Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/24247D7C78C511EC99C79A6CC4F9AE02.roa
File: 24247D7C78C511EC99C79A6CC4F9AE02.roa (raw, json)
Hash identifier: p9jmpbt+so1jashMbpiD5ojfwQos0l+dYwpkQdy8cxY=
Subject key identifier: D1:FB:01:13:24:2C:75:99:36:66:71:7A:B9:E5:A8:44:72:E1:70:5F
Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Certificate serial: 13F3
Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/24247D7C78C511EC99C79A6CC4F9AE02.roa
Signing time: Fri 18 Feb 2022 06:25:03 +0000
ROA not before: Fri 18 Feb 2022 06:25:03 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 9443
IP address blocks: 14.137.64.0/18 maxlen: 18
14.137.64.0/19 maxlen: 19
14.137.192.0/19 maxlen: 19
58.178.0.0/16 maxlen: 16
58.179.0.0/16 maxlen: 16
111.220.0.0/16 maxlen: 16
112.141.0.0/16 maxlen: 16
112.213.128.0/18 maxlen: 18
116.240.0.0/16 maxlen: 16
121.79.126.0/23 maxlen: 23
122.148.0.0/16 maxlen: 16
122.149.0.0/16 maxlen: 16
122.150.0.0/16 maxlen: 16
122.151.0.0/16 maxlen: 16
123.3.0.0/16 maxlen: 16
125.168.0.0/16 maxlen: 16
202.4.64.0/19 maxlen: 19
202.7.224.0/19 maxlen: 19
202.7.224.0/20 maxlen: 20
202.14.191.0/24 maxlen: 24
202.14.192.0/22 maxlen: 22
202.61.12.0/24 maxlen: 24
202.61.13.0/24 maxlen: 24
202.62.128.0/19 maxlen: 21
202.67.64.0/18 maxlen: 18
202.76.128.0/18 maxlen: 18
202.86.113.0/24 maxlen: 24
202.86.114.0/23 maxlen: 23
202.86.116.0/23 maxlen: 23
202.86.118.0/24 maxlen: 24
202.128.112.0/20 maxlen: 20
202.128.114.0/23 maxlen: 23
202.130.195.0/24 maxlen: 24
202.130.203.0/24 maxlen: 24
202.130.205.0/24 maxlen: 24
202.130.206.0/24 maxlen: 24
202.130.214.0/24 maxlen: 24
202.130.217.0/24 maxlen: 24
202.138.0.0/18 maxlen: 18
202.154.64.0/18 maxlen: 18
203.16.9.0/24 maxlen: 24
203.16.170.0/24 maxlen: 24
203.21.47.0/24 maxlen: 24
203.21.104.0/24 maxlen: 24
203.23.116.0/24 maxlen: 24
203.24.100.0/23 maxlen: 23
203.28.168.0/24 maxlen: 24
203.30.143.0/24 maxlen: 24
203.30.211.0/24 maxlen: 24
203.34.15.0/24 maxlen: 24
203.56.5.0/24 maxlen: 24
203.57.110.0/24 maxlen: 24
203.62.135.0/24 maxlen: 24
203.91.224.0/19 maxlen: 19
203.91.224.0/20 maxlen: 20
203.91.240.0/21 maxlen: 21
203.123.64.0/19 maxlen: 19
203.132.224.0/19 maxlen: 19
203.134.0.0/17 maxlen: 17
203.134.128.0/18 maxlen: 18
203.142.128.0/19 maxlen: 19
203.161.160.0/20 maxlen: 20
203.190.192.0/20 maxlen: 20
203.191.160.0/19 maxlen: 19
203.212.128.0/19 maxlen: 19
210.50.0.0/16 maxlen: 16
210.86.240.0/20 maxlen: 20
211.26.0.0/16 maxlen: 16
211.27.0.0/16 maxlen: 16
218.214.0.0/16 maxlen: 16
218.215.0.0/16 maxlen: 16
2403:4800::/32 maxlen: 32
2403:9e00::/32 maxlen: 32
2403:fc00::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5107 (0x13f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Validity
Not Before: Feb 18 06:25:03 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=620f3bbe-de56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:15:bb:d1:4b:f9:de:e1:e3:32:79:57:38:96:
