14.102.25.0/24 maxlen: 24
14.102.26.0/24 maxlen: 24
14.102.27.0/24 maxlen: 24
14.102.28.0/24 maxlen: 24
14.102.29.0/24 maxlen: 24
14.102.30.0/24 maxlen: 24
14.102.31.0/24 maxlen: 24
14.102.32.0/24 maxlen: 24
14.102.33.0/24 maxlen: 24
14.102.34.0/24 maxlen: 24
14.102.35.0/24 maxlen: 24
14.102.36.0/24 maxlen: 24
14.102.37.0/24 maxlen: 24
14.102.38.0/24 maxlen: 24
14.102.40.0/24 maxlen: 24
14.102.41.0/24 maxlen: 24
14.102.42.0/24 maxlen: 24
14.102.43.0/24 maxlen: 24
14.102.44.0/24 maxlen: 24
14.102.45.0/24 maxlen: 24
14.102.46.0/24 maxlen: 24
14.102.47.0/24 maxlen: 24
14.102.48.0/24 maxlen: 24
14.102.49.0/24 maxlen: 24
14.102.50.0/24 maxlen: 24
14.102.52.0/24 maxlen: 24
14.102.53.0/24 maxlen: 24
14.102.54.0/24 maxlen: 24
14.102.55.0/24 maxlen: 24
14.102.56.0/24 maxlen: 24
14.102.57.0/24 maxlen: 24
14.102.58.0/24 maxlen: 24
14.102.59.0/24 maxlen: 24
14.102.64.0/24 maxlen: 24
14.102.65.0/24 maxlen: 24
14.102.66.0/24 maxlen: 24
14.102.67.0/24 maxlen: 24
14.102.68.0/24 maxlen: 24
14.102.69.0/24 maxlen: 24
14.102.70.0/24 maxlen: 24
14.102.71.0/24 maxlen: 24
14.102.72.0/24 maxlen: 24
14.102.73.0/24 maxlen: 24
14.102.74.0/24 maxlen: 24
14.102.75.0/24 maxlen: 24
14.102.76.0/24 maxlen: 24
14.102.77.0/24 maxlen: 24
14.102.78.0/24 maxlen: 24
14.102.80.0/24 maxlen: 24
14.102.81.0/24 maxlen: 24
14.102.82.0/24 maxlen: 24
14.102.83.0/24 maxlen: 24
14.102.88.0/24 maxlen: 24
14.102.91.0/24 maxlen: 24
14.102.92.0/24 maxlen: 24
14.102.93.0/24 maxlen: 24
14.102.95.0/24 maxlen: 24
14.102.96.0/24 maxlen: 24
14.102.97.0/24 maxlen: 24
14.102.100.0/24 maxlen: 24
14.102.101.0/24 maxlen: 24
14.102.103.0/24 maxlen: 24
14.102.104.0/24 maxlen: 24
14.102.105.0/24 maxlen: 24
14.102.106.0/23 maxlen: 24
14.102.108.0/24 maxlen: 24
14.102.109.0/24 maxlen: 24
14.102.110.0/24 maxlen: 24
14.102.111.0/24 maxlen: 24
14.102.112.0/24 maxlen: 24
14.102.113.0/24 maxlen: 24
14.102.114.0/24 maxlen: 24
14.102.115.0/24 maxlen: 24
14.102.116.0/24 maxlen: 24
14.102.117.0/24 maxlen: 24
14.102.118.0/24 maxlen: 24
14.102.119.0/24 maxlen: 24
14.102.120.0/24 maxlen: 24
14.102.121.0/24 maxlen: 24
14.102.122.0/24 maxlen: 24
14.102.123.0/24 maxlen: 24
14.102.124.0/24 maxlen: 24
14.102.125.0/24 maxlen: 24
14.102.126.0/24 maxlen: 24
14.102.127.0/24 maxlen: 24
43.245.136.0/22 maxlen: 24
43.251.212.0/22 maxlen: 24
61.14.228.0/22 maxlen: 24
