Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/19597368F8C511ECA52D0D11C4F9AE02.roa
File: 19597368F8C511ECA52D0D11C4F9AE02.roa (raw, json)
Hash identifier: 0PctRHU4iVw7DqEobs/jhxKKxG8B2XwzOFgaJPrD0OA=
Subject key identifier: DE:81:49:CB:56:64:FD:D6:39:20:4B:31:D3:6E:84:50:2B:63:3A:C7
Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Certificate serial: 1565
Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/19597368F8C511ECA52D0D11C4F9AE02.roa
Signing time: Mon 15 Aug 2022 08:24:21 +0000
ROA not before: Mon 15 Aug 2022 08:24:21 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 4826
IP address blocks: 14.137.106.0/24 maxlen: 24
27.106.192.0/21 maxlen: 21
27.106.200.0/22 maxlen: 22
43.241.188.0/22 maxlen: 22
43.252.252.0/22 maxlen: 22
49.255.0.0/16 maxlen: 16
49.255.233.0/24 maxlen: 24
49.255.249.0/24 maxlen: 24
49.255.255.0/24 maxlen: 24
103.37.120.0/24 maxlen: 24
103.233.148.0/22 maxlen: 22
103.255.16.0/22 maxlen: 22
110.5.116.0/22 maxlen: 22
112.213.224.0/19 maxlen: 19
113.29.240.0/22 maxlen: 22
113.29.243.0/24 maxlen: 24
114.31.192.0/20 maxlen: 20
116.212.192.0/18 maxlen: 18
116.212.204.0/24 maxlen: 24
116.212.230.0/23 maxlen: 24
116.212.253.0/24 maxlen: 24
119.161.83.0/24 maxlen: 24
119.161.84.0/24 maxlen: 24
119.161.86.0/23 maxlen: 23
119.161.90.0/24 maxlen: 24
119.161.91.0/24 maxlen: 24
119.161.92.0/24 maxlen: 24
119.161.93.0/24 maxlen: 24
119.161.94.0/24 maxlen: 24
119.161.95.0/24 maxlen: 24
121.54.128.0/19 maxlen: 19
121.54.128.0/20 maxlen: 20
121.54.136.0/24 maxlen: 24
121.54.145.0/24 maxlen: 24
121.79.0.0/17 maxlen: 17
123.103.192.0/19 maxlen: 19
124.243.128.0/18 maxlen: 18
124.243.128.0/24 maxlen: 24
124.243.129.0/24 maxlen: 24
124.243.130.0/24 maxlen: 24
124.243.131.0/24 maxlen: 24
124.243.132.0/22 maxlen: 22
124.243.136.0/22 maxlen: 22
124.243.140.0/24 maxlen: 24
124.243.141.0/24 maxlen: 24
124.243.142.0/24 maxlen: 24
124.243.143.0/24 maxlen: 24
124.243.144.0/21 maxlen: 21
124.243.152.0/21 maxlen: 21
124.243.160.0/22 maxlen: 22
124.243.164.0/22 maxlen: 22
124.243.168.0/21 maxlen: 21
124.243.176.0/21 maxlen: 21
124.243.184.0/21 maxlen: 21
124.254.64.0/18 maxlen: 18
124.254.64.0/24 maxlen: 24
124.254.95.0/24 maxlen: 24
124.254.96.0/24 maxlen: 24
175.45.64.0/18 maxlen: 18
175.45.78.0/24 maxlen: 24
175.45.82.0/24 maxlen: 24
175.45.83.0/24 maxlen: 24
175.45.85.0/24 maxlen: 24
175.45.92.0/24 maxlen: 24
175.45.94.0/23 maxlen: 23
175.45.99.0/24 maxlen: 24
175.45.100.0/24 maxlen: 24
175.45.101.0/24 maxlen: 24
175.45.105.0/24 maxlen: 24
175.45.111.0/24 maxlen: 24
175.45.125.0/24 maxlen: 24
180.148.64.0/19 maxlen: 19
180.148.76.0/24 maxlen: 24
180.148.77.0/24 maxlen: 24
180.148.83.0/24 maxlen: 24
180.148.84.0/24 maxlen: 24
180.148.95.0/24 maxlen: 24
202.62.138.0/24 maxlen: 24
202.62.139.0/24 maxlen: 24
202.62.141.0/24 maxlen: 24
202.62.142.0/24 maxlen: 24
202.62.147.0/24 maxlen: 24
202.62.152.0/24 maxlen: 24
202.62.153.0/24 maxlen: 24
202.62.154.0/24 maxlen: 24
202.62.155.0/24 maxlen: 24
202.62.240.0/22 maxlen: 22
202.80.176.0/20 maxlen: 20
202.89.160.0/19 maxlen: 19
202.137.96.0/20 maxlen: 20
202.189.64.0/20 maxlen: 20
202.189.72.0/24 maxlen: 24
202.189.73.0/24 maxlen: 24
203.12.251.0/24 maxlen: 24
203.18.212.0/23 maxlen: 23
203.89.64.0/19 maxlen: 19
203.89.80.0/24 maxlen: 24
203.89.92.0/24 maxlen: 24
203.92.28.0/22 maxlen: 22
203.129.128.0/19 maxlen: 19
203.153.224.0/19 maxlen: 19
203.153.226.0/24 maxlen: 24
203.161.64.0/18 maxlen: 18
203.188.128.0/19 maxlen: 19