fa:60:97:5a:ea:eb:eb:00:b8:7d:0c:65:47:c0:ef:
bb:b7:49:1b:74:0a:a5:70:dc:ab:57:44:c0:38:5f:
d3:fc:c2:92:4e:2d:a2:6f:86:cb:9e:5c:20:71:f7:
42:f2:6b:f1:bc:dc:0c:b4:eb:b3:18:2e:e5:d4:2c:
0d:66:9b:e0:8a:ff:6f:d3:ed:2f:8e:df:45:f0:f7:
e2:b8:8b:78:2b:77:03:d4:bc:ff:dc:27:82:36:8f:
05:95:1a:dc:62:ad:32:83:1a:5c:66:b7:3a:c7:55:
03:e7:67:ca:f3:ba:7d:ba:51:5a:2a:23:de:34:98:
68:eb:b1:c1:d7:5b:22:dd:cc:5b:fb:f7:a6:42:06:
4a:79:53:5d:4f:97:89:1e:af:38:48:c6:1d:ff:f7:
b7:74:ab:d7:e5:35:0b:8a:d3:64:42:45:65:27:2c:
56:d6:5d:ba:de:4e:4f:08:8a:8a:d4:f8:e2:e8:8f:
ba:77:07:8f:75:8c:df:ad:25:6e:5e:17:a7:89:cc:
dc:b2:58:3b:e8:f9:bf:f2:01:b5:e3:e8:65:12:2c:
77:24:51:7d:0e:88:e1:f1:a3:27:cc:be:62:dd:7f:
05:29:fb:0f:c8:3e:bd:73:27:85:ea:40:dd:c6:ca:
84:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FB:01:13:24:2C:75:99:36:66:71:7A:B9:E5:A8:44:72:E1:70:5F
X509v3 Authority Key Identifier:
keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/24247D7C78C511EC99C79A6CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.137.64.0/18
14.137.192.0/19
58.178.0.0/15
111.220.0.0/16
112.141.0.0/16
112.213.128.0/18
116.240.0.0/16
121.79.126.0/23
122.148.0.0/14
123.3.0.0/16
125.168.0.0/16
202.4.64.0/19
202.7.224.0/19
202.14.191.0-202.14.195.255
202.61.12.0/23
202.62.128.0/19
202.67.64.0/18
202.76.128.0/18
202.86.113.0-202.86.118.255
202.128.112.0/20
202.130.195.0/24
202.130.203.0/24
202.130.205.0-202.130.206.255
202.130.214.0/24
202.130.217.0/24
202.138.0.0/18
202.154.64.0/18
203.16.9.0/24
203.16.170.0/24
203.21.47.0/24
203.21.104.0/24
203.23.116.0/24
203.24.100.0/23
203.28.168.0/24
203.30.143.0/24
203.30.211.0/24
203.34.15.0/24
203.56.5.0/24
203.57.110.0/24
203.62.135.0/24
203.91.224.0/19
203.123.64.0/19
203.132.224.0/19
203.134.0.0-203.134.191.255
203.142.128.0/19
203.161.160.0/20
203.190.192.0/20
203.191.160.0/19
203.212.128.0/19
210.50.0.0/16
210.86.240.0/20
211.26.0.0/15
218.214.0.0/15
IPv6:
2403:4800::/32
2403:9e00::/32
2403:fc00::/32
Signature Algorithm: sha256WithRSAEncryption
65:20:2f:04:02:4a:4d:0e:bb:75:78:9e:ba:59:1f:34:da:a1:
94:6a:87:15:d0:46:0b:4b:1a:5e:50:41:f2:1b:8e:10:f9:1d:
f7:97:c5:ca:65:08:f0:c4:82:d3:72:92:99:63:30:9a:55:e3:
9b:13:00:ad:d9:0b:65:61:46:64:e1:af:5d:75:81:36:07:bd:
ba:56:5e:95:01:36:7a:7b:15:f6:ca:1d:9b:72:fe:01:64:f7:
19:76:e7:c8:79:58:3c:46:c0:43:5c:af:9b:75:9e:e0:ba:4f:
43:19:10:87:30:83:48:2c:c1:f2:28:45:a1:1a:fb:56:fb:51:
27:2a:66:1e:90:a3:59:ca:c4:57:e5:aa:32:28:c2:56:23:cd:
22:10:1b:07:f2:22:24:e5:60:7f:86:99:ba:bb:8d:3a:d5:10:
96:fc:f3:97:8f:33:0a:70:24:ba:23:f8:95:32:97:fe:3f:c2:
7e:67:da:95:03:bb:ac:f8:4b:1a:dd:d7:88:92:ad:05:9f:0e:
59:9d:0d:6c:aa:ef:78:80:64:72:8c:14:ae:10:89:24:00:b8:
4d:8e:d6:42:15:3a:cb:d0:8e:74:e4:b2:bd:f5:5e:88:5f:30:
52:db:53:e9:78:f9:aa:53:fc:b4:9d:88:d1:f5:0e:f1:e9:c3:
04:f1:c2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:13 2023 by rpki-client on console-fra.rpki-client.org