Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/EE7EBA22DB8A11EE9ED71965C4F9AE02.roa
File: EE7EBA22DB8A11EE9ED71965C4F9AE02.roa (raw, json)
Hash identifier: sw5oGJ/hfb+ZlaOI29ZedHNCBshSzpcs1YRQ5X9Wzbk=
Subject key identifier: 1A:89:EC:58:84:51:49:C6:FA:E7:4A:C3:13:0B:16:20:05:80:04:B1
Certificate issuer: /CN=A9120B99/serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4
Certificate serial: 33C4
Authority key identifier: 86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/EE7EBA22DB8A11EE9ED71965C4F9AE02.roa
Signing time: Wed 06 Mar 2024 07:27:05 +0000
ROA not before: Wed 06 Mar 2024 07:27:05 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 7540
IP address blocks: 117.18.96.0/24 maxlen: 24
117.18.98.0/24 maxlen: 24
117.18.101.0/24 maxlen: 24
117.18.102.0/24 maxlen: 24
117.18.103.0/24 maxlen: 24
117.18.105.0/24 maxlen: 24
117.18.106.0/24 maxlen: 24
117.18.107.0/24 maxlen: 24
117.18.108.0/24 maxlen: 24
117.18.110.0/24 maxlen: 24
117.18.112.0/24 maxlen: 24
117.18.113.0/24 maxlen: 24
117.18.114.0/24 maxlen: 24
117.18.115.0/24 maxlen: 24
117.18.116.0/24 maxlen: 24
117.18.119.0/24 maxlen: 24
117.18.120.0/24 maxlen: 24
117.18.121.0/24 maxlen: 24
117.18.124.0/24 maxlen: 24
117.18.125.0/24 maxlen: 24
117.18.126.0/24 maxlen: 24
202.181.137.0/24 maxlen: 24
202.181.138.0/24 maxlen: 24
202.181.139.0/24 maxlen: 24
202.181.140.0/24 maxlen: 24
202.181.141.0/24 maxlen: 24
202.181.142.0/24 maxlen: 24
202.181.143.0/24 maxlen: 24
202.181.148.0/24 maxlen: 24
202.181.150.0/24 maxlen: 24
202.181.152.0/24 maxlen: 24
202.181.154.0/24 maxlen: 24
202.181.156.0/24 maxlen: 24
202.181.157.0/24 maxlen: 24
202.181.158.0/24 maxlen: 24
202.181.159.0/24 maxlen: 24
202.181.160.0/24 maxlen: 24
202.181.161.0/24 maxlen: 24
202.181.162.0/24 maxlen: 24
202.181.163.0/24 maxlen: 24
202.181.164.0/24 maxlen: 24
202.181.165.0/24 maxlen: 24
202.181.166.0/24 maxlen: 24
202.181.167.0/24 maxlen: 24
202.181.168.0/24 maxlen: 24
202.181.169.0/24 maxlen: 24
202.181.170.0/24 maxlen: 24
202.181.171.0/24 maxlen: 24
202.181.172.0/24 maxlen: 24
202.181.173.0/24 maxlen: 24
202.181.174.0/24 maxlen: 24
202.181.175.0/24 maxlen: 24
202.181.176.0/24 maxlen: 24
202.181.178.0/24 maxlen: 24
202.181.179.0/24 maxlen: 24
202.181.180.0/24 maxlen: 24
202.181.181.0/24 maxlen: 24
202.181.182.0/24 maxlen: 24
202.181.183.0/24 maxlen: 24
202.181.184.0/24 maxlen: 24
202.181.185.0/24 maxlen: 24
202.181.186.0/24 maxlen: 24
202.181.187.0/24 maxlen: 24
202.181.189.0/24 maxlen: 24
202.181.190.0/24 maxlen: 24
202.181.191.0/24 maxlen: 24
202.181.192.0/24 maxlen: 24
202.181.193.0/24 maxlen: 24
202.181.194.0/24 maxlen: 24
202.181.195.0/24 maxlen: 24
202.181.196.0/24 maxlen: 24
202.181.197.0/24 maxlen: 24
202.181.198.0/24 maxlen: 24
202.181.199.0/24 maxlen: 24
202.181.200.0/24 maxlen: 24
202.181.201.0/24 maxlen: 24
202.181.202.0/24 maxlen: 24
202.181.203.0/24 maxlen: 24
202.181.205.0/24 maxlen: 24
202.181.206.0/24 maxlen: 24
202.181.207.0/24 maxlen: 24
202.181.208.0/24 maxlen: 24
202.181.209.0/24 maxlen: 24
202.181.210.0/24 maxlen: 24
202.181.211.0/24 maxlen: 24
202.181.212.0/24 maxlen: 24
202.181.213.0/24 maxlen: 24
202.181.214.0/24 maxlen: 24
202.181.215.0/24 maxlen: 24
202.181.216.0/24 maxlen: 24
202.181.217.0/24 maxlen: 24
202.181.219.0/24 maxlen: 24
202.181.220.0/24 maxlen: 24
202.181.221.0/24 maxlen: 24
202.181.222.0/24 maxlen: 24
202.181.223.0/24 maxlen: 24
202.181.224.0/24 maxlen: 24
202.181.225.0/24 maxlen: 24
202.181.226.0/24 maxlen: 24
