Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/46728D666E2711EE98435F74C4F9AE02.roa
File: 46728D666E2711EE98435F74C4F9AE02.roa (raw, json)
Hash identifier: SXUqWrQMKZf9iQo7I+y4W4/EmTRlV9wPFsh4AqaSHUE=
Subject key identifier: 8A:3E:25:C9:2E:04:8E:A3:B3:1D:42:52:7D:C7:AE:8C:B7:34:35:C2
Certificate issuer: /CN=A9120B99/serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4
Certificate serial: 3363
Authority key identifier: 86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/46728D666E2711EE98435F74C4F9AE02.roa
Signing time: Thu 19 Oct 2023 02:29:06 +0000
ROA not before: Thu 19 Oct 2023 02:29:06 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 7540
IP address blocks: 117.18.96.0/24 maxlen: 24
117.18.98.0/24 maxlen: 24
117.18.101.0/24 maxlen: 24
117.18.102.0/24 maxlen: 24
117.18.103.0/24 maxlen: 24
117.18.104.0/24 maxlen: 24
117.18.105.0/24 maxlen: 24
117.18.106.0/24 maxlen: 24
117.18.107.0/24 maxlen: 24
117.18.108.0/24 maxlen: 24
117.18.110.0/24 maxlen: 24
117.18.112.0/24 maxlen: 24
117.18.113.0/24 maxlen: 24
117.18.114.0/24 maxlen: 24
117.18.115.0/24 maxlen: 24
117.18.116.0/24 maxlen: 24
117.18.119.0/24 maxlen: 24
117.18.120.0/24 maxlen: 24
117.18.121.0/24 maxlen: 24
117.18.124.0/24 maxlen: 24
117.18.125.0/24 maxlen: 24
117.18.126.0/24 maxlen: 24
202.181.137.0/24 maxlen: 24
202.181.138.0/24 maxlen: 24
202.181.139.0/24 maxlen: 24
202.181.140.0/24 maxlen: 24
202.181.141.0/24 maxlen: 24
202.181.142.0/24 maxlen: 24
202.181.143.0/24 maxlen: 24
202.181.148.0/24 maxlen: 24
202.181.150.0/24 maxlen: 24
202.181.151.0/24 maxlen: 24
202.181.152.0/24 maxlen: 24
202.181.153.0/24 maxlen: 24
202.181.154.0/24 maxlen: 24
202.181.156.0/24 maxlen: 24
202.181.157.0/24 maxlen: 24
202.181.158.0/24 maxlen: 24
202.181.159.0/24 maxlen: 24
202.181.160.0/24 maxlen: 24
202.181.161.0/24 maxlen: 24
202.181.162.0/24 maxlen: 24
202.181.163.0/24 maxlen: 24
202.181.164.0/24 maxlen: 24
202.181.165.0/24 maxlen: 24
202.181.166.0/24 maxlen: 24
202.181.167.0/24 maxlen: 24
202.181.168.0/24 maxlen: 24
202.181.169.0/24 maxlen: 24
202.181.170.0/24 maxlen: 24
202.181.171.0/24 maxlen: 24
202.181.172.0/24 maxlen: 24
202.181.173.0/24 maxlen: 24
202.181.174.0/24 maxlen: 24
202.181.175.0/24 maxlen: 24
202.181.176.0/24 maxlen: 24
202.181.177.0/24 maxlen: 24
202.181.178.0/24 maxlen: 24
202.181.179.0/24 maxlen: 24
202.181.180.0/24 maxlen: 24
202.181.181.0/24 maxlen: 24
202.181.182.0/24 maxlen: 24
202.181.183.0/24 maxlen: 24
202.181.184.0/24 maxlen: 24
202.181.185.0/24 maxlen: 24
202.181.186.0/24 maxlen: 24
202.181.187.0/24 maxlen: 24
202.181.188.0/24 maxlen: 24
202.181.189.0/24 maxlen: 24
202.181.190.0/24 maxlen: 24
202.181.191.0/24 maxlen: 24
202.181.192.0/24 maxlen: 24
202.181.193.0/24 maxlen: 24
202.181.194.0/24 maxlen: 24
202.181.195.0/24 maxlen: 24
202.181.196.0/24 maxlen: 24
202.181.197.0/24 maxlen: 24
202.181.198.0/24 maxlen: 24
202.181.199.0/24 maxlen: 24
202.181.200.0/24 maxlen: 24
202.181.201.0/24 maxlen: 24
202.181.202.0/24 maxlen: 24
202.181.203.0/24 maxlen: 24
202.181.204.0/24 maxlen: 24
202.181.205.0/24 maxlen: 24
202.181.206.0/24 maxlen: 24
202.181.207.0/24 maxlen: 24
202.181.208.0/24 maxlen: 24
202.181.209.0/24 maxlen: 24
202.181.210.0/24 maxlen: 24
202.181.211.0/24 maxlen: 24
202.181.212.0/24 maxlen: 24
202.181.213.0/24 maxlen: 24
202.181.214.0/24 maxlen: 24
202.181.215.0/24 maxlen: 24
202.181.216.0/24 maxlen: 24
202.181.217.0/24 maxlen: 24
202.181.219.0/24 maxlen: 24
