Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/65D4191CFB0E11EEA5977B0BC4F9AE02.roa
File: 65D4191CFB0E11EEA5977B0BC4F9AE02.roa (raw, json)
Hash identifier: QwvKj0vdGwrbt96ljTya7QtqC6sFbiWOo4ZcvVJogD4=
Subject key identifier: 83:26:41:B8:71:A5:8E:7D:9D:E7:67:33:CB:75:68:BA:F9:A1:C0:63
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 35C4
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/65D4191CFB0E11EEA5977B0BC4F9AE02.roa
Signing time: Tue 16 Apr 2024 13:44:30 +0000
ROA not before: Tue 16 Apr 2024 13:44:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38710
IP address blocks: 111.88.64.0/21 maxlen: 21
111.88.76.0/24 maxlen: 24
111.88.77.0/24 maxlen: 24
111.88.79.0/24 maxlen: 24
111.88.138.0/24 maxlen: 24
111.88.139.0/24 maxlen: 24
111.88.144.0/20 maxlen: 24
111.88.164.0/22 maxlen: 24
111.88.168.0/22 maxlen: 24
111.88.184.0/22 maxlen: 24
111.88.188.0/22 maxlen: 24
111.88.232.0/24 maxlen: 24
111.88.233.0/24 maxlen: 24
111.88.234.0/24 maxlen: 24
111.88.235.0/24 maxlen: 24
111.88.236.0/24 maxlen: 24
111.88.237.0/24 maxlen: 24
111.88.238.0/24 maxlen: 24
111.88.239.0/24 maxlen: 24
111.88.240.0/24 maxlen: 24
111.88.241.0/24 maxlen: 24
111.88.242.0/24 maxlen: 24
111.88.243.0/24 maxlen: 24
111.88.244.0/22 maxlen: 22
111.88.244.0/24 maxlen: 24
111.88.245.0/24 maxlen: 24
111.88.246.0/24 maxlen: 24
111.88.247.0/24 maxlen: 24
111.88.248.0/21 maxlen: 21
111.88.248.0/22 maxlen: 22
111.88.248.0/23 maxlen: 24
111.88.250.0/24 maxlen: 24
111.88.251.0/24 maxlen: 24
111.88.252.0/24 maxlen: 24
111.88.253.0/24 maxlen: 24
111.88.254.0/24 maxlen: 24
111.88.255.0/24 maxlen: 24
115.186.1.0/24 maxlen: 24
115.186.10.0/23 maxlen: 24
115.186.12.0/23 maxlen: 24
115.186.14.0/24 maxlen: 24
115.186.16.0/24 maxlen: 24
115.186.17.0/24 maxlen: 24
115.186.21.0/24 maxlen: 24
115.186.23.0/24 maxlen: 24
115.186.24.0/23 maxlen: 23
115.186.25.0/24 maxlen: 24
115.186.30.0/23 maxlen: 24
115.186.32.0/20 maxlen: 22
115.186.32.0/24 maxlen: 24
115.186.33.0/24 maxlen: 24
115.186.34.0/24 maxlen: 24
115.186.35.0/24 maxlen: 24
115.186.36.0/22 maxlen: 23
115.186.36.0/23 maxlen: 24
115.186.40.0/24 maxlen: 24
115.186.41.0/24 maxlen: 24
115.186.42.0/24 maxlen: 24
115.186.43.0/24 maxlen: 24
115.186.44.0/24 maxlen: 24
115.186.45.0/24 maxlen: 24
115.186.46.0/24 maxlen: 24
115.186.47.0/24 maxlen: 24
115.186.56.0/21 maxlen: 24
115.186.72.0/22 maxlen: 24
115.186.88.0/24 maxlen: 24
115.186.90.0/24 maxlen: 24
115.186.91.0/24 maxlen: 24
