Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/601DCC529DA211EFA41BEC0DC4F9AE02.roa
File: 601DCC529DA211EFA41BEC0DC4F9AE02.roa (raw, json)
Hash identifier: oMz8o5+j5QpXzrc4Yv4jvl1t5PhPSvbxd+Owyduc3m8=
Subject key identifier: 53:B1:69:D7:7B:CB:88:C4:6A:A1:FF:B5:92:B1:30:05:8D:B4:E5:90
Certificate issuer: /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Certificate serial: 0789
Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/601DCC529DA211EFA41BEC0DC4F9AE02.roa
Signing time: Thu 23 Jan 2025 01:42:52 +0000
ROA not before: Thu 23 Jan 2025 01:42:52 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 135607
IP address blocks: 61.245.4.0/24 maxlen: 24
61.245.5.0/24 maxlen: 24
61.245.6.0/24 maxlen: 24
61.245.7.0/24 maxlen: 24
61.245.8.0/24 maxlen: 24
61.245.9.0/24 maxlen: 24
61.245.12.0/24 maxlen: 24
61.245.13.0/24 maxlen: 24
61.245.14.0/24 maxlen: 24
61.245.15.0/24 maxlen: 24
61.245.16.0/24 maxlen: 24
61.245.17.0/24 maxlen: 24
61.245.18.0/24 maxlen: 24
61.245.19.0/24 maxlen: 24
61.245.20.0/24 maxlen: 24
61.245.21.0/24 maxlen: 24
61.245.22.0/24 maxlen: 24
61.245.23.0/24 maxlen: 24
61.245.24.0/24 maxlen: 24
61.245.25.0/24 maxlen: 24
61.245.26.0/24 maxlen: 24
61.245.27.0/24 maxlen: 24
61.245.28.0/24 maxlen: 24
61.245.29.0/24 maxlen: 24
61.245.30.0/24 maxlen: 24
61.245.121.0/24 maxlen: 24
61.245.122.0/24 maxlen: 24
61.245.123.0/24 maxlen: 24
103.76.160.0/23 maxlen: 23
103.76.160.0/24 maxlen: 24
103.76.161.0/24 maxlen: 24
103.100.100.0/23 maxlen: 23
103.100.100.0/24 maxlen: 24
103.100.101.0/24 maxlen: 24
126.209.0.0/24 maxlen: 24
126.209.1.0/24 maxlen: 24
126.209.2.0/24 maxlen: 24
126.209.3.0/24 maxlen: 24
126.209.4.0/24 maxlen: 24
126.209.5.0/24 maxlen: 24
126.209.6.0/24 maxlen: 24
126.209.7.0/24 maxlen: 24
126.209.8.0/24 maxlen: 24
126.209.9.0/24 maxlen: 24
126.209.10.0/24 maxlen: 24
126.209.11.0/24 maxlen: 24
126.209.12.0/24 maxlen: 24
126.209.13.0/24 maxlen: 24
126.209.14.0/24 maxlen: 24
126.209.15.0/24 maxlen: 24
126.209.16.0/24 maxlen: 24
126.209.17.0/24 maxlen: 24
126.209.18.0/24 maxlen: 24
126.209.19.0/24 maxlen: 24
126.209.20.0/24 maxlen: 24
126.209.21.0/24 maxlen: 24
126.209.22.0/24 maxlen: 24
126.209.23.0/24 maxlen: 24
126.209.24.0/24 maxlen: 24
126.209.25.0/24 maxlen: 24
126.209.26.0/24 maxlen: 24
126.209.27.0/24 maxlen: 24
126.209.28.0/24 maxlen: 24
126.209.29.0/24 maxlen: 24
126.209.30.0/24 maxlen: 24
126.209.31.0/24 maxlen: 24
126.209.32.0/24 maxlen: 24
126.209.33.0/24 maxlen: 24
126.209.34.0/24 maxlen: 24
126.209.35.0/24 maxlen: 24
126.209.36.0/24 maxlen: 24
126.209.37.0/24 maxlen: 24
126.209.38.0/24 maxlen: 24
126.209.39.0/24 maxlen: 24
126.209.40.0/24 maxlen: 24
126.209.41.0/24 maxlen: 24
126.209.42.0/24 maxlen: 24
126.209.43.0/24 maxlen: 24
126.209.44.0/24 maxlen: 24
126.209.45.0/24 maxlen: 24
126.209.46.0/24 maxlen: 24
126.209.47.0/24 maxlen: 24
126.209.48.0/24 maxlen: 24
126.209.49.0/24 maxlen: 24
126.209.50.0/24 maxlen: 24
126.209.51.0/24 maxlen: 24
126.209.52.0/24 maxlen: 24
126.209.53.0/24 maxlen: 24
126.209.54.0/24 maxlen: 24
126.209.55.0/24 maxlen: 24
126.209.56.0/24 maxlen: 24
126.209.57.0/24 maxlen: 24
126.209.61.0/24 maxlen: 24
126.209.62.0/24 maxlen: 24
126.209.63.0/24 maxlen: 24
126.209.64.0/19 maxlen: 19
126.209.64.0/24 maxlen: 24
126.209.65.0/24 maxlen: 24
