Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/2507CC0A21C711EF8308D721C4F9AE02.roa
File: 2507CC0A21C711EF8308D721C4F9AE02.roa (raw, json)
Hash identifier: PKahUMrKaCnc+TSNsKyPc0Z0hsfPg9z8w0pTxChdUM0=
Subject key identifier: E8:AE:DA:A5:4E:EA:C0:94:77:0E:62:31:C0:92:AA:33:8C:45:20:EF
Certificate issuer: /CN=A9120B99/serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4
Certificate serial: 3409
Authority key identifier: 86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/2507CC0A21C711EF8308D721C4F9AE02.roa
Signing time: Mon 03 Jun 2024 16:34:28 +0000
ROA not before: Mon 03 Jun 2024 16:34:27 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 7540
IP address blocks: 117.18.96.0/24 maxlen: 24
117.18.98.0/24 maxlen: 24
117.18.101.0/24 maxlen: 24
117.18.102.0/24 maxlen: 24
117.18.105.0/24 maxlen: 24
117.18.106.0/24 maxlen: 24
117.18.107.0/24 maxlen: 24
117.18.108.0/24 maxlen: 24
117.18.110.0/24 maxlen: 24
117.18.112.0/24 maxlen: 24
117.18.113.0/24 maxlen: 24
117.18.114.0/24 maxlen: 24
117.18.115.0/24 maxlen: 24
117.18.116.0/24 maxlen: 24
117.18.119.0/24 maxlen: 24
117.18.120.0/24 maxlen: 24
117.18.121.0/24 maxlen: 24
117.18.124.0/24 maxlen: 24
117.18.125.0/24 maxlen: 24
117.18.126.0/24 maxlen: 24
202.181.137.0/24 maxlen: 24
202.181.138.0/24 maxlen: 24
202.181.140.0/24 maxlen: 24
202.181.141.0/24 maxlen: 24
202.181.142.0/24 maxlen: 24
202.181.143.0/24 maxlen: 24
202.181.150.0/24 maxlen: 24
202.181.152.0/24 maxlen: 24
202.181.154.0/24 maxlen: 24
202.181.157.0/24 maxlen: 24
202.181.158.0/24 maxlen: 24
202.181.159.0/24 maxlen: 24
202.181.160.0/24 maxlen: 24
202.181.161.0/24 maxlen: 24
202.181.162.0/24 maxlen: 24
202.181.163.0/24 maxlen: 24
202.181.164.0/24 maxlen: 24
202.181.165.0/24 maxlen: 24
202.181.166.0/24 maxlen: 24
202.181.167.0/24 maxlen: 24
202.181.168.0/24 maxlen: 24
202.181.169.0/24 maxlen: 24
202.181.170.0/24 maxlen: 24
202.181.171.0/24 maxlen: 24
202.181.172.0/24 maxlen: 24
202.181.173.0/24 maxlen: 24
202.181.174.0/24 maxlen: 24
202.181.175.0/24 maxlen: 24
202.181.176.0/24 maxlen: 24
202.181.178.0/24 maxlen: 24
202.181.179.0/24 maxlen: 24
202.181.180.0/24 maxlen: 24
202.181.181.0/24 maxlen: 24
202.181.182.0/24 maxlen: 24
202.181.183.0/24 maxlen: 24
202.181.184.0/24 maxlen: 24
202.181.185.0/24 maxlen: 24
202.181.186.0/24 maxlen: 24
202.181.187.0/24 maxlen: 24
202.181.189.0/24 maxlen: 24
202.181.190.0/24 maxlen: 24
202.181.191.0/24 maxlen: 24
202.181.192.0/24 maxlen: 24
202.181.193.0/24 maxlen: 24
202.181.194.0/24 maxlen: 24
202.181.195.0/24 maxlen: 24
202.181.196.0/24 maxlen: 24
202.181.197.0/24 maxlen: 24
202.181.198.0/24 maxlen: 24
202.181.199.0/24 maxlen: 24
202.181.200.0/24 maxlen: 24
202.181.201.0/24 maxlen: 24
202.181.202.0/24 maxlen: 24
202.181.203.0/24 maxlen: 24
202.181.205.0/24 maxlen: 24
202.181.206.0/24 maxlen: 24
202.181.207.0/24 maxlen: 24
202.181.208.0/24 maxlen: 24
202.181.209.0/24 maxlen: 24
202.181.210.0/24 maxlen: 24
202.181.211.0/24 maxlen: 24
202.181.212.0/24 maxlen: 24
202.181.213.0/24 maxlen: 24
202.181.214.0/24 maxlen: 24
202.181.215.0/24 maxlen: 24
202.181.216.0/24 maxlen: 24
202.181.217.0/24 maxlen: 24
202.181.219.0/24 maxlen: 24
202.181.220.0/24 maxlen: 24
202.181.221.0/24 maxlen: 24
202.181.222.0/24 maxlen: 24
202.181.223.0/24 maxlen: 24
202.181.224.0/24 maxlen: 24
202.181.225.0/24 maxlen: 24
202.181.226.0/24 maxlen: 24