115.186.93.0/24 maxlen: 24
115.186.94.0/24 maxlen: 24
115.186.96.0/24 maxlen: 24
115.186.98.0/24 maxlen: 24
115.186.101.0/24 maxlen: 24
115.186.102.0/24 maxlen: 24
115.186.103.0/24 maxlen: 24
115.186.104.0/24 maxlen: 24
115.186.106.0/23 maxlen: 24
115.186.108.0/22 maxlen: 24
115.186.112.0/24 maxlen: 24
115.186.113.0/24 maxlen: 24
115.186.115.0/24 maxlen: 24
115.186.117.0/24 maxlen: 24
115.186.118.0/24 maxlen: 24
115.186.119.0/24 maxlen: 24
115.186.120.0/24 maxlen: 24
115.186.121.0/24 maxlen: 24
115.186.122.0/24 maxlen: 24
115.186.123.0/24 maxlen: 24
115.186.124.0/24 maxlen: 24
115.186.125.0/24 maxlen: 24
115.186.126.0/24 maxlen: 24
117.102.0.0/21 maxlen: 21
117.102.0.0/22 maxlen: 22
117.102.0.0/23 maxlen: 24
117.102.2.0/24 maxlen: 24
117.102.3.0/24 maxlen: 24
117.102.4.0/24 maxlen: 24
117.102.5.0/24 maxlen: 24
117.102.6.0/24 maxlen: 24
117.102.7.0/24 maxlen: 24
117.102.8.0/24 maxlen: 24
117.102.9.0/24 maxlen: 24
117.102.10.0/24 maxlen: 24
117.102.12.0/23 maxlen: 24
117.102.14.0/23 maxlen: 24
117.102.16.0/24 maxlen: 24
117.102.17.0/24 maxlen: 24
117.102.18.0/23 maxlen: 24
117.102.20.0/22 maxlen: 24
117.102.24.0/22 maxlen: 22
117.102.24.0/23 maxlen: 24
117.102.26.0/24 maxlen: 24
117.102.27.0/24 maxlen: 24
117.102.28.0/24 maxlen: 24
117.102.30.0/24 maxlen: 24
117.102.31.0/24 maxlen: 24
117.102.32.0/24 maxlen: 24
117.102.33.0/24 maxlen: 24
117.102.34.0/24 maxlen: 24
117.102.35.0/24 maxlen: 24
117.102.36.0/24 maxlen: 24
117.102.37.0/24 maxlen: 24
117.102.38.0/24 maxlen: 24
117.102.39.0/24 maxlen: 24
117.102.40.0/24 maxlen: 24
117.102.41.0/24 maxlen: 24
117.102.42.0/24 maxlen: 24
117.102.43.0/24 maxlen: 24
117.102.44.0/24 maxlen: 24
117.102.45.0/24 maxlen: 24
117.102.46.0/24 maxlen: 24
117.102.47.0/24 maxlen: 24
203.81.192.0/21 maxlen: 22
203.81.192.0/24 maxlen: 24
203.81.193.0/24 maxlen: 24
203.81.194.0/24 maxlen: 24
203.81.195.0/24 maxlen: 24
203.81.196.0/24 maxlen: 24
203.81.197.0/24 maxlen: 24
203.81.198.0/23 maxlen: 24
203.81.208.0/21 maxlen: 24
203.81.230.0/24 maxlen: 24
203.81.232.0/21 maxlen: 24
2406:7000::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13764 (0x35c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Apr 16 13:44:30 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=661e80bd-8098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:74:22:50:a9:bb:54:c7:de:48:fd:da:b4:17:
fe:44:7e:26:be:51:7c:cd:c1:51:ba:7b:2d:ea:3b:
4a:a9:59:35:d9:c6:56:a9:fd:fb:7c:3e:aa:2a:fc:
95:c2:9d:1d:67:4d:e7:78:15:b9:c1:30:a6:f9:db:
b7:8a:dc:e2:05:01:49:da:90:1c:4d:0d:a3:e2:e7:
fa:42:c8:f1:94:0a:12:5f:fc:3c:08:b5:84:b3:02:
fc:39:46:d9:11:06:94:52:f8:04:37:4c:46:2c:3b:
2c:35:54:31:f5:3e:fd:ba:dd:19:59:b0:15:16:6c:
8f:b1:d0:24:47:d5:5c:60:25:d8:48:18:1c:13:3c:
f1:72:50:5f:d6:93:17:d6:0e:5d:55:89:18:7d:b1:
a8:66:1f:82:31:28:88:cd:ca:92:a7:78:21:ef:23:
4c:52:02:da:91:c4:56:60:73:56:b9:60:06:a7:65:
1b:e2:25:64:5b:22:ae:21:1c:f0:2f:d6:3c:37:25:
e5:38:2e:d1:71:1e:72:7d:71:e3:fb:27:72:1a:d4:
ae:fc:4a:f7:b9:e1:35:25:2a:6c:85:f8:19:95:e2:
f3:d8:82:55:d7:ec:78:95:e9:45:2c:6e:9b:46:7f:
5e:9e:e9:7d:c3:47:0e:71:45:8d:11:48:11:f1:e6:
28:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:26:41:B8:71:A5:8E:7D:9D:E7:67:33:CB:75:68:BA:F9:A1:C0:63
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/65D4191CFB0E11EEA5977B0BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.88.64.0/21
111.88.76.0/23
111.88.79.0/24
111.88.138.0/23
111.88.144.0/20
111.88.164.0-111.88.171.255
111.88.184.0/21
111.88.232.0-111.88.255.255
115.186.1.0/24
115.186.10.0-115.186.14.255
115.186.16.0/23
115.186.21.0/24
115.186.23.0-115.186.25.255
115.186.30.0-115.186.47.255
115.186.56.0/21
115.186.72.0/22
115.186.88.0/24
115.186.90.0/23
115.186.93.0-115.186.94.255
115.186.96.0/24
115.186.98.0/24
115.186.101.0-115.186.104.255
115.186.106.0-115.186.113.255
115.186.115.0/24
115.186.117.0-115.186.126.255
117.102.0.0-117.102.10.255
117.102.12.0-117.102.28.255
117.102.30.0-117.102.47.255
203.81.192.0/21
203.81.208.0/21
203.81.230.0/24
203.81.232.0/21
IPv6:
2406:7000::/32
Signature Algorithm: sha256WithRSAEncryption
81:c6:34:db:f8:92:c0:c5:f7:82:78:68:30:1d:07:93:99:dd:
b7:a0:35:d3:11:aa:09:2c:33:09:e5:9e:67:e9:80:03:2c:8b:
98:74:90:24:b6:96:77:73:4d:7d:b7:ea:46:88:7b:8b:23:8a:
10:b8:f9:d2:52:28:e4:f8:cf:fc:fb:f9:c2:f9:41:c7:96:85:
e0:8b:72:1f:00:16:42:1a:a8:ee:2a:28:d2:5d:77:c1:06:4c:
7c:04:eb:6d:a0:79:b0:da:b6:09:e1:af:dd:62:a5:cf:6f:b5:
80:5f:b5:45:d3:d7:d9:d5:32:62:d0:fc:7e:2d:ee:76:36:b9:
d4:a4:f8:3a:82:01:d1:6c:20:1e:4a:de:64:17:f7:dd:e8:10:
33:82:7d:68:09:ba:96:ce:87:00:fa:8b:90:20:2f:2c:a2:d0:
32:24:a6:c4:d5:47:f9:3c:6d:06:6a:04:c7:37:50:0a:10:bc:
77:bb:63:79:89:9d:b0:4d:62:b9:8b:5f:dd:09:f1:f2:ff:7c:
dd:ce:c1:cd:e9:5e:84:3e:9a:43:52:cc:48:ca:68:2e:fa:23:
a9:2e:79:5c:2f:b1:b0:64:ad:ea:55:0c:36:11:e0:b7:7e:c0:
6d:c4:1f:1c:19:44:36:1d:a8:8e:0a:3e:dc:58:0f:50:73:98:
eb:de:df:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:43:41 2025 by rpki-client