126.209.66.0/24 maxlen: 24
126.209.67.0/24 maxlen: 24
126.209.68.0/24 maxlen: 24
126.209.69.0/24 maxlen: 24
126.209.70.0/24 maxlen: 24
126.209.71.0/24 maxlen: 24
126.209.72.0/24 maxlen: 24
126.209.73.0/24 maxlen: 24
126.209.74.0/24 maxlen: 24
126.209.75.0/24 maxlen: 24
126.209.76.0/24 maxlen: 24
126.209.77.0/24 maxlen: 24
126.209.78.0/24 maxlen: 24
126.209.79.0/24 maxlen: 24
126.209.80.0/24 maxlen: 24
126.209.81.0/24 maxlen: 24
126.209.82.0/24 maxlen: 24
126.209.83.0/24 maxlen: 24
126.209.84.0/24 maxlen: 24
126.209.85.0/24 maxlen: 24
126.209.86.0/24 maxlen: 24
126.209.87.0/24 maxlen: 24
126.209.88.0/24 maxlen: 24
126.209.89.0/24 maxlen: 24
126.209.90.0/24 maxlen: 24
126.209.91.0/24 maxlen: 24
126.209.92.0/24 maxlen: 24
126.209.93.0/24 maxlen: 24
126.209.94.0/24 maxlen: 24
126.209.95.0/24 maxlen: 24
2401:e740::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1929 (0x789)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D1EA
Validity
Not Before: Jan 23 01:42:52 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67919e9b-a992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:aa:a3:39:63:98:81:ba:f9:3c:04:03:43:9e:
74:42:08:d1:d4:61:15:80:70:13:3b:d2:ab:99:18:
2f:c2:e9:e5:c9:51:4f:0c:74:61:be:2e:40:8e:39:
9e:23:51:3f:37:42:a4:5f:24:d7:62:7f:60:59:04:
87:7c:ca:92:e0:df:74:a0:06:73:9d:30:16:3f:18:
c5:c2:5d:a9:be:e9:9a:e8:9c:1a:cf:4d:eb:61:d0:
1c:eb:97:ca:22:1c:cd:f8:ce:72:f9:dd:1d:cf:b0:
32:12:a5:9a:83:84:2d:a3:a7:67:b2:62:14:6e:2f:
0e:ca:9b:5a:76:13:53:ae:14:ad:cd:4d:5b:7c:72:
e8:72:d8:62:29:78:f3:ae:82:ce:03:e9:a1:64:78:
4a:f1:25:84:99:89:a7:9a:b0:e4:d6:c5:c5:1b:a9:
3f:c2:99:5b:37:ae:f4:d1:72:f5:6c:b5:ad:fe:ee:
46:f8:f4:2d:0e:92:81:c3:ae:c3:7a:de:6d:8b:4d:
78:85:05:4b:5e:7e:c5:95:3a:25:d9:9d:df:5c:b1:
69:b9:57:42:5f:e2:83:3f:ee:ea:7a:4e:85:6e:f5:
2d:79:37:50:cf:46:8e:7e:b9:bb:1b:fa:8e:74:06:
0b:38:8b:0d:c9:98:b9:f7:8c:f3:2c:a1:6f:ef:be:
8d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B1:69:D7:7B:CB:88:C4:6A:A1:FF:B5:92:B1:30:05:8D:B4:E5:90
X509v3 Authority Key Identifier:
keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/601DCC529DA211EFA41BEC0DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.245.4.0-61.245.9.255
61.245.12.0-61.245.30.255
61.245.121.0-61.245.123.255
103.76.160.0/23
103.100.100.0/23
126.209.0.0-126.209.57.255
126.209.61.0-126.209.95.255
IPv6:
2401:e740::/32
Signature Algorithm: sha256WithRSAEncryption
2c:be:77:1a:53:60:6b:11:14:a9:21:43:35:85:76:ae:21:25:
0b:03:b3:30:44:66:ef:22:60:d0:46:f4:49:25:cd:04:ea:b3:
cf:c8:ea:2c:ee:46:99:38:3b:82:be:60:18:fd:b1:b4:67:85:
64:75:e4:e4:cd:d4:ac:9c:73:21:d7:9f:bb:7b:6d:7a:a3:47:
3b:68:51:54:dd:57:42:68:77:fa:6a:1f:2f:83:49:92:5e:ec:
ca:40:e7:2b:9b:0c:0a:ed:dc:33:f6:c3:ec:86:21:80:f4:11:
35:3e:08:23:5f:76:16:91:e7:2b:01:be:5a:fc:66:df:6f:db:
d5:00:bb:d3:9d:7c:5a:ba:6b:c0:90:21:55:26:da:a2:37:91:
cb:c1:88:05:03:e2:7a:c6:ba:af:67:cb:b2:b3:cb:75:da:29:
a1:0e:14:39:53:00:b5:e8:20:df:a7:cb:04:da:76:5c:59:8b:
5e:16:18:e9:d6:3d:5f:f7:6b:e6:0b:2d:7b:19:8d:3a:ae:96:
51:23:29:fc:88:6d:1d:1e:c0:f0:28:7f:4c:24:20:39:0a:22:
a9:28:fb:2c:76:0f:66:fb:91:fb:b3:c5:24:9a:22:4d:4e:15:
64:49:8a:60:05:fe:c8:02:43:ef:6e:6c:c4:df:20:01:71:72:
90:8b:8e:3c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:00:50 2025 by rpki-client