Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/F67C135892A411EDB79C4923C4F9AE02.roa
File: F67C135892A411EDB79C4923C4F9AE02.roa (raw, json)
Hash identifier: w3iKVH2FtYVdCJFCj0wBxQrcYxlGbXbjwaiYIr1CCWg=
Subject key identifier: E0:8C:50:73:56:36:46:BE:52:87:77:43:64:21:3B:C6:77:66:B7:E0
Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Certificate serial: 16A4
Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/F67C135892A411EDB79C4923C4F9AE02.roa
Signing time: Fri 12 May 2023 01:17:08 +0000
ROA not before: Fri 12 May 2023 01:17:08 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 4826
IP address blocks: 14.137.106.0/24 maxlen: 24
27.106.192.0/21 maxlen: 21
27.106.200.0/22 maxlen: 22
43.241.188.0/22 maxlen: 22
43.252.252.0/22 maxlen: 22
49.255.0.0/16 maxlen: 16
49.255.233.0/24 maxlen: 24
49.255.249.0/24 maxlen: 24
49.255.255.0/24 maxlen: 24
103.37.120.0/24 maxlen: 24
103.233.148.0/22 maxlen: 22
103.255.16.0/22 maxlen: 22
110.5.116.0/22 maxlen: 22
112.213.192.0/19 maxlen: 19
112.213.224.0/19 maxlen: 19
113.29.240.0/22 maxlen: 22
113.29.243.0/24 maxlen: 24
114.31.192.0/20 maxlen: 20
116.212.192.0/18 maxlen: 18
116.212.204.0/24 maxlen: 24
116.212.230.0/23 maxlen: 24
116.212.253.0/24 maxlen: 24
119.161.83.0/24 maxlen: 24
119.161.84.0/24 maxlen: 24
119.161.86.0/23 maxlen: 23
119.161.90.0/24 maxlen: 24
119.161.91.0/24 maxlen: 24
119.161.92.0/24 maxlen: 24
119.161.93.0/24 maxlen: 24
119.161.94.0/24 maxlen: 24
119.161.95.0/24 maxlen: 24
121.54.128.0/19 maxlen: 19
121.54.128.0/20 maxlen: 20
121.54.136.0/24 maxlen: 24
121.54.145.0/24 maxlen: 24
121.79.0.0/17 maxlen: 17
123.103.192.0/19 maxlen: 19
124.254.64.0/18 maxlen: 18
124.254.64.0/24 maxlen: 24
124.254.95.0/24 maxlen: 24
124.254.96.0/24 maxlen: 24
175.45.64.0/18 maxlen: 18
175.45.78.0/24 maxlen: 24
175.45.82.0/24 maxlen: 24
175.45.83.0/24 maxlen: 24
175.45.85.0/24 maxlen: 24
175.45.92.0/24 maxlen: 24
175.45.94.0/23 maxlen: 23
175.45.99.0/24 maxlen: 24
175.45.100.0/24 maxlen: 24
175.45.101.0/24 maxlen: 24
175.45.105.0/24 maxlen: 24
175.45.111.0/24 maxlen: 24
175.45.125.0/24 maxlen: 24
180.148.64.0/19 maxlen: 19
180.148.76.0/24 maxlen: 24
180.148.77.0/24 maxlen: 24
180.148.83.0/24 maxlen: 24
180.148.84.0/24 maxlen: 24
180.148.95.0/24 maxlen: 24
202.62.138.0/24 maxlen: 24
202.62.139.0/24 maxlen: 24
202.62.141.0/24 maxlen: 24
202.62.142.0/24 maxlen: 24
202.62.147.0/24 maxlen: 24
202.62.152.0/24 maxlen: 24
202.62.153.0/24 maxlen: 24
202.62.154.0/24 maxlen: 24
202.62.155.0/24 maxlen: 24
202.62.240.0/22 maxlen: 22
202.80.176.0/20 maxlen: 20
202.89.160.0/19 maxlen: 19
202.137.96.0/20 maxlen: 20
202.137.192.0/21 maxlen: 21
202.189.64.0/20 maxlen: 20
202.189.72.0/24 maxlen: 24
202.189.73.0/24 maxlen: 24
203.12.251.0/24 maxlen: 24
203.18.212.0/23 maxlen: 23
203.22.206.0/24 maxlen: 24
203.26.237.0/24 maxlen: 24
203.28.186.0/24 maxlen: 24
203.29.177.0/24 maxlen: 24
203.29.178.0/23 maxlen: 23
203.31.42.0/23 maxlen: 23
203.55.11.0/24 maxlen: 24
203.89.64.0/19 maxlen: 19
203.89.80.0/24 maxlen: 24
203.89.92.0/24 maxlen: 24
203.92.28.0/22 maxlen: 22
203.129.128.0/19 maxlen: 19
203.153.224.0/19 maxlen: 19
203.153.226.0/24 maxlen: 24
203.161.64.0/18 maxlen: 18
203.188.128.0/19 maxlen: 19
210.50.198.0/24 maxlen: 24
211.26.193.0/24 maxlen: 24
218.100.80.0/22 maxlen: 22
223.27.96.0/21 maxlen: 21
2402:7800::/32 maxlen: 32
2402:7800:ff00::/40 maxlen: 40
2402:7800:ff00::/48 maxlen: 48
2402:7800:ff01::/48 maxlen: 48