210.50.198.0/24 maxlen: 24
223.27.96.0/21 maxlen: 21
2402:7800::/32 maxlen: 32
2402:7800:ff00::/40 maxlen: 40
2402:7800:ff00::/48 maxlen: 48
2402:7800:ff01::/48 maxlen: 48
2402:7800:ff20::/48 maxlen: 48
2402:7800:ff40::/44 maxlen: 44
2402:7800:ffe0::/48 maxlen: 48
2403:d600::/32 maxlen: 32
2403:fc00:300::/40 maxlen: 40
2404:b000::/32 maxlen: 32
2404:bc00::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5477 (0x1565)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Validity
Not Before: Aug 15 08:24:21 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=62fa02b5-a536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fa:03:15:04:8b:5b:c5:2f:db:6e:0c:20:5d:
a5:35:53:c2:2c:da:a0:96:40:da:80:a9:c4:46:9e:
46:33:3b:66:a7:dc:fc:5d:8c:3d:ae:76:87:57:a8:
bd:27:2a:7b:b3:38:3e:ca:cd:f4:2e:a9:d6:18:05:
49:b9:78:72:f0:eb:da:72:05:d2:56:1e:f4:b9:ac:
29:26:45:ed:8f:1d:f0:f0:93:bb:5d:2d:68:57:ed:
48:00:b3:ec:ea:e6:35:66:72:e4:a3:62:0a:33:86:
cf:25:1f:2b:e8:75:42:63:8a:9e:75:5e:4b:95:77:
c4:51:0b:93:06:d5:6c:b1:07:37:e6:6a:37:ec:bd:
ea:c8:45:78:e4:ac:72:a2:87:1a:8d:16:2e:3e:11:
ba:96:c2:6b:20:fa:79:b0:8f:38:95:2e:8c:b4:a8:
fb:56:f0:6a:46:1f:18:6f:34:74:e9:2f:26:c8:9f:
27:b1:af:60:18:b3:3c:e6:af:8d:3b:c3:7c:52:9c:
60:a8:b2:24:af:e2:ff:9d:73:75:fa:3c:d2:5f:ac:
0a:20:f9:05:ed:b1:90:fc:fd:d6:3b:16:80:45:b8:
d2:17:b7:03:7a:c2:f4:36:65:b2:b6:b6:b2:ee:9e:
c6:3a:b5:ea:dd:d8:93:01:b3:36:a0:94:c6:aa:56:
31:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:81:49:CB:56:64:FD:D6:39:20:4B:31:D3:6E:84:50:2B:63:3A:C7
X509v3 Authority Key Identifier:
keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/19597368F8C511ECA52D0D11C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.137.106.0/24
27.106.192.0-27.106.203.255
43.241.188.0/22
43.252.252.0/22
49.255.0.0/16
103.37.120.0/24
103.233.148.0/22
103.255.16.0/22
110.5.116.0/22
112.213.224.0/19
113.29.240.0/22
114.31.192.0/20
116.212.192.0/18
119.161.83.0-119.161.84.255
119.161.86.0/23
119.161.90.0-119.161.95.255
121.54.128.0/19
121.79.0.0/17
123.103.192.0/19
124.243.128.0/18
124.254.64.0/18
175.45.64.0/18
180.148.64.0/19
202.62.138.0/23
202.62.141.0-202.62.142.255
202.62.147.0/24
202.62.152.0/22
202.62.240.0/22
202.80.176.0/20
202.89.160.0/19
202.137.96.0/20
202.189.64.0/20
203.12.251.0/24
203.18.212.0/23
203.89.64.0/19
203.92.28.0/22
203.129.128.0/19
203.153.224.0/19
203.161.64.0/18
203.188.128.0/19
210.50.198.0/24
223.27.96.0/21
IPv6:
2402:7800::/32
2403:d600::/32
2403:fc00:300::/40
2404:b000::/32
2404:bc00::/32
Signature Algorithm: sha256WithRSAEncryption
06:53:ea:53:c0:ff:6d:84:cf:4d:08:7f:81:ba:1c:f6:53:be:
b9:e8:45:25:c2:95:85:64:cf:f0:94:2a:6b:55:b3:87:a4:46:
e5:0e:6c:f8:18:61:8e:32:2a:e5:9a:ff:95:5b:cd:98:bc:30:
ab:55:00:c2:44:d8:67:02:58:f4:94:c7:95:50:ad:67:4e:c4:
c2:2a:6d:9a:04:63:54:7c:44:6b:be:a7:99:48:17:37:22:4d:
a3:97:b1:e5:89:58:7f:14:4d:b7:ab:c6:c9:db:6e:bd:22:49:
e7:b0:a9:5b:df:91:98:3e:67:92:8b:88:69:83:e0:3e:00:04:
92:90:e5:ca:7f:fd:01:09:05:e6:57:f7:78:99:07:4d:16:e5:
73:0e:97:09:eb:17:66:a5:89:79:b4:12:7b:54:45:2b:c9:8f:
fd:3e:23:e3:a6:f3:fb:4d:06:f9:6b:10:28:72:9b:7c:2f:82:
fa:91:55:88:fd:53:43:8a:23:c9:17:cb:84:7f:9a:63:fa:ce:
e7:4c:70:2a:35:64:b8:1f:86:b1:a4:d8:9e:90:88:fd:49:60:
f8:99:b8:02:a2:81:46:bd:fe:64:b6:76:9f:4f:b1:a4:60:67:
9a:91:1d:f8:86:1c:94:6c:9b:8d:0b:80:a9:37:63:26:55:14:
eb:b8:79:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:13 2023 by rpki-client on console-fra.rpki-client.org