Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/92961174FF1711EDAB69E46CC4F9AE02.roa
File: 92961174FF1711EDAB69E46CC4F9AE02.roa (raw, json)
Hash identifier: BiUGxg4RrvIdKUNfe8NVCBZlXCC2zWMHLb1B1LTyL1w=
Subject key identifier: D5:B3:38:99:15:1D:9E:0A:78:85:AA:29:D9:1D:98:2A:87:20:53:BD
Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Certificate serial: 16BB
Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/92961174FF1711EDAB69E46CC4F9AE02.roa
Signing time: Tue 30 May 2023 18:27:03 +0000
ROA not before: Tue 30 May 2023 18:27:03 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 9443
IP address blocks: 14.137.64.0/18 maxlen: 18
14.137.192.0/19 maxlen: 19
58.178.0.0/16 maxlen: 16
58.179.0.0/16 maxlen: 16
111.220.0.0/16 maxlen: 16
112.141.0.0/16 maxlen: 16
112.213.128.0/18 maxlen: 18
116.240.0.0/16 maxlen: 16
121.79.126.0/23 maxlen: 23
122.148.0.0/16 maxlen: 16
122.149.0.0/16 maxlen: 16
122.150.0.0/16 maxlen: 16
122.151.0.0/16 maxlen: 16
123.2.0.0/16 maxlen: 16
123.3.0.0/16 maxlen: 16
125.168.0.0/16 maxlen: 16
202.4.64.0/19 maxlen: 19
202.14.191.0/24 maxlen: 24
202.14.192.0/22 maxlen: 22
202.61.12.0/24 maxlen: 24
202.61.13.0/24 maxlen: 24
202.62.128.0/19 maxlen: 21
202.67.64.0/18 maxlen: 18
202.76.128.0/18 maxlen: 18
202.86.113.0/24 maxlen: 24
202.86.114.0/23 maxlen: 23
202.86.116.0/23 maxlen: 23
202.86.118.0/24 maxlen: 24
202.128.112.0/20 maxlen: 20
202.128.114.0/23 maxlen: 23
202.130.195.0/24 maxlen: 24
202.130.203.0/24 maxlen: 24
202.130.205.0/24 maxlen: 24
202.130.214.0/24 maxlen: 24
202.136.32.0/20 maxlen: 20
202.138.0.0/18 maxlen: 18
202.147.128.0/20 maxlen: 20
202.154.64.0/18 maxlen: 18
203.16.9.0/24 maxlen: 24
203.16.170.0/24 maxlen: 24
203.23.116.0/24 maxlen: 24
203.24.100.0/23 maxlen: 23
203.56.5.0/24 maxlen: 24
203.62.135.0/24 maxlen: 24
203.91.224.0/19 maxlen: 19
203.91.224.0/20 maxlen: 20
203.91.240.0/21 maxlen: 21
203.123.64.0/20 maxlen: 20
203.132.224.0/19 maxlen: 19
203.134.0.0/17 maxlen: 17
203.134.128.0/18 maxlen: 18
203.142.128.0/19 maxlen: 19
203.161.160.0/20 maxlen: 20
203.190.192.0/20 maxlen: 20
203.191.160.0/19 maxlen: 19
203.212.128.0/19 maxlen: 19
210.50.0.0/16 maxlen: 16
210.86.240.0/20 maxlen: 20
211.26.0.0/16 maxlen: 16
211.27.0.0/16 maxlen: 16
218.214.0.0/16 maxlen: 16
218.215.0.0/16 maxlen: 16
2403:4800::/32 maxlen: 32
2403:9e00::/32 maxlen: 32
2403:fc00::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5819 (0x16bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Validity
Not Before: May 30 18:27:03 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=64763ff7-7f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a6:5f:78:dd:5c:d8:a6:bb:c9:8b:51:74:69:
9f:7c:e9:61:9c:1a:80:61:e2:3f:10:f2:07:c7:36:
02:61:a3:28:d8:bc:16:d9:b3:b3:6b:3f:32:6c:9f:
79:6f:29:96:ff:47:dd:3a:4b:b1:5c:00:31:76:e0:
3f:4f:d4:86:37:15:91:9a:1a:c2:e2:1a:c8:e8:6e:
96:60:9e:2f:18:61:6b:fd:1d:f0:e7:2b:25:f1:78:
10:82:67:ab:47:55:dc:55:dc:04:c8:d3:51:c3:14:
b0:e4:9a:9e:f4:26:98:29:dc:f8:08:ae:91:ab:b9:
c8:41:ce:a2:ac:89:67:d2:7e:9b:8b:fb:26:af:ba:
82:e6:1f:87:23:0f:53:73:b4:2e:ac:d6:e7:d5:b3:
69:78:0b:e7:21:b8:99:19:24:16:db:8a:13:6f:f6:
15:36:c5:82:c5:d1:e9:6b:d4:17:b2:d0:2d:2d:3d:
be:1d:ca:0a:5a:d9:1d:c7:93:68:d1:47:59:6a:07:
a3:7a:de:fd:15:2a:47:57:c9:8e:71:9c:4c:64:c3:
e1:ae:ca:27:1e:fd:03:ab:70:a7:fa:3b:e7:a5:6a:
e0:12:8d:c5:80:0b:2c:76:11:62:72:ed:72:fd:dc:
c0:72:b8:02:89:09:63:91:3a:4b:47:37:fd:2c:b6:
33:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B3:38:99:15:1D:9E:0A:78:85:AA:29:D9:1D:98:2A:87:20:53:BD
X509v3 Authority Key Identifier:
keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/92961174FF1711EDAB69E46CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.137.64.0/18
14.137.192.0/19
58.178.0.0/15
111.220.0.0/16
112.141.0.0/16
112.213.128.0/18
116.240.0.0/16
121.79.126.0/23
122.148.0.0/14
123.2.0.0/15
125.168.0.0/16
202.4.64.0/19
202.14.191.0-202.14.195.255
202.61.12.0/23
202.62.128.0/19
202.67.64.0/18
202.76.128.0/18
202.86.113.0-202.86.118.255
202.128.112.0/20
202.130.195.0/24
202.130.203.0/24
202.130.205.0/24
202.130.214.0/24
202.136.32.0/20
202.138.0.0/18
202.147.128.0/20
202.154.64.0/18
203.16.9.0/24
203.16.170.0/24
203.23.116.0/24
203.24.100.0/23
203.56.5.0/24
203.62.135.0/24
203.91.224.0/19
203.123.64.0/20
203.132.224.0/19
203.134.0.0-203.134.191.255
203.142.128.0/19
203.161.160.0/20
203.190.192.0/20
203.191.160.0/19
203.212.128.0/19
210.50.0.0/16
210.86.240.0/20
211.26.0.0/15
218.214.0.0/15
IPv6:
2403:4800::/32
2403:9e00::/32
2403:fc00::/32
Signature Algorithm: sha256WithRSAEncryption
a7:b8:5d:35:80:54:40:22:1c:10:51:b6:29:8c:9e:d1:78:1c:
d4:fa:3b:6e:3a:10:fa:f4:e0:af:bc:ca:7d:78:92:d8:19:0e:
74:bc:15:a9:d7:4a:e2:9b:ba:ab:b6:4c:29:16:16:e5:16:cd:
53:a6:ec:ec:d5:d7:1f:c6:d6:9d:8c:cd:b0:a4:3f:cb:13:d9:
70:c0:eb:eb:26:18:98:19:73:47:5c:c2:ae:6c:31:9b:41:2f:
9d:d8:db:d3:3c:d8:82:a9:44:2a:f8:49:ee:41:ae:a2:f7:c7:
5e:87:2a:e1:bd:e2:3d:43:2a:3d:f0:ea:1c:00:bb:4b:64:9f:
47:a7:69:32:89:4e:d1:ec:56:ac:f5:26:13:a5:08:90:8d:78:
20:7c:9c:9c:ca:9e:23:f6:f5:c2:1a:8a:66:14:09:2f:c5:83:
1b:41:69:9a:95:b2:42:1c:15:31:8d:08:d1:61:96:de:56:75:
a7:9e:98:5f:6c:22:3d:a2:7c:ec:57:1d:58:85:fe:3c:a5:6c:
9a:bb:f4:f9:73:3b:9f:a9:b0:df:5e:78:c3:48:b0:6f:1f:cd:
25:b9:85:44:6e:a3:20:2f:55:70:53:73:d3:54:7f:7a:10:a9:
69:9a:1c:08:18:88:70:50:06:43:18:52:b1:79:13:8e:c3:d6:
10:0c:93:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:13 2023 by rpki-client on console-fra.rpki-client.org