Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/875E3760EBF611EE95A7EF65C4F9AE02.roa
File: 875E3760EBF611EE95A7EF65C4F9AE02.roa (raw, json)
Hash identifier: zW0+8s5gxQEUIfZoWyTaKNsEMpC+hI/BmeIDsvKseiw=
Subject key identifier: A2:1A:6D:08:9A:A3:3F:08:29:EE:12:2F:73:D1:F2:85:50:44:43:6A
Certificate issuer: /CN=A9120B99/serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4
Certificate serial: 33D6
Authority key identifier: 86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/875E3760EBF611EE95A7EF65C4F9AE02.roa
Signing time: Wed 27 Mar 2024 04:57:36 +0000
ROA not before: Wed 27 Mar 2024 04:57:36 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 7540
IP address blocks: 117.18.96.0/24 maxlen: 24
117.18.98.0/24 maxlen: 24
117.18.101.0/24 maxlen: 24
117.18.102.0/24 maxlen: 24
117.18.103.0/24 maxlen: 24
117.18.105.0/24 maxlen: 24
117.18.106.0/24 maxlen: 24
117.18.107.0/24 maxlen: 24
117.18.108.0/24 maxlen: 24
117.18.110.0/24 maxlen: 24
117.18.112.0/24 maxlen: 24
117.18.113.0/24 maxlen: 24
117.18.114.0/24 maxlen: 24
117.18.115.0/24 maxlen: 24
117.18.116.0/24 maxlen: 24
117.18.119.0/24 maxlen: 24
117.18.120.0/24 maxlen: 24
117.18.121.0/24 maxlen: 24
117.18.124.0/24 maxlen: 24
117.18.125.0/24 maxlen: 24
117.18.126.0/24 maxlen: 24
202.181.137.0/24 maxlen: 24
202.181.138.0/24 maxlen: 24
202.181.140.0/24 maxlen: 24
202.181.141.0/24 maxlen: 24
202.181.142.0/24 maxlen: 24
202.181.143.0/24 maxlen: 24
202.181.150.0/24 maxlen: 24
202.181.152.0/24 maxlen: 24
202.181.154.0/24 maxlen: 24
202.181.156.0/24 maxlen: 24
202.181.157.0/24 maxlen: 24
202.181.158.0/24 maxlen: 24
202.181.159.0/24 maxlen: 24
202.181.160.0/24 maxlen: 24
202.181.161.0/24 maxlen: 24
202.181.162.0/24 maxlen: 24
202.181.163.0/24 maxlen: 24
202.181.164.0/24 maxlen: 24
202.181.165.0/24 maxlen: 24
202.181.166.0/24 maxlen: 24
202.181.167.0/24 maxlen: 24
202.181.168.0/24 maxlen: 24
202.181.169.0/24 maxlen: 24
202.181.170.0/24 maxlen: 24
202.181.171.0/24 maxlen: 24
202.181.172.0/24 maxlen: 24
202.181.173.0/24 maxlen: 24
202.181.174.0/24 maxlen: 24
202.181.175.0/24 maxlen: 24
202.181.176.0/24 maxlen: 24
202.181.178.0/24 maxlen: 24
202.181.179.0/24 maxlen: 24
202.181.180.0/24 maxlen: 24
202.181.181.0/24 maxlen: 24
202.181.182.0/24 maxlen: 24
202.181.183.0/24 maxlen: 24
202.181.184.0/24 maxlen: 24
202.181.185.0/24 maxlen: 24
202.181.186.0/24 maxlen: 24
202.181.187.0/24 maxlen: 24
202.181.189.0/24 maxlen: 24
202.181.190.0/24 maxlen: 24
202.181.191.0/24 maxlen: 24
202.181.192.0/24 maxlen: 24
202.181.193.0/24 maxlen: 24
202.181.194.0/24 maxlen: 24
202.181.195.0/24 maxlen: 24
202.181.196.0/24 maxlen: 24
202.181.197.0/24 maxlen: 24
202.181.198.0/24 maxlen: 24
202.181.199.0/24 maxlen: 24
202.181.200.0/24 maxlen: 24
202.181.201.0/24 maxlen: 24
202.181.202.0/24 maxlen: 24
202.181.203.0/24 maxlen: 24
202.181.205.0/24 maxlen: 24
202.181.206.0/24 maxlen: 24
202.181.207.0/24 maxlen: 24
202.181.208.0/24 maxlen: 24
202.181.209.0/24 maxlen: 24
202.181.210.0/24 maxlen: 24
202.181.211.0/24 maxlen: 24
202.181.212.0/24 maxlen: 24
202.181.213.0/24 maxlen: 24
202.181.214.0/24 maxlen: 24
202.181.215.0/24 maxlen: 24
202.181.216.0/24 maxlen: 24
202.181.217.0/24 maxlen: 24
202.181.219.0/24 maxlen: 24
202.181.220.0/24 maxlen: 24
202.181.221.0/24 maxlen: 24
202.181.222.0/24 maxlen: 24
202.181.223.0/24 maxlen: 24
202.181.224.0/24 maxlen: 24
202.181.225.0/24 maxlen: 24
202.181.226.0/24 maxlen: 24
202.181.227.0/24 maxlen: 24