202.181.227.0/24 maxlen: 24
202.181.228.0/24 maxlen: 24
202.181.229.0/24 maxlen: 24
202.181.230.0/24 maxlen: 24
202.181.231.0/24 maxlen: 24
202.181.233.0/24 maxlen: 24
202.181.234.0/24 maxlen: 24
202.181.235.0/24 maxlen: 24
202.181.236.0/24 maxlen: 24
202.181.237.0/24 maxlen: 24
202.181.238.0/24 maxlen: 24
202.181.239.0/24 maxlen: 24
202.181.240.0/24 maxlen: 24
202.181.241.0/24 maxlen: 24
202.181.242.0/24 maxlen: 24
202.181.243.0/24 maxlen: 24
202.181.244.0/24 maxlen: 24
202.181.245.0/24 maxlen: 24
202.181.246.0/24 maxlen: 24
202.181.247.0/24 maxlen: 24
202.181.248.0/23 maxlen: 24
2405:5d00::/64 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13321 (0x3409)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120B99
Validity
Not Before: Jun 3 16:34:27 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=665df093-1b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:79:ad:c5:8e:e9:a6:32:27:6f:87:99:75:d1:
48:74:78:fa:f6:ae:e0:7d:3d:34:96:27:8c:da:84:
36:7c:49:56:fc:e3:2e:fc:0c:69:ce:22:2f:11:5e:
d4:b9:23:d1:f4:e1:a2:0b:d1:9b:f1:86:35:53:32:
eb:c1:36:dd:71:5d:3d:46:50:bb:d5:e5:d5:b2:31:
6e:07:78:7e:5c:e6:ef:a6:cc:c1:68:0b:fa:11:7e:
b9:1d:6e:24:ff:d8:ba:5f:b0:e3:ba:8f:b5:24:bc:
d0:91:98:b8:79:1f:89:89:cc:95:25:76:b2:dd:11:
68:97:4a:90:b6:bb:3d:85:7e:9a:f1:2d:44:a4:cb:
36:0e:f5:70:5d:74:43:89:61:29:e0:06:31:9a:b1:
d2:93:0e:ff:77:74:64:e0:44:34:1b:55:c2:e6:b3:
49:3f:39:a1:52:a8:39:86:95:50:db:1d:e3:09:d5:
61:76:57:68:b2:b7:a8:99:57:c8:e2:35:39:28:c9:
b1:df:b0:ff:74:5c:b5:ae:6c:01:cc:9e:bf:81:05:
b4:fc:ec:20:1b:4a:e8:98:57:53:62:97:cb:13:da:
0b:a2:22:d8:e5:ad:33:b4:f3:31:ed:a2:b0:bc:3d:
75:ca:b7:a9:dd:94:04:47:1e:0b:8d:72:66:58:bd:
d6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AE:DA:A5:4E:EA:C0:94:77:0E:62:31:C0:92:AA:33:8C:45:20:EF
X509v3 Authority Key Identifier:
keyid:86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/2507CC0A21C711EF8308D721C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
117.18.96.0/24
117.18.98.0/24
117.18.101.0-117.18.102.255
117.18.105.0-117.18.108.255
117.18.110.0/24
117.18.112.0-117.18.116.255
117.18.119.0-117.18.121.255
117.18.124.0-117.18.126.255
202.181.137.0-202.181.138.255
202.181.140.0/22
202.181.150.0/24
202.181.152.0/24
202.181.154.0/24
202.181.157.0-202.181.176.255
202.181.178.0-202.181.187.255
202.181.189.0-202.181.203.255
202.181.205.0-202.181.217.255
202.181.219.0-202.181.231.255
202.181.233.0-202.181.249.255
IPv6:
2405:5d00::/64
Signature Algorithm: sha256WithRSAEncryption
42:6d:22:ac:84:63:dd:99:8b:e9:25:e1:df:0c:62:7c:a8:15:
95:e0:d5:3a:9f:14:9e:ed:f6:c7:5d:9f:3c:31:bd:1f:dc:ea:
2e:e9:3b:72:1a:3e:5b:fa:75:11:27:47:8e:68:a8:dc:c1:ef:
69:ed:c6:20:d5:db:ee:6b:d2:e4:7e:e7:2d:06:90:7b:a4:5f:
84:38:d6:fd:32:03:33:de:e9:f6:3d:e2:a0:39:90:63:c2:93:
29:78:78:76:ac:00:a7:d2:40:71:04:d7:62:e4:ef:52:6d:f4:
6a:cd:58:b7:94:ec:95:e1:97:ab:83:23:21:c5:a0:ad:0c:f5:
62:bf:0e:1a:9e:33:08:ec:b7:30:db:ea:35:bf:e4:6f:25:88:
62:d1:ce:e0:59:c1:69:ee:3a:55:d3:52:ce:04:0f:4a:62:0c:
2a:e5:d2:a7:25:63:77:ec:05:46:03:7f:18:a6:27:1f:ae:18:
5a:9a:cb:a4:b2:70:2f:3c:33:fb:0e:22:83:5c:ba:47:9c:0a:
c5:0e:7f:c1:72:45:84:ca:bd:75:7c:e7:c8:2a:0a:98:c4:43:
0d:c0:66:3f:e5:b2:46:1f:d3:92:21:4e:10:79:fa:d0:35:82:
4a:da:8a:04:88:bd:c5:b2:ae:f8:1a:72:b5:4a:1c:04:38:70:
79:1d:4a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:06 2025 by rpki-client