Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FF7BF578A59D11EFB201FE3AC4F9AE02.roa
File: FF7BF578A59D11EFB201FE3AC4F9AE02.roa (raw, json)
Hash identifier: faL3Syw/r0vXq+B8WA+iPJYSToHBZU3asfzGMKq/gZ0=
Subject key identifier: C5:29:6A:B5:C7:5B:F1:E3:93:E6:83:16:B8:AA:AF:30:99:9D:5E:2E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A72C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FF7BF578A59D11EFB201FE3AC4F9AE02.roa
Signing time: Thu 20 Feb 2025 12:47:58 +0000
ROA not before: Thu 20 Feb 2025 12:47:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133676
IP address blocks: 36.50.82.0/24 maxlen: 24
43.225.74.0/24 maxlen: 24
43.230.196.0/22 maxlen: 24
43.239.132.0/22 maxlen: 24
43.240.4.0/24 maxlen: 24
43.240.6.0/24 maxlen: 24
43.240.7.0/24 maxlen: 24
43.250.252.0/22 maxlen: 24
45.64.8.0/24 maxlen: 24
45.64.9.0/24 maxlen: 24
45.64.10.0/24 maxlen: 24
45.64.11.0/24 maxlen: 24
45.248.24.0/24 maxlen: 24
45.248.26.0/23 maxlen: 24
103.42.88.0/22 maxlen: 24
103.47.12.0/23 maxlen: 24
103.47.15.0/24 maxlen: 24
103.47.72.0/23 maxlen: 24
103.47.74.0/23 maxlen: 24
103.47.172.0/23 maxlen: 24
103.47.174.0/23 maxlen: 24
103.49.232.0/23 maxlen: 24
103.54.24.0/23 maxlen: 24
103.54.26.0/24 maxlen: 24
103.62.147.0/24 maxlen: 24
103.80.34.0/23 maxlen: 24
103.82.72.0/22 maxlen: 24
103.85.118.0/23 maxlen: 24
103.87.204.0/22 maxlen: 24
103.93.172.0/22 maxlen: 24
103.93.212.0/23 maxlen: 24
103.98.53.0/24 maxlen: 24
103.101.116.0/24 maxlen: 24
103.101.117.0/24 maxlen: 24
103.101.118.0/23 maxlen: 24
103.103.163.0/24 maxlen: 24
103.109.180.0/23 maxlen: 24
103.109.182.0/23 maxlen: 24
103.114.188.0/23 maxlen: 24
103.118.180.0/22 maxlen: 24
103.147.88.0/23 maxlen: 24
103.148.66.0/23 maxlen: 24
103.169.88.0/23 maxlen: 24
103.173.218.0/24 maxlen: 24
103.177.202.0/23 maxlen: 24
103.178.58.0/23 maxlen: 24
103.181.90.0/23 maxlen: 24
103.182.44.0/23 maxlen: 24
103.184.184.0/23 maxlen: 24
103.186.44.0/23 maxlen: 24
103.189.146.0/24 maxlen: 24
103.189.147.0/24 maxlen: 24
103.191.182.0/23 maxlen: 24
103.191.234.0/23 maxlen: 24
103.204.168.0/22 maxlen: 24
103.211.56.0/23 maxlen: 24
103.211.58.0/24 maxlen: 24
103.211.190.0/23 maxlen: 24
103.212.136.0/23 maxlen: 24
103.212.138.0/23 maxlen: 24
103.213.6.0/23 maxlen: 24
103.225.205.0/24 maxlen: 24
103.225.206.0/23 maxlen: 24
103.226.200.0/22 maxlen: 24
103.227.95.0/24 maxlen: 24
103.248.120.0/24 maxlen: 24
103.248.121.0/24 maxlen: 24
139.5.16.0/23 maxlen: 24
139.5.18.0/23 maxlen: 24
2405:5540::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42796 (0xa72c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Feb 20 12:47:58 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67b7247e-a1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0d:e1:ee:90:fe:43:52:4b:52:ff:0c:4d:cf:
a4:76:2c:04:db:53:f6:6b:30:dc:1d:73:bc:6a:1f:
c3:98:83:89:a7:af:7b:52:c3:40:58:65:b9:a5:a7:
ad:ea:0e:ce:c7:38:9f:5a:67:6f:46:66:a6:db:7d:
21:b4:3f:8e:e0:62:ae:57:81:46:c8:ce:7e:a4:72:
7f:b8:5d:01:dd:e4:fa:6d:f8:fd:09:2c:7f:aa:33:
59:c6:5f:b5:71:8f:fc:45:40:c6:80:a7:ab:68:5f:
22:e2:a1:4e:b6:e7:c3:3f:40:23:f4:f7:15:09:30:
d7:06:bc:b2:33:ae:08:d1:19:80:54:49:dc:e2:d5:
d4:c2:e8:1f:87:ae:a3:b6:cf:db:a6:87:d2:de:5a:
05:c2:15:a1:98:e2:fe:ea:df:53:cd:1a:bc:41:71:
65:06:07:74:37:67:64:86:71:64:d3:2a:d6:52:22:
fe:37:8c:ff:f1:10:96:f1:67:2c:57:71:34:3e:de:
4c:97:68:2c:37:7c:e7:c8:60:34:71:d9:c4:a0:d1:
dc:ac:63:7b:38:5a:35:ad:ae:b8:14:c7:52:67:8f:
a3:c4:e5:15:20:a7:85:13:65:67:f2:68:5e:7f:ba:
37:da:a3:7c:19:eb:32:2c:d7:97:28:06:b4:51:56:
8c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:29:6A:B5:C7:5B:F1:E3:93:E6:83:16:B8:AA:AF:30:99:9D:5E:2E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FF7BF578A59D11EFB201FE3AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.82.0/24
43.225.74.0/24
43.230.196.0/22
43.239.132.0/22
43.240.4.0/24
43.240.6.0/23
43.250.252.0/22
45.64.8.0/22
45.248.24.0/24
45.248.26.0/23
103.42.88.0/22
103.47.12.0/23
103.47.15.0/24
103.47.72.0/22
103.47.172.0/22
103.49.232.0/23
103.54.24.0-103.54.26.255
103.62.147.0/24
103.80.34.0/23
103.82.72.0/22
103.85.118.0/23
103.87.204.0/22
103.93.172.0/22
103.93.212.0/23
103.98.53.0/24
103.101.116.0/22
103.103.163.0/24
103.109.180.0/22
103.114.188.0/23
103.118.180.0/22
103.147.88.0/23
103.148.66.0/23
103.169.88.0/23
103.173.218.0/24
103.177.202.0/23
103.178.58.0/23
103.181.90.0/23
103.182.44.0/23
103.184.184.0/23
103.186.44.0/23
103.189.146.0/23
103.191.182.0/23
103.191.234.0/23
103.204.168.0/22
103.211.56.0-103.211.58.255
103.211.190.0/23
103.212.136.0/22
103.213.6.0/23
103.225.205.0-103.225.207.255
103.226.200.0/22
103.227.95.0/24
103.248.120.0/23
139.5.16.0/22
IPv6:
2405:5540::/32
Signature Algorithm: sha256WithRSAEncryption
25:fe:c8:c3:0e:6b:7d:7d:14:48:d3:15:69:5b:41:4e:08:55:
a0:37:1c:6f:33:bd:26:f7:50:0d:24:0b:cc:ff:94:7c:1e:de:
14:b0:1e:48:c1:04:c3:a7:f0:c2:e9:51:ca:f5:2f:49:66:de:
e8:90:8d:1a:24:3a:78:4c:06:e3:61:4b:78:8d:fb:01:a3:72:
fe:f8:64:5e:64:27:a6:a1:ea:1e:a1:94:cc:37:37:52:ac:94:
fe:20:64:7b:f8:df:e5:31:39:51:c9:1f:eb:bf:23:ae:d9:82:
c4:f6:1a:2b:cf:17:1b:54:1b:5f:d6:83:0d:9f:5b:5d:71:7f:
9f:dd:90:63:49:ef:f0:d2:d0:ce:11:04:ba:19:92:82:81:15:
d6:73:50:a3:58:f4:30:f6:2c:ae:22:6a:e5:c4:7d:cf:92:2a:
c5:56:64:45:be:a3:77:b5:7a:66:73:b5:98:b1:db:27:20:13:
6f:21:a1:76:8b:d9:8e:b4:44:7a:bb:d6:0e:cd:d1:c4:01:d9:
63:6a:55:da:c0:05:df:41:79:6b:2e:4f:44:a0:c6:56:f4:e8:
71:b1:87:f5:50:10:b4:a1:3c:54:71:9b:ff:a5:b5:5b:71:0c:
fa:5c:10:0b:ce:75:18:eb:48:a4:8d:d1:72:71:5b:af:11:79:
f6:a5:50:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:21:15 2025 by rpki-client