202.181.227.0/24 maxlen: 24
202.181.228.0/24 maxlen: 24
202.181.229.0/24 maxlen: 24
202.181.230.0/24 maxlen: 24
202.181.231.0/24 maxlen: 24
202.181.233.0/24 maxlen: 24
202.181.234.0/24 maxlen: 24
202.181.235.0/24 maxlen: 24
202.181.236.0/24 maxlen: 24
202.181.237.0/24 maxlen: 24
202.181.238.0/24 maxlen: 24
202.181.239.0/24 maxlen: 24
202.181.240.0/24 maxlen: 24
202.181.241.0/24 maxlen: 24
202.181.242.0/24 maxlen: 24
202.181.243.0/24 maxlen: 24
202.181.244.0/24 maxlen: 24
202.181.245.0/24 maxlen: 24
202.181.246.0/24 maxlen: 24
202.181.247.0/24 maxlen: 24
202.181.248.0/23 maxlen: 24
2405:5d00::/64 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13252 (0x33c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120B99/serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4
Validity
Not Before: Mar 6 07:27:05 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=65e81ac9-ed35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:49:80:56:d0:ae:f1:81:32:3f:11:93:74:fd:
68:91:08:37:8e:0e:b1:23:f6:ba:48:9b:e2:26:bb:
c9:07:f7:11:f6:3a:dd:e6:31:f6:31:ea:3e:af:ed:
b4:d0:1f:3b:9f:5b:93:ae:ee:69:55:22:63:cc:aa:
1c:76:e2:ae:2c:3d:5a:73:d2:50:89:4d:87:0c:00:
68:da:fb:8c:a7:9d:30:2e:d8:ff:e8:7f:82:39:b1:
94:78:7c:be:c7:56:8e:25:4d:22:76:2c:ad:eb:90:
5f:1d:bf:cb:d7:b8:16:1b:fc:b2:29:71:76:4e:3e:
ec:4c:a5:3f:45:d0:4b:f6:0b:f9:ca:d4:9d:e2:1b:
96:72:8a:37:9f:2f:a5:14:77:1c:73:c3:04:98:ff:
89:4f:63:53:2a:e3:3f:2c:d0:ae:58:5c:e7:dc:34:
67:af:ca:21:5e:fc:f4:d1:73:93:1c:39:03:f6:0f:
67:6f:fd:6f:27:7f:6b:8e:7d:5d:7b:2c:b6:03:c3:
5b:5b:bf:63:c3:fa:f8:3e:8f:88:02:9c:37:80:79:
e5:61:e7:03:5a:71:67:d6:81:da:7c:c4:93:f8:ac:
4f:2e:f6:df:01:91:70:06:e8:9e:32:9c:f8:3a:3e:
7e:92:14:48:b7:3c:68:f4:bb:e0:72:e4:81:77:c4:
aa:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:89:EC:58:84:51:49:C6:FA:E7:4A:C3:13:0B:16:20:05:80:04:B1
X509v3 Authority Key Identifier:
keyid:86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/EE7EBA22DB8A11EE9ED71965C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
117.18.96.0/24
117.18.98.0/24
117.18.101.0-117.18.103.255
117.18.105.0-117.18.108.255
117.18.110.0/24
117.18.112.0-117.18.116.255
117.18.119.0-117.18.121.255
117.18.124.0-117.18.126.255
202.181.137.0-202.181.143.255
202.181.148.0/24
202.181.150.0/24
202.181.152.0/24
202.181.154.0/24
202.181.156.0-202.181.176.255
202.181.178.0-202.181.187.255
202.181.189.0-202.181.203.255
202.181.205.0-202.181.217.255
202.181.219.0-202.181.231.255
202.181.233.0-202.181.249.255
IPv6:
2405:5d00::/64
Signature Algorithm: sha256WithRSAEncryption
39:fa:ea:9c:98:75:1a:ae:b0:1f:0f:c6:3c:39:0b:27:7c:59:
34:e7:f8:7e:60:ba:34:f5:c9:50:23:f6:28:0e:d0:3c:81:14:
28:69:7d:ea:5d:c9:64:82:c5:22:a0:61:60:c3:2c:35:27:c9:
b0:ef:4a:16:d0:7c:67:38:97:a2:1a:5f:bf:e8:24:ee:a8:fa:
f9:f0:2c:a2:36:96:37:92:62:73:fa:82:78:a6:c7:0e:29:b4:
8b:11:56:90:d9:ff:76:b1:a9:9c:d5:5e:16:e4:43:b4:d1:bf:
8e:60:6f:99:ba:49:46:ee:94:94:ee:65:89:a6:34:48:63:58:
05:6a:76:6a:29:94:2d:4a:a8:06:02:90:5b:ce:2f:c5:db:39:
92:b4:e4:a0:ea:44:d1:19:fb:9d:4f:57:8a:0c:ce:3a:26:9a:
45:14:73:df:af:27:63:b8:22:28:c0:c1:55:29:be:f2:b9:23:
1b:83:da:a2:b5:83:ba:d5:a5:ab:e4:6d:b7:c5:96:59:de:28:
eb:4f:c0:63:5f:07:45:31:b3:42:a4:d1:48:25:1b:e5:31:78:
31:6a:41:e3:78:85:f6:aa:ca:e6:b5:27:c5:83:65:01:f2:c6:
f1:5a:18:b2:72:73:33:82:22:78:d0:70:2d:02:83:a1:98:9a:
93:bf:88:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:56 2024 by rpki-client on console-fra.rpki-client.org