Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/4D4F504EFF4411EDA9459E3DC4F9AE02.roa
File: 4D4F504EFF4411EDA9459E3DC4F9AE02.roa (raw, json)
Hash identifier: Xi+8xVVKNt9FjHt56HpfveNaufVSCoY8GEmQOPL3IPY=
Subject key identifier: 78:6B:11:23:AF:4C:5E:07:9B:F2:BE:79:EB:F6:5A:89:0F:5B:9B:BD
Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Certificate serial: 16BD
Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/4D4F504EFF4411EDA9459E3DC4F9AE02.roa
Signing time: Tue 30 May 2023 23:47:14 +0000
ROA not before: Tue 30 May 2023 23:47:14 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 9443
IP address blocks: 14.137.64.0/18 maxlen: 18
14.137.192.0/19 maxlen: 19
58.178.0.0/16 maxlen: 16
58.179.0.0/16 maxlen: 16
111.220.0.0/16 maxlen: 16
112.141.0.0/16 maxlen: 16
112.213.128.0/18 maxlen: 18
116.240.0.0/16 maxlen: 16
121.79.126.0/23 maxlen: 23
122.148.0.0/16 maxlen: 16
122.149.0.0/16 maxlen: 16
122.150.0.0/16 maxlen: 16
122.151.0.0/16 maxlen: 16
123.2.0.0/16 maxlen: 16
123.3.0.0/16 maxlen: 16
125.168.0.0/16 maxlen: 16
202.4.64.0/19 maxlen: 19
202.14.191.0/24 maxlen: 24
202.14.192.0/22 maxlen: 22
202.61.12.0/24 maxlen: 24
202.61.13.0/24 maxlen: 24
202.62.128.0/19 maxlen: 21
202.67.64.0/18 maxlen: 18
202.76.128.0/18 maxlen: 18
202.86.113.0/24 maxlen: 24
202.86.114.0/23 maxlen: 23
202.86.116.0/23 maxlen: 23
202.86.118.0/24 maxlen: 24
202.128.112.0/20 maxlen: 20
202.128.114.0/23 maxlen: 23
202.130.195.0/24 maxlen: 24
202.130.205.0/24 maxlen: 24
202.130.214.0/24 maxlen: 24
202.136.32.0/20 maxlen: 20
202.138.0.0/18 maxlen: 18
202.147.128.0/20 maxlen: 20
202.154.64.0/18 maxlen: 18
203.16.9.0/24 maxlen: 24
203.16.170.0/24 maxlen: 24
203.23.116.0/24 maxlen: 24
203.24.100.0/23 maxlen: 23
203.56.5.0/24 maxlen: 24
203.62.135.0/24 maxlen: 24
203.91.224.0/19 maxlen: 19
203.91.224.0/20 maxlen: 20
203.91.240.0/21 maxlen: 21
203.123.64.0/20 maxlen: 20
203.132.224.0/19 maxlen: 19
203.134.0.0/17 maxlen: 17
203.134.128.0/18 maxlen: 18
203.142.128.0/19 maxlen: 19
203.161.160.0/20 maxlen: 20
203.190.192.0/20 maxlen: 20
203.191.160.0/19 maxlen: 19
203.212.128.0/19 maxlen: 19
210.50.0.0/16 maxlen: 16
210.86.240.0/20 maxlen: 20
211.26.0.0/16 maxlen: 16
211.27.0.0/16 maxlen: 16
218.214.0.0/16 maxlen: 16
218.215.0.0/16 maxlen: 16
2403:4800::/32 maxlen: 32
2403:9e00::/32 maxlen: 32
2403:fc00::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5821 (0x16bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Validity
Not Before: May 30 23:47:14 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=64768b02-3fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:eb:0f:4e:2d:af:40:e5:62:da:32:6d:4a:75:
0c:7a:27:95:61:b2:64:4e:8b:fd:42:64:c8:33:a7:
c6:9d:6a:c6:19:b8:75:5f:77:8e:d6:60:2c:7e:3a:
0b:91:2f:ef:d2:91:12:ab:b1:5f:67:9b:ab:af:48:
e5:f5:38:ba:60:a0:cc:2b:fe:a9:9c:85:d0:65:c6:
20:48:7c:33:4e:c0:c0:e8:5b:db:71:7d:56:a6:73:
44:25:ea:43:b0:51:32:74:e8:2a:80:2a:76:47:df:
de:35:9f:48:88:0c:14:27:e7:19:41:8d:ff:78:c6:
67:34:92:23:41:98:05:88:b9:81:26:58:86:a9:09:
f7:ed:f6:d7:45:66:db:46:84:02:47:2a:09:b4:c9:
6f:ed:d0:bc:26:5a:13:5d:42:48:e6:9f:f1:c6:ce:
be:ae:a7:1c:e6:df:6b:33:5f:65:e9:12:eb:e8:b6:
86:ae:03:0a:f4:d8:80:2b:1e:5f:4d:ff:9a:bb:df:
82:08:26:04:26:58:0e:0a:41:a6:eb:f9:cc:46:4a:
3c:5a:e4:21:15:af:0a:8c:99:0f:2a:74:07:76:5e:
54:2e:6f:c0:7d:e9:d3:60:ca:8b:6d:c5:16:d0:9b:
a7:dc:be:5a:8f:d3:12:ad:ba:39:4c:cc:38:ea:4e:
03:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6B:11:23:AF:4C:5E:07:9B:F2:BE:79:EB:F6:5A:89:0F:5B:9B:BD
X509v3 Authority Key Identifier:
keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/4D4F504EFF4411EDA9459E3DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.137.64.0/18
14.137.192.0/19
58.178.0.0/15
111.220.0.0/16
112.141.0.0/16
112.213.128.0/18
116.240.0.0/16
121.79.126.0/23
122.148.0.0/14
123.2.0.0/15
125.168.0.0/16
202.4.64.0/19
202.14.191.0-202.14.195.255
202.61.12.0/23
202.62.128.0/19
202.67.64.0/18
202.76.128.0/18
202.86.113.0-202.86.118.255
202.128.112.0/20
202.130.195.0/24
202.130.205.0/24
202.130.214.0/24
202.136.32.0/20
202.138.0.0/18
202.147.128.0/20
202.154.64.0/18
203.16.9.0/24
203.16.170.0/24
203.23.116.0/24
203.24.100.0/23
203.56.5.0/24
203.62.135.0/24
203.91.224.0/19
203.123.64.0/20
203.132.224.0/19
203.134.0.0-203.134.191.255
203.142.128.0/19
203.161.160.0/20
203.190.192.0/20
203.191.160.0/19
203.212.128.0/19
210.50.0.0/16
210.86.240.0/20
211.26.0.0/15
218.214.0.0/15
IPv6:
2403:4800::/32
2403:9e00::/32
2403:fc00::/32
Signature Algorithm: sha256WithRSAEncryption
6d:ad:7a:c4:1c:47:1c:2f:17:cc:c6:a5:63:34:5c:73:e5:05:
e0:21:db:38:44:32:66:bf:75:30:a8:40:04:38:6e:41:85:62:
ff:6e:8d:bc:8a:dd:b0:c5:d3:c5:69:0b:0e:ba:c7:6f:d1:ff:
d8:bf:2d:29:57:4e:0a:03:3e:3e:d9:58:79:f4:d7:89:93:af:
5d:d7:d7:f1:90:73:c5:8d:2a:79:18:58:a5:52:40:92:22:6d:
d5:6d:ae:55:0a:64:a0:9a:ae:2d:b8:35:65:d8:68:c3:c1:f1:
bb:e5:4f:fd:49:20:26:6d:4a:4a:63:d6:15:22:b9:41:e6:c9:
4b:45:e3:80:f1:f0:da:13:9b:4c:f5:8b:a9:db:f9:be:3c:ce:
12:9c:b2:f4:a8:4c:c1:e5:6b:85:33:12:c7:e5:6b:72:39:52:
49:85:6f:f0:6e:a9:3b:e2:00:d4:fb:bd:41:f6:c1:2e:e5:65:
6d:c9:e8:13:9f:ab:df:36:0c:16:f1:da:50:da:fe:42:13:30:
4e:8f:da:5d:4d:24:82:0e:c6:3e:23:48:f4:44:f9:24:96:af:
9a:09:84:fd:50:06:2c:0f:77:bb:0b:38:3b:44:93:10:6f:e7:
2d:f8:be:67:43:c5:bc:97:fd:8c:59:da:90:79:11:e1:18:07:
43:18:f3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:11 2023 by rpki-client on console-ams.rpki-client.org