Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2BDA99A2E93811EFA671E32BC4F9AE02.roa
File: 2BDA99A2E93811EFA671E32BC4F9AE02.roa (raw, json)
Hash identifier: EJOay61YKVxUfq1RZi0pvcQVmtxKYGFVgZ7f2/AVj5A=
Subject key identifier: 52:1B:60:A5:7E:FD:76:56:53:A4:30:D9:EA:71:CB:7E:DE:92:0F:E6
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A5EF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2BDA99A2E93811EFA671E32BC4F9AE02.roa
Signing time: Wed 12 Feb 2025 11:54:53 +0000
ROA not before: Wed 12 Feb 2025 11:54:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.225.0.0/22 maxlen: 24
43.229.200.0/22 maxlen: 24
43.231.116.0/22 maxlen: 24
43.239.112.0/22 maxlen: 24
45.114.156.0/22 maxlen: 24
103.14.196.0/22 maxlen: 24
103.16.140.0/22 maxlen: 24
103.26.169.0/24 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.41.40.0/22 maxlen: 24
103.47.152.0/24 maxlen: 24
103.51.92.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.54.96.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.82.144.0/22 maxlen: 24
103.86.20.0/22 maxlen: 24
103.88.124.0/22 maxlen: 24
103.108.76.0/22 maxlen: 24
103.111.128.0/22 maxlen: 24
103.118.8.0/22 maxlen: 24
103.132.203.0/24 maxlen: 24
103.133.116.0/24 maxlen: 24
103.139.88.0/23 maxlen: 24
103.142.64.0/23 maxlen: 24
103.143.109.0/24 maxlen: 24
103.143.215.0/24 maxlen: 24
103.144.112.0/23 maxlen: 24
103.153.208.0/23 maxlen: 24
103.154.26.0/24 maxlen: 24
103.155.194.0/23 maxlen: 24
103.158.180.0/24 maxlen: 24
103.159.137.0/24 maxlen: 24
103.167.157.0/24 maxlen: 24
103.169.58.0/23 maxlen: 24
103.171.8.0/23 maxlen: 24
103.171.236.0/23 maxlen: 24
103.173.14.0/23 maxlen: 24
103.173.41.0/24 maxlen: 24
103.174.42.0/23 maxlen: 24
103.175.106.0/23 maxlen: 24
103.180.216.0/23 maxlen: 24
103.192.72.0/22 maxlen: 24
103.199.92.0/22 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.212.132.0/22 maxlen: 24
103.224.50.0/23 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
103.228.184.0/22 maxlen: 24
103.236.112.0/22 maxlen: 24
103.242.236.0/22 maxlen: 24
103.254.200.0/22 maxlen: 24
137.59.204.0/22 maxlen: 24
139.5.96.0/22 maxlen: 24
203.191.56.0/22 maxlen: 24
220.158.140.0/22 maxlen: 24
2400:d180:66::/48 maxlen: 48
2400:d180:67::/48 maxlen: 48
2400:d180:68::/48 maxlen: 48
2400:d180:69::/48 maxlen: 48
2400:d180:70::/48 maxlen: 48
2400:d180:71::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42479 (0xa5ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Feb 12 11:54:53 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67ac8c0d-e43a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:44:d1:72:98:2d:bd:a5:99:b8:15:b1:ac:b7:
7a:42:02:af:52:07:4a:18:0e:9d:e1:08:b6:c2:5b:
a2:52:44:b5:02:d4:1e:06:e8:df:b6:b8:31:d0:06:
f8:d4:c8:c9:1e:c7:8c:fe:2d:af:2e:5f:4f:fb:82:
68:dc:9a:e6:b5:d3:5b:0c:ed:87:38:56:3d:79:2e:
f2:ed:68:e6:8f:ff:6d:70:25:f5:20:01:b9:17:f6:
57:72:34:3a:84:c5:95:d9:43:dc:47:46:14:51:96:
9b:b6:de:3a:55:ce:45:1d:b1:5d:e4:0d:70:f6:08:
0e:30:40:89:5f:2d:20:5a:6a:e6:fb:2b:f8:83:08:
4f:6c:2d:87:11:65:9a:89:92:39:ec:a8:8c:b6:57:
a5:28:ec:8c:b3:6b:92:f9:80:15:8a:1e:a4:d5:25:
9d:95:77:00:25:b1:4d:e3:c2:84:1d:aa:10:30:41:
03:e6:10:97:04:0f:b5:14:e0:6c:a9:d3:96:28:7d:
0b:14:53:73:55:db:f0:e7:da:1a:26:14:74:5a:f6:
1e:fa:99:34:1c:56:57:a9:26:a9:fc:72:11:37:5d:
9e:aa:fb:85:4b:e6:30:8f:59:4d:4b:2b:54:08:bc:
40:a7:c0:38:79:0e:38:03:50:d6:ef:be:40:29:23:
ef:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1B:60:A5:7E:FD:76:56:53:A4:30:D9:EA:71:CB:7E:DE:92:0F:E6
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2BDA99A2E93811EFA671E32BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.0.0/22
43.229.200.0/22
43.231.116.0/22
43.239.112.0/22
45.114.156.0/22
103.14.196.0/22
103.16.140.0/22
103.26.169.0/24
103.27.168.0/24
103.27.170.0/23
103.41.40.0/22
103.47.152.0/24
103.51.92.0/22
103.52.48.0/22
103.54.96.0/22
103.55.84.0/22
103.82.144.0/22
103.86.20.0/22
103.88.124.0/22
103.108.76.0/22
103.111.128.0/22
103.118.8.0/22
103.132.203.0/24
103.133.116.0/24
103.139.88.0/23
103.142.64.0/23
103.143.109.0/24
103.143.215.0/24
103.144.112.0/23
103.153.208.0/23
103.154.26.0/24
103.155.194.0/23
103.158.180.0/24
103.159.137.0/24
103.167.157.0/24
103.169.58.0/23
103.171.8.0/23
103.171.236.0/23
103.173.14.0/23
103.173.41.0/24
103.174.42.0/23
103.175.106.0/23
103.180.216.0/23
103.192.72.0/22
103.199.92.0/22
103.200.48.0/22
103.206.64.0/22
103.212.132.0/22
103.224.50.0/23
103.226.224.0/22
103.228.172.0/22
103.228.184.0/22
103.236.112.0/22
103.242.236.0/22
103.254.200.0/22
137.59.204.0/22
139.5.96.0/22
203.191.56.0/22
220.158.140.0/22
IPv6:
2400:d180:66::-2400:d180:69:ffff:ffff:ffff:ffff:ffff
2400:d180:70::/47
Signature Algorithm: sha256WithRSAEncryption
11:f1:60:c4:5b:e8:42:db:c1:3f:5f:aa:73:9a:04:31:92:f3:
04:6c:99:20:45:f1:09:bd:09:0a:60:01:5a:bf:c5:ed:61:63:
44:ec:7c:10:3a:84:5d:17:24:98:3c:e8:19:75:3e:21:65:de:
46:e3:49:23:f5:c8:f7:1d:f5:ec:f1:29:c7:e1:17:03:c4:59:
98:e6:6b:17:3a:58:e3:5a:81:d7:2c:79:ed:6d:7c:31:39:c0:
86:fa:02:85:13:fc:d6:75:05:30:38:7b:fd:93:0d:da:e4:c6:
d1:34:aa:fb:0a:d0:92:ca:ea:fe:88:c6:d2:9d:fb:70:fa:7c:
8d:4d:ff:34:ff:b4:a5:b3:76:77:ce:9e:78:cc:82:db:4f:29:
3c:f2:b0:0b:06:d4:f2:f5:16:12:0e:51:d4:91:49:56:86:54:
d4:fc:18:4b:d8:fb:ec:d7:4f:b0:5d:c6:1f:e3:2d:83:dc:93:
22:dd:86:be:b2:aa:3d:d7:0b:2e:f1:4b:4d:f6:59:3f:7c:01:
f2:d1:6e:30:a3:41:92:9a:48:1b:00:54:c0:0e:ea:13:31:6e:
42:db:22:29:99:c9:15:26:c0:82:b1:6b:1a:d7:ed:93:aa:96:
c2:5b:bf:ab:a4:84:6d:6a:1c:53:c6:3f:84:fa:ca:19:e7:9d:
a7:44:e4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 20:20:51 2025 by rpki-client