Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BE92FEEC9CEE11EFB2F9AB7EC4F9AE02.roa
File: BE92FEEC9CEE11EFB2F9AB7EC4F9AE02.roa (raw, json)
Hash identifier: unJwAU86DauglQjKB1yJ5Bj4iiNa2knzSd0FnCa+/R0=
Subject key identifier: 92:57:0B:05:02:82:3A:2C:D2:82:36:6F:D8:D6:9D:AF:E5:CC:45:62
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9CC6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BE92FEEC9CEE11EFB2F9AB7EC4F9AE02.roa
Signing time: Thu 07 Nov 2024 09:57:49 +0000
ROA not before: Thu 07 Nov 2024 09:57:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133647
IP address blocks: 43.229.162.0/24 maxlen: 24
43.230.156.0/22 maxlen: 24
45.115.252.0/22 maxlen: 24
45.116.68.0/22 maxlen: 24
103.38.70.0/24 maxlen: 24
103.43.4.0/22 maxlen: 24
103.50.4.0/22 maxlen: 24
103.55.6.0/23 maxlen: 24
103.61.102.0/23 maxlen: 24
103.69.216.0/22 maxlen: 24
103.70.144.0/22 maxlen: 24
103.70.176.0/23 maxlen: 24
103.79.112.0/22 maxlen: 24
103.87.48.0/24 maxlen: 24
103.87.49.0/24 maxlen: 24
103.91.68.0/22 maxlen: 24
103.93.176.0/22 maxlen: 24
103.109.72.0/23 maxlen: 24
103.122.85.0/24 maxlen: 24
103.129.194.0/24 maxlen: 24
103.129.195.0/24 maxlen: 24
103.144.37.0/24 maxlen: 24
103.156.168.0/23 maxlen: 24
103.157.160.0/23 maxlen: 24
103.159.154.0/23 maxlen: 24
103.161.230.0/23 maxlen: 24
103.161.232.0/24 maxlen: 24
103.161.233.0/24 maxlen: 24
103.174.105.0/24 maxlen: 24
103.175.76.0/24 maxlen: 24
103.175.77.0/24 maxlen: 24
103.176.71.0/24 maxlen: 24
103.177.61.0/24 maxlen: 24
103.214.97.0/24 maxlen: 24
103.220.28.0/24 maxlen: 24
103.220.29.0/24 maxlen: 24
103.220.30.0/24 maxlen: 24
103.220.31.0/24 maxlen: 24
103.237.172.0/24 maxlen: 24
103.237.173.0/24 maxlen: 24
103.237.174.0/24 maxlen: 24
103.237.175.0/24 maxlen: 24
110.172.141.0/24 maxlen: 24
110.172.163.0/24 maxlen: 24
110.172.172.0/24 maxlen: 24
175.111.180.0/24 maxlen: 24
175.111.182.0/24 maxlen: 24
175.111.183.0/24 maxlen: 24
202.89.73.0/24 maxlen: 24
2001:df0:dc80::/48 maxlen: 48
2001:df1:b280::/48 maxlen: 48
2001:df1:f440::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40134 (0x9cc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Nov 7 09:57:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=672c8f1c-a3fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3b:75:fc:a0:bd:d4:e2:2e:7c:14:be:f7:49:
3b:c6:a3:dd:00:68:5e:a9:f8:31:8f:16:e1:05:b5:
6a:ab:b4:30:ab:0b:e4:91:fc:77:cf:f4:1b:e1:10:
b5:f5:9d:44:67:bd:98:b9:e7:7f:27:da:eb:62:79:
ec:94:3f:74:95:b3:e7:02:16:18:6b:69:d5:90:b1:
68:72:30:04:db:3e:e3:8f:2a:75:3a:06:61:8c:95:
20:db:c5:28:22:3b:33:de:18:41:33:a2:1e:07:e1:
3a:9c:29:11:11:c2:96:0a:3e:ae:29:a3:d8:f4:59:
e0:6d:8c:6c:66:74:94:82:68:5e:8b:df:b0:3d:a9:
f9:49:aa:dd:8d:a1:45:6f:90:c1:43:e0:2d:73:04:
8e:37:9d:ea:2d:34:f0:6a:f0:d0:c5:0b:75:d5:2a:
03:07:27:46:2a:39:32:3a:02:d3:6e:11:36:56:34:
ca:1c:0d:8c:a5:67:c0:1d:1d:af:bb:f8:f0:dd:0f:
14:76:b2:f3:e9:88:29:eb:20:b4:0e:0d:2e:1f:59:
97:95:b7:26:d5:0f:76:47:b2:0d:89:dc:17:a3:c8:
f6:3f:4b:3a:60:c9:b1:fe:c8:ed:00:e8:ab:52:0c:
52:62:34:60:e0:76:ce:37:8d:26:de:c4:e4:32:6b:
95:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:57:0B:05:02:82:3A:2C:D2:82:36:6F:D8:D6:9D:AF:E5:CC:45:62
