Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/5792C60239EF11F0B0C75634C4F9AE02.roa
File: 5792C60239EF11F0B0C75634C4F9AE02.roa (raw, json)
Hash identifier: Rv0klfnPbvLpqHHN5KgjlTiWA45Fu1J/Xmy9dw5oJ8E=
Subject key identifier: 7C:7F:8E:3E:CB:01:6F:6D:8B:08:5C:35:D0:AA:2A:1D:21:4E:85:23
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 388F
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/5792C60239EF11F0B0C75634C4F9AE02.roa
Signing time: Mon 09 Jun 2025 06:58:54 +0000
ROA not before: Mon 09 Jun 2025 06:58:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 111.88.96.0/21 maxlen: 21
111.88.96.0/24 maxlen: 24
111.88.97.0/24 maxlen: 24
111.88.98.0/24 maxlen: 24
111.88.99.0/24 maxlen: 24
111.88.100.0/24 maxlen: 24
111.88.101.0/24 maxlen: 24
111.88.102.0/24 maxlen: 24
111.88.103.0/24 maxlen: 24
111.88.112.0/20 maxlen: 20
111.88.112.0/24 maxlen: 24
111.88.113.0/24 maxlen: 24
111.88.114.0/24 maxlen: 24
111.88.115.0/24 maxlen: 24
111.88.116.0/24 maxlen: 24
111.88.117.0/24 maxlen: 24
111.88.118.0/24 maxlen: 24
111.88.119.0/24 maxlen: 24
111.88.120.0/24 maxlen: 24
111.88.121.0/24 maxlen: 24
111.88.122.0/24 maxlen: 24
111.88.123.0/24 maxlen: 24
111.88.124.0/24 maxlen: 24
111.88.125.0/24 maxlen: 24
111.88.126.0/24 maxlen: 24
111.88.127.0/24 maxlen: 24
111.88.128.0/21 maxlen: 21
111.88.128.0/24 maxlen: 24
111.88.129.0/24 maxlen: 24
111.88.130.0/24 maxlen: 24
111.88.131.0/24 maxlen: 24
111.88.132.0/24 maxlen: 24
111.88.133.0/24 maxlen: 24
111.88.134.0/24 maxlen: 24
111.88.135.0/24 maxlen: 24
111.88.140.0/22 maxlen: 22
111.88.140.0/24 maxlen: 24
111.88.141.0/24 maxlen: 24
111.88.142.0/24 maxlen: 24
111.88.143.0/24 maxlen: 24
111.88.144.0/20 maxlen: 20
111.88.160.0/21 maxlen: 21
111.88.160.0/22 maxlen: 22
111.88.160.0/23 maxlen: 23
111.88.160.0/24 maxlen: 24
111.88.161.0/24 maxlen: 24
111.88.162.0/23 maxlen: 23
111.88.162.0/24 maxlen: 24
111.88.163.0/24 maxlen: 24
111.88.164.0/22 maxlen: 22
111.88.164.0/23 maxlen: 23
111.88.164.0/24 maxlen: 24
111.88.165.0/24 maxlen: 24
111.88.166.0/23 maxlen: 23
111.88.166.0/24 maxlen: 24
111.88.167.0/24 maxlen: 24
111.88.200.0/21 maxlen: 21
111.88.200.0/24 maxlen: 24
111.88.201.0/24 maxlen: 24
111.88.202.0/24 maxlen: 24
111.88.203.0/24 maxlen: 24
111.88.204.0/24 maxlen: 24
111.88.205.0/24 maxlen: 24
111.88.206.0/24 maxlen: 24
111.88.207.0/24 maxlen: 24
111.88.224.0/21 maxlen: 21
111.88.240.0/20 maxlen: 20
203.81.208.0/22 maxlen: 22
203.81.212.0/24 maxlen: 24
203.81.213.0/24 maxlen: 24
203.81.214.0/24 maxlen: 24
203.81.215.0/24 maxlen: 24
203.81.216.0/21 maxlen: 21