103.5.200.0/22 maxlen: 24
103.87.100.0/22 maxlen: 24
103.122.84.0/24 maxlen: 24
103.158.131.0/24 maxlen: 24
103.160.24.0/24 maxlen: 24
103.175.72.0/24 maxlen: 24
103.175.73.0/24 maxlen: 24
103.176.8.0/23 maxlen: 24
110.172.128.0/18 maxlen: 23
110.172.130.0/23 maxlen: 24
110.172.132.0/24 maxlen: 24
110.172.134.0/23 maxlen: 24
110.172.136.0/24 maxlen: 24
110.172.138.0/23 maxlen: 24
110.172.140.0/22 maxlen: 24
110.172.144.0/23 maxlen: 24
110.172.147.0/24 maxlen: 24
110.172.150.0/23 maxlen: 24
110.172.152.0/21 maxlen: 24
110.172.160.0/23 maxlen: 24
110.172.162.0/24 maxlen: 24
110.172.164.0/24 maxlen: 24
110.172.166.0/23 maxlen: 24
110.172.168.0/24 maxlen: 24
110.172.170.0/23 maxlen: 24
110.172.172.0/24 maxlen: 24
110.172.174.0/23 maxlen: 24
110.172.177.0/24 maxlen: 24
110.172.178.0/23 maxlen: 24
110.172.180.0/22 maxlen: 24
110.172.184.0/21 maxlen: 24
111.235.64.0/22 maxlen: 24
114.69.224.0/19 maxlen: 23
114.69.224.0/23 maxlen: 24
114.69.226.0/24 maxlen: 24
114.69.228.0/22 maxlen: 24
114.69.232.0/24 maxlen: 24
114.69.234.0/23 maxlen: 24
114.69.236.0/22 maxlen: 24
114.69.240.0/24 maxlen: 24
114.69.242.0/23 maxlen: 24
114.69.244.0/22 maxlen: 24
114.69.248.0/23 maxlen: 24
114.69.252.0/22 maxlen: 24
118.91.176.0/20 maxlen: 22
118.91.176.0/21 maxlen: 23
118.91.176.0/23 maxlen: 24
118.91.178.0/24 maxlen: 24
118.91.180.0/22 maxlen: 24
118.91.185.0/24 maxlen: 24
118.91.186.0/23 maxlen: 24
118.91.188.0/22 maxlen: 23
118.91.189.0/24 maxlen: 24
118.91.190.0/23 maxlen: 24
150.107.192.0/22 maxlen: 24
202.89.64.0/20 maxlen: 20
202.89.64.0/24 maxlen: 24
202.89.65.0/24 maxlen: 24
202.89.66.0/24 maxlen: 24
202.89.67.0/24 maxlen: 24
202.89.68.0/24 maxlen: 24
202.89.69.0/24 maxlen: 24
202.89.70.0/24 maxlen: 24
202.89.71.0/24 maxlen: 24
202.89.72.0/24 maxlen: 24
202.89.73.0/24 maxlen: 24
202.89.74.0/24 maxlen: 24
202.89.75.0/24 maxlen: 24
202.89.76.0/24 maxlen: 24
202.89.77.0/24 maxlen: 24
202.89.78.0/24 maxlen: 24
202.89.79.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38070 (0x94b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jul 16 10:05:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=669645ef-c82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bb:7f:03:ae:62:79:64:a5:32:a7:71:32:ff:
c9:e0:e9:00:59:a1:c2:2f:0f:a4:2f:b6:26:a4:e0:
0a:8e:16:74:d0:18:f2:2e:86:7f:b5:90:c4:50:95:
de:2b:fc:58:86:0e:b1:99:f4:7a:fa:76:1c:4c:46:
79:45:33:25:95:9c:5c:c6:99:8e:38:f8:4b:14:00:
57:40:75:5d:8f:8f:6a:ff:7b:2f:57:a9:35:3a:d9:
a0:b3:65:1f:eb:db:02:7e:b0:de:b2:80:67:f7:da:
24:e4:2d:17:c7:33:6d:49:dd:79:7b:0e:d2:c3:93:
eb:85:2b:12:d2:b1:8c:6e:f5:89:79:3d:66:3f:20:
0c:dd:5e:09:16:73:ac:54:fd:73:10:a9:04:e8:29:
84:f3:1c:85:73:fa:0c:ff:3f:d9:ea:03:86:c4:27:
38:b6:ce:d2:b5:f2:33:42:d0:2b:ee:7a:f9:6f:d4:
ef:23:df:15:ba:74:ab:db:d3:fe:56:70:a5:6a:b7:
cc:39:8b:58:3e:74:45:9f:82:55:3b:0c:ea:42:cd:
51:48:b1:3b:78:df:16:3f:94:c6:d1:b7:91:1a:e2:
0f:2d:28:56:c5:23:60:d2:d2:9b:be:fe:66:39:c3:
f1:0e:64:1e:b9:eb:23:87:a4:c1:17:e0:86:42:25:
36:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:15:15:37:23:F0:8D:B7:07:89:01:7F:35:AE:16:AB:33:7A:D8:1B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F1960E76435A11EF99CA7D13C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.102.0.0-14.102.16.255
14.102.22.0-14.102.38.255
14.102.40.0-14.102.50.255
14.102.52.0-14.102.59.255
14.102.64.0-14.102.78.255
14.102.80.0/22
14.102.88.0/24
14.102.91.0-14.102.93.255
14.102.95.0-14.102.97.255
14.102.100.0/23
14.102.103.0-14.102.127.255
43.245.136.0/22
43.251.212.0/22
61.14.228.0/22
103.5.200.0/22
103.87.100.0/22
103.122.84.0/24
103.158.131.0/24
103.160.24.0/24
103.175.72.0/23
103.176.8.0/23
110.172.128.0/18
111.235.64.0/22
114.69.224.0/19
118.91.176.0/20
150.107.192.0/22
202.89.64.0/20
Signature Algorithm: sha256WithRSAEncryption
1a:0c:07:e5:bd:1b:82:51:54:59:fb:83:29:53:68:2d:43:d0:
85:a4:b6:1f:c0:f0:9e:d6:28:55:27:c9:46:53:ed:28:5a:70:
74:8c:a5:14:16:2a:c1:f7:97:e8:05:73:3f:35:11:a2:2b:ee:
0c:97:6f:b6:f6:b2:89:5e:46:73:4c:59:ad:3c:3e:28:77:e3:
92:dd:2e:8f:7c:59:4e:9a:37:29:04:08:80:a5:2f:d2:e9:dd:
e3:fb:ec:e4:83:74:1c:e6:35:dd:db:ce:70:04:5e:41:3f:3e:
1a:ef:46:c0:96:c7:0e:00:b0:1a:7e:15:2d:56:39:39:5b:87:
94:e5:ce:27:e7:c0:b5:0c:f5:3e:37:2a:5e:62:c3:8e:2b:09:
ba:ed:aa:28:92:e5:ea:39:b3:25:d6:ab:3b:d2:ba:97:20:a3:
cd:68:f5:7e:01:49:22:9d:1f:e0:62:3b:6a:90:1c:b8:ed:be:
01:89:d2:11:d6:48:98:47:71:48:eb:60:5c:2d:a8:53:e5:b2:
98:a8:d8:70:4f:32:d8:3c:1a:72:4b:eb:60:e2:40:e2:35:35:
ee:1d:83:19:20:30:91:1b:f1:a0:3f:b9:33:50:82:dd:34:78:
eb:a8:43:16:7f:5a:a9:2c:83:52:39:27:74:c5:7f:ae:b7:a8:
93:d3:0c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:01:49 2025 by rpki-client