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BE92FEEC9CEE11EFB2F9AB7EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.229.162.0/24
43.230.156.0/22
45.115.252.0/22
45.116.68.0/22
103.38.70.0/24
103.43.4.0/22
103.50.4.0/22
103.55.6.0/23
103.61.102.0/23
103.69.216.0/22
103.70.144.0/22
103.70.176.0/23
103.79.112.0/22
103.87.48.0/23
103.91.68.0/22
103.93.176.0/22
103.109.72.0/23
103.122.85.0/24
103.129.194.0/23
103.144.37.0/24
103.156.168.0/23
103.157.160.0/23
103.159.154.0/23
103.161.230.0-103.161.233.255
103.174.105.0/24
103.175.76.0/23
103.176.71.0/24
103.177.61.0/24
103.214.97.0/24
103.220.28.0/22
103.237.172.0/22
110.172.141.0/24
110.172.163.0/24
110.172.172.0/24
175.111.180.0/24
175.111.182.0/23
202.89.73.0/24
IPv6:
2001:df0:dc80::/48
2001:df1:b280::/48
2001:df1:f440::/48
Signature Algorithm: sha256WithRSAEncryption
13:83:50:76:e8:3e:f9:ad:19:c8:fc:3a:c4:c8:2f:24:23:0f:
43:ce:5f:46:4d:8d:15:41:01:60:08:68:5a:0c:12:54:a0:86:
1b:85:d6:25:da:7b:24:91:fb:4d:5f:7a:cc:56:48:bb:0e:b0:
7c:5e:65:ef:4a:1b:1e:de:33:ba:23:d7:e6:49:fb:cf:fc:04:
0d:5c:03:f7:1d:28:0f:ae:16:ee:27:c8:b2:e1:36:2b:4b:2a:
19:99:30:ce:e3:84:45:4e:ef:3e:63:b5:95:9a:ff:dc:96:90:
75:62:8a:aa:ad:9c:49:79:97:4c:2e:28:bf:f9:e2:a8:3e:a8:
bf:ba:f6:f1:6d:4b:25:dd:b8:ad:7c:b3:a4:3e:b6:42:e4:fb:
7f:c2:a7:63:a4:74:6f:39:7d:d8:1e:50:3a:62:dd:0a:d6:4e:
48:8d:76:ae:ba:91:46:fa:01:c0:f4:a2:5f:1b:c5:02:11:7e:
87:bc:1f:18:72:91:89:57:31:b8:87:cc:aa:b4:67:11:c8:db:
d1:94:6f:75:fe:9a:bf:c9:41:20:7a:91:47:98:8b:ef:38:c4:
63:1e:86:05:b1:3d:37:f9:e4:27:48:29:25:0e:ed:f5:b2:2c:
d1:c9:d0:3d:c1:05:59:9b:89:b4:a8:9f:6d:96:b3:9d:40:b9:
2d:a8:b6:23
-----BEGIN CERTIFICATE-----
MIIGfTCCBWWgAwIBAgIDAJzGMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MTEwNzA5NTc0OVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjcyYzhmMWMtYTNmZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANg7dfygvdTiLnwUvvdJO8aj3QBoXqn4MY8W4QW1aqu0MKsL5JH8d8/0G+EQ
tfWdRGe9mLnnfyfa62J57JQ/dJWz5wIWGGtp1ZCxaHIwBNs+448qdToGYYyVINvF
KCI7M94YQTOiHgfhOpwpERHClgo+rimj2PRZ4G2MbGZ0lIJoXovfsD2p+Umq3Y2h
RW+QwUPgLXMEjjed6i008Grw0MULddUqAwcnRio5MjoC024RNlY0yhwNjKVnwB0d
r7v48N0PFHay8+mIKesgtA4NLh9Zl5W3JtUPdkeyDYncF6PI9j9LOmDJsf7I7QDo
q1IMUmI0YOB2zjeNJt7E5DJrlfkCAwEAAaOCA6AwggOcMB0GA1UdDgQWBBSSVwsF
AoI6LNKCNm/Y1p2v5cxFYjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0JFOTJGRUVD
OUNFRTExRUZCMkY5QUI3RUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIIBKAYIKwYBBQUHAQcB
Af8EggEXMIIBEzCB7QQCAAEwgeYDBAAr5aIDBAIr5pwDBAItc/wDBAItdEQDBABn
JkYDBAJnKwQDBAJnMgQDBAFnNwYDBAFnPWYDBAJnRdgDBAJnRpADBAFnRrADBAJn
T3ADBAFnVzADBAJnW0QDBAJnXbADBAFnbUgDBABnelUDBAFngcIDBABnkCUDBAFn
nKgDBAFnnaADBAFnn5owDAMEAWeh5gMEAWeh6AMEAGeuaQMEAWevTAMEAGewRwME
AGexPQMEAGfWYQMEAmfcHAMEAmftrAMEAG6sjQMEAG6sowMEAG6srAMEAK9vtAME
Aa9vtgMEAMpZSTAhBAIAAjAbAwcAIAEN8NyAAwcAIAEN8bKAAwcAIAEN8fRAMA0G
CSqGSIb3DQEBCwUAA4IBAQATg1B26D75rRnI/DrEyC8kIw9Dzl9GTY0VQQFgCGha
DBJUoIYbhdYl2nskkftNX3rMVki7DrB8XmXvShse3jO6I9fmSfvP/AQNXAP3HSgP
rhbuJ8iy4TYrSyoZmTDO44RFTu8+Y7WVmv/clpB1YoqqrZxJeZdMLii/+eKoPqi/
uvbxbUsl3bitfLOkPrZC5Pt/wqdjpHRvOX3YHlA6Yt0K1k5IjXauupFG+gHA9KJf
G8UCEX6HvB8YcpGJVzG4h8yqtGcRyNvRlG91/pq/yUEgepFHmIvvOMRjHoYFsT03
+eQnSCklDu31sizRydA9wQVZm4m0qJ9tlrOdQLktqLYj
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:38:20 2025 by rpki-client