2402:7800:ff20::/48 maxlen: 48
2402:7800:ff40::/44 maxlen: 44
2402:7800:ffe0::/48 maxlen: 48
2403:d600::/32 maxlen: 32
2403:fc00:300::/40 maxlen: 40
2404:b000::/32 maxlen: 32
2404:bc00::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5796 (0x16a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Validity
Not Before: May 12 01:17:08 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=645d9393-9bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6e:43:5e:38:bb:07:be:ed:2a:db:f8:9e:5f:
b7:5f:c8:4b:05:50:c1:88:e9:b8:4f:10:0f:bc:9d:
08:48:da:77:38:cb:26:9f:7c:09:6f:0e:d8:92:c6:
c7:12:34:9f:8e:13:2d:b2:43:08:56:3b:f4:81:19:
64:fd:e5:7c:e0:33:be:29:e3:0f:1b:06:14:1c:0d:
80:4e:45:4c:74:72:df:8f:81:c9:03:96:af:55:20:
24:38:65:75:04:3f:17:ea:bb:8d:ea:19:d9:8e:d1:
3f:58:23:a8:f5:81:c1:2c:b0:11:4e:1b:15:29:47:
f0:68:0e:0a:1e:fa:b2:7e:b6:a3:8c:fc:01:1c:ff:
76:c6:7e:3c:72:50:9b:46:fc:63:27:5a:d2:7a:f1:
9f:b1:b5:fd:9e:81:bf:75:6f:f5:d0:b6:c1:2e:c5:
0d:c6:a8:e0:f4:8e:e4:91:4a:44:37:96:8b:66:7b:
0a:6c:05:80:0f:1a:d2:a4:c4:b2:05:40:06:08:7e:
98:67:b0:85:e9:5c:83:7e:76:4d:1c:e4:a6:bf:47:
94:f1:5f:8d:57:f3:88:8a:3d:d2:ae:b0:0f:5e:d0:
a4:bc:ce:ca:0d:cc:bd:da:22:54:2b:fc:05:93:72:
f4:dc:45:cf:4b:d8:93:48:c9:4a:a7:35:f8:02:d1:
ab:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8C:50:73:56:36:46:BE:52:87:77:43:64:21:3B:C6:77:66:B7:E0
X509v3 Authority Key Identifier:
keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/F67C135892A411EDB79C4923C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.137.106.0/24
27.106.192.0-27.106.203.255
43.241.188.0/22
43.252.252.0/22
49.255.0.0/16
103.37.120.0/24
103.233.148.0/22
103.255.16.0/22
110.5.116.0/22
112.213.192.0/18
113.29.240.0/22
114.31.192.0/20
116.212.192.0/18
119.161.83.0-119.161.84.255
119.161.86.0/23
119.161.90.0-119.161.95.255
121.54.128.0/19
121.79.0.0/17
123.103.192.0/19
124.254.64.0/18
175.45.64.0/18
180.148.64.0/19
202.62.138.0/23
202.62.141.0-202.62.142.255
202.62.147.0/24
202.62.152.0/22
202.62.240.0/22
202.80.176.0/20
202.89.160.0/19
202.137.96.0/20
202.137.192.0/21
202.189.64.0/20
203.12.251.0/24
203.18.212.0/23
203.22.206.0/24
203.26.237.0/24
203.28.186.0/24
203.29.177.0-203.29.179.255
203.31.42.0/23
203.55.11.0/24
203.89.64.0/19
203.92.28.0/22
203.129.128.0/19
203.153.224.0/19
203.161.64.0/18
203.188.128.0/19
210.50.198.0/24
211.26.193.0/24
218.100.80.0/22
223.27.96.0/21
IPv6:
2402:7800::/32
2403:d600::/32
2403:fc00:300::/40
2404:b000::/32
2404:bc00::/32
Signature Algorithm: sha256WithRSAEncryption
ae:59:9c:69:e2:3b:0f:6b:3f:f5:f1:da:37:c1:b0:33:62:7e:
d7:1e:22:3b:ed:7d:97:e8:de:21:02:ec:50:96:c5:98:67:fa:
c3:ab:e2:9f:76:c9:79:fe:da:b0:9c:08:f9:7e:38:24:c3:b1:
57:09:18:72:a9:6f:76:4f:a7:84:67:3d:77:d4:90:56:ee:7b:
0f:09:0e:8d:cf:a9:a1:cc:0f:c5:4b:b1:a7:42:55:28:3c:e1:
13:59:66:82:ee:4c:7c:4a:1d:52:a0:88:9b:f2:7f:fe:a3:76:
53:37:e8:ee:1d:bf:c8:fe:db:db:f0:40:dc:12:97:95:d2:e5:
ab:18:af:17:eb:03:20:0c:80:2d:b7:e3:3d:68:fa:be:cd:54:
4f:6f:67:4a:b6:e9:01:ac:97:2b:39:10:30:12:8d:f8:b4:e4:
7b:53:fe:e2:3a:71:65:78:86:2e:0a:10:dc:f0:6b:7e:1c:2b:
96:af:fb:e0:f6:7a:27:b4:d7:6f:fd:e3:af:d8:90:af:fc:bd:
28:cb:d7:ff:be:3c:cb:c6:a6:23:cf:7d:e2:5d:3c:ee:df:6b:
00:d3:ea:d6:bc:37:65:a1:d8:2b:5f:cf:a2:ee:ee:ba:37:e5:
44:93:df:d9:8e:00:dc:d6:31:40:e5:04:38:f8:84:d1:cd:61:
7c:67:c3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:13 2023 by rpki-client on console-fra.rpki-client.org