Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72BB0EE8024B11EB8A413121C4F9AE02.roa
File: 72BB0EE8024B11EB8A413121C4F9AE02.roa (raw, json)
Hash identifier: jTOBJeomJqKobUZTKC/MVtSv291H5+Uz1vALDoW8p5Q=
Subject key identifier: C1:89:FA:F0:53:7F:0E:DF:02:16:7F:52:81:55:77:84:87:F3:E2:D6
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: BA0E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72BB0EE8024B11EB8A413121C4F9AE02.roa
Signing time: Thu 08 May 2025 16:30:49 +0000
ROA not before: Thu 08 May 2025 16:30:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45189
IP address blocks: 122.99.124.0/22 maxlen: 24
203.175.176.0/24 maxlen: 24
203.185.191.0/24 maxlen: 24
223.26.32.0/20 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47630 (0xba0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:30:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=681cdc39-f5e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:12:3d:98:bb:56:9c:fc:88:94:f4:e0:02:e4:
bf:0c:3e:dd:ec:56:e1:84:c3:d7:23:31:9a:ed:94:
a8:7b:c5:f1:29:8b:88:44:54:d1:f0:05:60:54:fb:
e8:b7:3d:37:60:f3:22:80:e8:47:d6:54:e9:58:e3:
e9:ba:34:d4:c3:a6:71:e4:8e:dd:19:29:2b:dc:56:
c9:95:ed:ae:0e:a0:62:6b:d7:a2:00:21:ff:c0:45:
db:76:ec:5a:f3:33:45:de:09:af:b7:b7:46:81:89:
96:72:4c:22:ec:4f:38:5f:9e:d5:6f:2b:f8:75:d1:
79:a6:8b:2d:d3:2e:55:f1:32:29:8f:3a:1b:7c:9c:
55:05:f2:b3:66:c1:ba:fb:c4:5d:6f:73:9a:a3:4a:
c8:20:17:b9:fd:49:97:40:39:cc:e7:52:4c:1a:31:
86:04:9f:1c:33:a2:cc:35:9d:87:16:e4:8d:9f:0a:
d9:f4:fa:19:2c:52:4b:8a:a7:2b:5f:48:75:bb:b8:
9b:36:27:12:33:96:90:6f:f0:77:71:1c:88:ab:76:
7a:0e:46:c2:db:e8:8f:49:5f:5f:73:2c:29:60:b6:
d0:95:e0:d0:78:a4:9c:a7:bd:4b:f9:34:59:14:1e:
10:03:59:10:c0:0d:0c:dc:25:0f:0c:85:d4:ce:02:
65:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:89:FA:F0:53:7F:0E:DF:02:16:7F:52:81:55:77:84:87:F3:E2:D6
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72BB0EE8024B11EB8A413121C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.99.124.0/22
203.175.176.0/24
203.185.191.0/24
223.26.32.0/20
Signature Algorithm: sha256WithRSAEncryption
67:38:ef:f0:b1:e6:f2:f7:30:9d:b1:75:50:e7:fb:36:57:11:
68:4f:2b:5a:01:a7:c2:4c:07:b0:70:12:64:41:b2:97:5f:fd:
60:59:0a:d7:96:df:75:79:63:c6:f8:92:f9:7b:a9:b3:da:12:
9e:4b:86:cd:ca:b6:1e:5d:a7:b2:95:fb:eb:47:30:6e:c0:ca:
93:2c:ed:73:ce:7f:f7:84:b2:71:35:ec:a2:8e:f8:bb:bf:99:
18:2c:70:92:af:27:1b:93:db:5c:71:ce:e1:ad:f8:54:d2:a4:
3d:72:2e:dd:4b:34:9d:12:01:63:dd:dd:15:73:6f:38:6e:12:
7b:49:83:70:f1:3b:40:14:a9:ab:19:02:4d:1f:a4:e2:d1:fc:
e3:23:5a:eb:75:e5:8d:c2:f9:e0:dd:ef:28:35:00:40:8d:4c:
62:d9:e8:63:b2:e6:4a:c3:3a:f1:ce:52:bf:37:e1:1b:21:6e:
ac:de:de:4b:a0:35:66:25:49:d0:a2:3b:37:4a:61:d8:8c:e5:
23:93:65:52:b6:fa:d5:a5:99:b3:9d:17:b6:dd:52:51:fa:45:
5d:32:e4:17:ad:de:1f:34:8e:fd:e0:f9:d2:49:21:49:19:76:
f8:ee:ff:84:6f:f6:e4:95:8e:95:aa:c2:ca:ba:5a:82:bb:57:
fd:bc:19:cc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALoOMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUwODE2MzA0OVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjgxY2RjMzktZjVlNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMwSPZi7Vpz8iJT04ALkvww+3exW4YTD1yMxmu2UqHvF8SmLiERU0fAFYFT7
6Lc9N2DzIoDoR9ZU6Vjj6bo01MOmceSO3RkpK9xWyZXtrg6gYmvXogAh/8BF23bs
WvMzRd4Jr7e3RoGJlnJMIuxPOF+e1W8r+HXReaaLLdMuVfEyKY86G3ycVQXys2bB
uvvEXW9zmqNKyCAXuf1Jl0A5zOdSTBoxhgSfHDOizDWdhxbkjZ8K2fT6GSxSS4qn
K19Idbu4mzYnEjOWkG/wd3EciKt2eg5Gwtvoj0lfX3MsKWC20JXg0HiknKe9S/k0
WRQeEANZEMANDNwlDwyF1M4CZX0CAwEAAaOCAqcwggKjMB0GA1UdDgQWBBTBifrw
U38O3wIWf1KBVXeEh/Pi1jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzcyQkIwRUU4
MDI0QjExRUI4QTQxMzEyMUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDEGCCsGAQUFBwEHAQH/
BCIwIDAeBAIAATAYAwQCemN8AwQAy6+wAwQAy7m/AwQE3xogMA0GCSqGSIb3DQEB
CwUAA4IBAQBnOO/wseby9zCdsXVQ5/s2VxFoTytaAafCTAewcBJkQbKXX/1gWQrX
lt91eWPG+JL5e6mz2hKeS4bNyrYeXaeylfvrRzBuwMqTLO1zzn/3hLJxNeyijvi7
v5kYLHCSrycbk9tccc7hrfhU0qQ9ci7dSzSdEgFj3d0Vc284bhJ7SYNw8TtAFKmr
GQJNH6Ti0fzjI1rrdeWNwvng3e8oNQBAjUxi2ehjsuZKwzrxzlK/N+EbIW6s3t5L
oDVmJUnQojs3SmHYjOUjk2VStvrVpZmznRe23VJR+kVdMuQXrd4fNI794PnSSSFJ
GXb47v+Eb/bklY6VqsLKulqCu1f9vBnM
-----END CERTIFICATE-----
Generated at Wed May 14 10:37:42 2025 by rpki-client