203.81.216.0/22 maxlen: 22
203.81.216.0/24 maxlen: 24
203.81.217.0/24 maxlen: 24
203.81.218.0/24 maxlen: 24
203.81.219.0/24 maxlen: 24
203.81.220.0/24 maxlen: 24
203.81.221.0/24 maxlen: 24
203.81.222.0/24 maxlen: 24
203.81.223.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14479 (0x388f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Jun 9 06:58:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6846862d-8007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:64:00:95:28:fb:7e:1c:af:31:bc:c9:ea:4c:
b7:62:c5:1b:b2:9c:ed:2d:8a:64:a7:f2:cd:ca:4f:
e2:3a:e4:2f:11:f4:5c:9a:40:5a:fa:87:89:80:65:
19:f5:42:24:f7:0f:f7:8e:f7:7e:94:27:0b:44:3a:
00:3c:9f:48:9a:f7:d8:ff:7b:52:bc:1a:9e:56:45:
7c:26:db:c3:68:31:ea:6e:eb:69:c2:71:bc:cc:f7:
df:cd:92:f7:84:00:96:77:30:04:64:74:83:d4:62:
0e:aa:7d:41:51:ba:b1:e1:59:00:35:83:24:86:9e:
a8:3e:16:a2:c2:bb:87:2c:48:11:00:37:60:82:d6:
0f:ea:b8:89:ca:f3:0c:42:07:04:68:ce:c3:bf:e3:
ee:cf:24:fc:44:0e:4b:35:bd:90:99:d6:44:d6:d6:
13:c2:5f:c9:02:2f:56:2d:55:c6:fe:63:a4:30:62:
49:b2:49:95:f5:52:16:93:80:ff:ab:2b:c5:ac:c6:
c3:82:b1:9d:25:82:3b:98:f7:70:52:80:63:2c:ef:
d2:7d:ab:5c:67:3f:b4:1c:e3:2d:00:f3:8f:9d:3c:
36:92:a3:cf:04:61:09:d3:ab:48:61:79:e2:00:61:
4d:e3:17:b4:e7:d1:1a:26:f1:46:8f:5f:cd:29:c0:
f3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7F:8E:3E:CB:01:6F:6D:8B:08:5C:35:D0:AA:2A:1D:21:4E:85:23
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/5792C60239EF11F0B0C75634C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.88.96.0/21
111.88.112.0-111.88.135.255
111.88.140.0-111.88.167.255
111.88.200.0/21
111.88.224.0/21
111.88.240.0/20
203.81.208.0/20
Signature Algorithm: sha256WithRSAEncryption
a2:23:5a:58:60:3b:98:4b:db:98:fb:d4:bb:27:c3:81:29:64:
ae:fb:1d:a2:3f:05:67:95:95:ad:59:65:1c:7b:e8:60:80:f9:
95:7b:79:15:af:7b:d1:9e:5f:6a:c1:28:12:91:41:29:4a:84:
fa:65:0e:df:a3:92:54:1f:dd:0b:df:c2:46:6b:50:36:55:b4:
1d:ad:de:76:49:d8:15:62:39:35:12:7f:52:c2:96:12:5a:ba:
9a:44:2c:76:b4:b9:70:74:ea:db:f5:d9:d8:bb:ce:01:67:a8:
62:db:fd:c4:c8:f5:ae:49:1e:7e:3e:9a:87:cf:c5:87:c5:05:
a3:55:93:a9:e7:8e:39:92:50:4d:64:65:78:9f:d1:d6:f4:f1:
48:c7:db:c3:23:37:99:32:98:7b:d6:8a:2b:65:bd:09:cc:3c:
75:5a:fc:04:43:32:5f:bb:51:36:76:cd:d0:87:0b:11:45:15:
6e:b5:a6:6b:74:6f:72:2d:70:e4:49:c0:68:f2:0c:d3:83:9d:
ba:a8:d3:c8:05:33:53:09:07:15:80:90:8e:f6:11:b3:f7:c8:
8f:c1:47:0e:40:75:db:d6:cc:54:e1:90:e4:18:bd:18:69:24:
cd:45:23:2b:03:2e:5e:d3:a5:f6:64:87:c1:cc:17:43:67:11:
5d:c6:65:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:03:23 2025 by rpki-client