202.181.220.0/24 maxlen: 24
202.181.221.0/24 maxlen: 24
202.181.222.0/24 maxlen: 24
202.181.223.0/24 maxlen: 24
202.181.224.0/24 maxlen: 24
202.181.225.0/24 maxlen: 24
202.181.226.0/24 maxlen: 24
202.181.227.0/24 maxlen: 24
202.181.228.0/24 maxlen: 24
202.181.229.0/24 maxlen: 24
202.181.230.0/24 maxlen: 24
202.181.231.0/24 maxlen: 24
202.181.233.0/24 maxlen: 24
202.181.234.0/24 maxlen: 24
202.181.235.0/24 maxlen: 24
202.181.236.0/24 maxlen: 24
202.181.237.0/24 maxlen: 24
202.181.238.0/24 maxlen: 24
202.181.239.0/24 maxlen: 24
202.181.240.0/24 maxlen: 24
202.181.241.0/24 maxlen: 24
202.181.242.0/24 maxlen: 24
202.181.243.0/24 maxlen: 24
202.181.244.0/24 maxlen: 24
202.181.245.0/24 maxlen: 24
202.181.246.0/24 maxlen: 24
202.181.247.0/24 maxlen: 24
202.181.248.0/23 maxlen: 24
2405:5d00::/64 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13155 (0x3363)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120B99
Validity
Not Before: Oct 19 02:29:06 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=65309472-ffd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0f:1c:4c:b8:43:50:18:f0:c7:90:e2:15:04:
1c:6b:3a:b5:d6:0d:6f:23:12:19:13:98:3f:5b:07:
5f:e9:c7:b2:b0:61:df:0d:e8:90:13:dd:f0:14:28:
7a:79:a3:af:c8:d4:99:35:19:79:a7:cc:57:45:28:
09:f5:08:37:db:7c:f4:36:fc:8f:fd:ca:61:09:2a:
4a:cc:9e:bf:62:5b:e0:ef:ea:e2:f8:a7:23:da:8f:
3f:87:14:b8:d0:ab:36:d9:1c:49:c3:19:9a:08:f9:
32:78:65:be:9b:bb:eb:4a:97:ee:fc:04:58:44:d2:
9f:36:c3:a4:80:66:52:6f:f1:41:95:08:5a:7d:74:
89:11:e7:ed:4d:e9:22:89:f6:95:6f:88:49:d4:72:
f5:4f:25:4d:7e:96:22:d6:e0:fc:c4:60:48:41:c9:
02:7b:2c:8b:c3:39:66:be:2f:f0:aa:be:06:57:ac:
e2:34:83:dc:4e:42:83:b6:ee:27:4b:95:92:35:10:
c7:e3:4d:be:69:bc:93:1b:38:4c:c4:9b:42:08:ce:
c2:20:00:6b:b4:25:49:a3:54:4c:fd:d0:8f:4c:a4:
b5:2b:93:a7:d8:7a:e7:d6:6b:f2:0d:a8:a0:f6:be:
a7:0d:f1:c9:2c:3b:05:9f:7b:dd:70:6a:35:3d:47:
6f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3E:25:C9:2E:04:8E:A3:B3:1D:42:52:7D:C7:AE:8C:B7:34:35:C2
X509v3 Authority Key Identifier:
keyid:86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/46728D666E2711EE98435F74C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
117.18.96.0/24
117.18.98.0/24
117.18.101.0-117.18.108.255
117.18.110.0/24
117.18.112.0-117.18.116.255
117.18.119.0-117.18.121.255
117.18.124.0-117.18.126.255
202.181.137.0-202.181.143.255
202.181.148.0/24
202.181.150.0-202.181.154.255
202.181.156.0-202.181.217.255
202.181.219.0-202.181.231.255
202.181.233.0-202.181.249.255
IPv6:
2405:5d00::/64
Signature Algorithm: sha256WithRSAEncryption
23:7d:8c:a3:be:02:4c:49:7e:a8:5a:eb:f1:dc:bc:0e:fc:d1:
71:83:0d:e9:3e:3d:3f:90:90:c7:6b:0e:c1:1b:24:58:b3:96:
ce:4d:05:a2:16:91:a8:6d:02:c6:64:77:5a:4d:8d:3a:73:4f:
eb:cb:23:4d:0b:28:d7:86:fb:4f:d5:28:8e:d0:57:28:83:7c:
5c:2e:b5:b3:94:6c:3f:67:08:96:96:da:2f:e2:19:6c:5c:06:
92:9b:b3:67:2d:a7:8b:52:3b:05:c7:cc:9b:18:c2:4a:48:19:
aa:f2:50:c1:8f:e0:2c:c6:b2:9c:4f:e5:f8:d6:59:04:b7:e9:
5c:82:fb:ae:35:d6:05:d5:be:d4:32:31:fa:b2:47:99:41:69:
15:95:6e:4a:d6:72:02:8c:b2:02:25:89:b5:54:a8:dd:0a:34:
40:f0:d2:5f:72:68:9f:74:4b:9c:9b:a4:70:fb:6d:f1:35:10:
12:6f:16:2c:0a:69:40:c2:21:0d:a2:f9:00:59:4e:a7:fb:4c:
4a:01:74:a1:53:37:f5:ee:4a:3b:16:7a:ab:c5:18:9c:21:0e:
99:9e:20:56:c8:10:59:6d:3d:4d:1e:63:fa:8b:ce:3d:5d:1d:
38:73:68:06:58:d4:8d:b4:ba:b9:f4:ba:d6:51:c3:f9:9d:4c:
ef:b5:1e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:26 2025 by rpki-client