Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/D7B96AC828DD11ED8EA0FC4FC4F9AE02.roa
File: D7B96AC828DD11ED8EA0FC4FC4F9AE02.roa (raw, json)
Hash identifier: XBFaRVtdSh5H7QRULwBpI6vCSc5ocws2EWPIisG3DD0=
Subject key identifier: 3C:2E:48:37:48:F7:88:52:6B:06:BC:14:C9:9B:E2:C9:9A:EC:B8:DB
Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Certificate serial: 158B
Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/D7B96AC828DD11ED8EA0FC4FC4F9AE02.roa
Signing time: Wed 31 Aug 2022 03:34:39 +0000
ROA not before: Wed 31 Aug 2022 03:34:39 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 9443
IP address blocks: 14.137.64.0/18 maxlen: 18
14.137.192.0/19 maxlen: 19
58.178.0.0/16 maxlen: 16
58.179.0.0/16 maxlen: 16
111.220.0.0/16 maxlen: 16
112.141.0.0/16 maxlen: 16
112.213.128.0/18 maxlen: 18
116.240.0.0/16 maxlen: 16
121.79.126.0/23 maxlen: 23
122.148.0.0/16 maxlen: 16
122.149.0.0/16 maxlen: 16
122.150.0.0/16 maxlen: 16
122.151.0.0/16 maxlen: 16
123.3.0.0/16 maxlen: 16
125.168.0.0/16 maxlen: 16
202.4.64.0/19 maxlen: 19
202.7.224.0/19 maxlen: 19
202.7.224.0/20 maxlen: 20
202.14.191.0/24 maxlen: 24
202.14.192.0/22 maxlen: 22
202.61.12.0/24 maxlen: 24
202.61.13.0/24 maxlen: 24
202.62.128.0/19 maxlen: 21
202.67.64.0/18 maxlen: 18
202.76.128.0/18 maxlen: 18
202.86.113.0/24 maxlen: 24
202.86.114.0/23 maxlen: 23
202.86.116.0/23 maxlen: 23
202.86.118.0/24 maxlen: 24
202.128.112.0/20 maxlen: 20
202.128.114.0/23 maxlen: 23
202.130.195.0/24 maxlen: 24
202.130.203.0/24 maxlen: 24
202.130.205.0/24 maxlen: 24
202.130.206.0/24 maxlen: 24
202.130.214.0/24 maxlen: 24
202.130.217.0/24 maxlen: 24
202.138.0.0/18 maxlen: 18
202.154.64.0/18 maxlen: 18
203.16.9.0/24 maxlen: 24
203.16.170.0/24 maxlen: 24
203.21.47.0/24 maxlen: 24
203.21.104.0/24 maxlen: 24
203.23.116.0/24 maxlen: 24
203.24.100.0/23 maxlen: 23
203.28.168.0/24 maxlen: 24
203.30.143.0/24 maxlen: 24
203.30.211.0/24 maxlen: 24
203.34.15.0/24 maxlen: 24
203.56.5.0/24 maxlen: 24
203.57.110.0/24 maxlen: 24
203.62.135.0/24 maxlen: 24
203.91.224.0/19 maxlen: 19
203.91.224.0/20 maxlen: 20
203.91.240.0/21 maxlen: 21
203.123.64.0/20 maxlen: 20
203.132.224.0/19 maxlen: 19
203.134.0.0/17 maxlen: 17
203.134.128.0/18 maxlen: 18
203.142.128.0/19 maxlen: 19
203.161.160.0/20 maxlen: 20
203.190.192.0/20 maxlen: 20
203.191.160.0/19 maxlen: 19
203.212.128.0/19 maxlen: 19
210.50.0.0/16 maxlen: 16
210.86.240.0/20 maxlen: 20
211.26.0.0/16 maxlen: 16
211.27.0.0/16 maxlen: 16
218.214.0.0/16 maxlen: 16
218.215.0.0/16 maxlen: 16
2403:4800::/32 maxlen: 32
2403:9e00::/32 maxlen: 32
2403:fc00::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5515 (0x158b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Validity
Not Before: Aug 31 03:34:39 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=630ed6cf-6bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1c:65:6a:96:0c:9c:f0:69:18:75:35:1d:b7:
98:86:7d:f3:72:94:e3:e1:d2:7d:5d:f1:c3:5f:15:
20:fb:03:5d:ec:72:d3:95:73:a0:29:23:e1:e2:6f:
59:33:7d:60:12:a8:84:ec:5f:63:4d:b9:07:f5:ea:
87:b2:8e:66:4f:51:b0:d5:be:f1:c5:aa:98:c3:7d:
5a:df:5d:b4:66:a9:27:98:45:fb:7e:62:97:34:d8:
e3:b2:0d:f2:7e:39:2f:e4:ed:3d:36:56:a8:48:54:
9a:27:d2:23:62:ac:02:c8:53:36:67:d4:3f:a0:d7:
08:0c:67:42:95:9c:59:21:60:4f:c4:e2:63:0c:1b:
81:7d:ab:fc:a6:7d:98:08:b6:9b:27:91:9b:ad:e7:
b3:94:38:01:ba:ed:20:83:af:97:90:92:30:28:fa:
38:4c:e6:d3:62:90:d2:6c:ba:5d:c1:bd:82:d3:67:
04:aa:4e:e2:50:87:44:b4:09:5e:af:85:2a:c9:7a:
d7:5e:9e:f8:44:fa:72:1b:a2:33:0c:19:df:ca:fe:
7d:41:4d:cb:02:63:e1:75:89:94:da:df:a5:45:5a:
7f:c7:fc:50:ed:cf:51:57:1c:82:03:7c:cf:ef:77:
2d:07:69:21:41:27:56:8d:7b:2f:a8:0e:6f:37:71:
82:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2E:48:37:48:F7:88:52:6B:06:BC:14:C9:9B:E2:C9:9A:EC:B8:DB
X509v3 Authority Key Identifier:
keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/D7B96AC828DD11ED8EA0FC4FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.137.64.0/18
14.137.192.0/19
58.178.0.0/15
111.220.0.0/16
112.141.0.0/16
112.213.128.0/18
116.240.0.0/16
121.79.126.0/23
122.148.0.0/14
123.3.0.0/16
125.168.0.0/16
202.4.64.0/19
202.7.224.0/19
202.14.191.0-202.14.195.255
202.61.12.0/23
202.62.128.0/19
202.67.64.0/18
202.76.128.0/18
202.86.113.0-202.86.118.255
202.128.112.0/20
202.130.195.0/24
202.130.203.0/24
202.130.205.0-202.130.206.255
202.130.214.0/24
202.130.217.0/24
202.138.0.0/18
202.154.64.0/18
203.16.9.0/24
203.16.170.0/24
203.21.47.0/24
203.21.104.0/24
203.23.116.0/24
203.24.100.0/23
203.28.168.0/24
203.30.143.0/24
203.30.211.0/24
203.34.15.0/24
203.56.5.0/24
203.57.110.0/24
203.62.135.0/24
203.91.224.0/19
203.123.64.0/20
203.132.224.0/19
203.134.0.0-203.134.191.255
203.142.128.0/19
203.161.160.0/20
203.190.192.0/20
203.191.160.0/19
203.212.128.0/19
210.50.0.0/16
210.86.240.0/20
211.26.0.0/15
218.214.0.0/15
IPv6:
2403:4800::/32
2403:9e00::/32
2403:fc00::/32
Signature Algorithm: sha256WithRSAEncryption
83:78:ba:84:f5:5a:a2:c7:69:dc:a7:87:79:c7:dc:7d:29:cb:
7c:10:9a:bb:e0:27:fe:e9:19:df:11:b1:c1:cd:fc:7c:9b:83:
6c:eb:d3:7b:0a:63:a8:ae:88:e2:a3:a0:af:3f:57:ce:07:6e:
7f:97:a1:cf:98:f5:d7:e0:96:57:a5:09:9a:14:46:82:a3:99:
45:fc:df:25:0a:96:c3:e2:02:2f:bc:1c:67:61:f4:8d:a7:81:
07:6a:8f:5a:b9:d6:6b:36:1b:bf:85:14:ff:c9:8a:69:e0:e5:
9f:bb:51:4e:c5:6c:7d:19:9e:c3:b3:af:32:b0:ef:de:e9:e7:
42:7a:2a:71:fe:4d:4c:14:49:5c:a2:9c:76:1f:64:b3:27:84:
35:9e:e6:b2:92:4b:ab:be:85:d5:4d:17:bc:bb:d1:61:70:4f:
75:54:34:64:45:de:b2:05:c0:16:9d:94:5b:63:16:43:ce:4c:
81:0e:e5:9f:f3:25:f4:47:5a:cc:ce:83:78:a6:2f:e0:58:9c:
b5:0b:d6:9e:8d:1e:a4:0f:c9:f8:d6:de:f0:aa:cb:94:7c:75:
60:79:ed:43:e6:52:0f:d1:34:45:15:b5:76:67:41:de:f3:3a:
0b:9a:72:9c:40:d2:59:87:5c:40:52:80:9c:9d:68:7e:80:3c:
66:2f:7a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:13 2023 by rpki-client on console-fra.rpki-client.org