202.181.228.0/24 maxlen: 24
202.181.229.0/24 maxlen: 24
202.181.230.0/24 maxlen: 24
202.181.231.0/24 maxlen: 24
202.181.233.0/24 maxlen: 24
202.181.234.0/24 maxlen: 24
202.181.235.0/24 maxlen: 24
202.181.236.0/24 maxlen: 24
202.181.237.0/24 maxlen: 24
202.181.238.0/24 maxlen: 24
202.181.239.0/24 maxlen: 24
202.181.240.0/24 maxlen: 24
202.181.241.0/24 maxlen: 24
202.181.242.0/24 maxlen: 24
202.181.243.0/24 maxlen: 24
202.181.244.0/24 maxlen: 24
202.181.245.0/24 maxlen: 24
202.181.246.0/24 maxlen: 24
202.181.247.0/24 maxlen: 24
202.181.248.0/23 maxlen: 24
2405:5d00::/64 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13270 (0x33d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120B99/serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4
Validity
Not Before: Mar 27 04:57:36 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6603a740-926e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f0:98:59:69:47:6d:d6:9a:23:47:07:b1:99:
2e:16:60:75:1b:b5:37:b9:df:db:1c:c1:29:43:7b:
59:97:7c:7b:92:6c:8f:28:56:3a:6f:a7:17:e0:a7:
40:62:2b:d0:03:60:6d:df:c5:cc:91:66:6c:6d:d3:
e5:d5:25:4b:0c:23:5d:28:06:3d:7f:0c:db:17:bf:
9f:e2:5e:c0:58:18:70:91:84:ef:c3:dc:c9:43:0e:
8e:e5:08:91:e4:48:c6:80:41:50:6c:18:90:a0:00:
96:4f:37:02:c0:13:34:75:2c:c4:fa:76:11:0c:a9:
97:32:56:a8:e9:67:d8:d2:4f:b9:0a:b5:39:ff:35:
d0:50:04:6c:c2:12:c2:4a:ac:17:fb:5e:55:6b:f1:
bc:a9:f5:59:5a:4c:ce:e0:7a:62:46:92:79:42:fa:
cd:31:7d:ce:50:2e:2a:c0:d7:62:ce:e9:e8:13:45:
4e:72:4a:2a:66:49:8c:db:bf:af:dd:d9:25:34:c9:
13:67:d4:f2:54:f4:d5:26:43:b2:75:ae:33:ba:68:
95:a4:7e:3c:75:cd:09:11:60:8c:41:45:7b:af:0e:
e5:47:2d:ff:bc:3f:f8:b5:7d:6f:ba:82:ea:75:7a:
31:ad:25:6e:0c:c6:8e:3c:19:f6:1c:18:77:0a:63:
35:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1A:6D:08:9A:A3:3F:08:29:EE:12:2F:73:D1:F2:85:50:44:43:6A
X509v3 Authority Key Identifier:
keyid:86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/875E3760EBF611EE95A7EF65C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
117.18.96.0/24
117.18.98.0/24
117.18.101.0-117.18.103.255
117.18.105.0-117.18.108.255
117.18.110.0/24
117.18.112.0-117.18.116.255
117.18.119.0-117.18.121.255
117.18.124.0-117.18.126.255
202.181.137.0-202.181.138.255
202.181.140.0/22
202.181.150.0/24
202.181.152.0/24
202.181.154.0/24
202.181.156.0-202.181.176.255
202.181.178.0-202.181.187.255
202.181.189.0-202.181.203.255
202.181.205.0-202.181.217.255
202.181.219.0-202.181.231.255
202.181.233.0-202.181.249.255
IPv6:
2405:5d00::/64
Signature Algorithm: sha256WithRSAEncryption
47:98:aa:24:dc:1b:c1:0f:c1:54:67:b3:cf:41:2c:24:17:dd:
be:3f:7c:1a:20:57:65:80:71:fe:6e:b3:bc:51:51:8c:79:33:
0a:e4:88:c8:ab:0b:43:0d:2f:ab:8a:8c:99:8e:6c:9f:94:7c:
39:b5:f0:2e:b1:db:93:c9:ac:b5:11:b2:eb:4e:55:bd:c1:20:
e5:6e:8d:67:81:55:98:84:24:57:68:27:5d:9b:cf:a9:c8:78:
ce:80:39:e8:b1:0e:f9:f1:5f:35:b9:de:aa:38:c9:39:5e:e1:
ca:c8:84:48:52:a6:08:f3:39:11:58:a4:0f:75:af:38:bc:04:
e0:f0:29:99:9d:5d:9f:d0:3a:71:42:d3:02:1f:38:2f:f4:36:
17:5f:70:12:78:c2:7a:2f:2e:5e:fc:3d:d2:12:a1:9c:56:ca:
df:0b:e0:b5:43:d5:a8:1d:40:56:a4:a9:d4:b7:bd:e8:f6:30:
fc:dd:d5:7c:e2:ac:28:5f:30:68:df:26:a8:c5:9d:1a:d4:a8:
eb:82:7f:c8:c1:5a:03:44:1c:a2:d7:a8:19:fa:83:08:d9:ca:
6d:31:fe:56:c2:c1:5f:83:0f:79:da:41:2b:4e:c3:84:42:8f:
cd:04:68:e0:18:19:6d:b3:93:7c:b8:07:77:76:63:0f:77:d6:
2b:79:a1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:47 2024 by rpki-client on console-ams.rpki-client.org