Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/93C83B50ECEE11EFBDA58651C4F9AE02.roa
File: 93C83B50ECEE11EFBDA58651C4F9AE02.roa (raw, json)
Hash identifier: gsnXO/hoxTG32nkEItAMCNriNzdqNG65aeiKRLTbnk0=
Subject key identifier: F7:B5:7C:AD:A7:6A:2C:F0:73:73:C3:0A:E6:11:38:09:F0:63:0B:0B
Certificate issuer: /CN=A91F33A5/serialNumber=4FF52847215C4A22E9F1149E6CBFEDF74D61CE8B
Certificate serial: 031C
Authority key identifier: 4F:F5:28:47:21:5C:4A:22:E9:F1:14:9E:6C:BF:ED:F7:4D:61:CE:8B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/93C83B50ECEE11EFBDA58651C4F9AE02.roa
Signing time: Mon 17 Feb 2025 05:18:10 +0000
ROA not before: Mon 17 Feb 2025 05:18:10 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 6262
IP address blocks: 130.116.0.0/16 maxlen: 24
130.155.0.0/16 maxlen: 24
138.194.0.0/16 maxlen: 24
140.79.0.0/16 maxlen: 24
140.253.0.0/16 maxlen: 24
144.110.0.0/16 maxlen: 24
146.118.0.0/16 maxlen: 24
152.83.0.0/16 maxlen: 24
192.16.180.0/24 maxlen: 24
192.41.146.0/24 maxlen: 24
192.42.60.0/23 maxlen: 24
192.42.62.0/24 maxlen: 24
192.54.105.0/24 maxlen: 24
192.54.106.0/24 maxlen: 24
192.55.219.0/24 maxlen: 24
192.55.232.0/24 maxlen: 24
192.65.130.0/24 maxlen: 24
192.67.12.0/24 maxlen: 24
192.67.171.0/24 maxlen: 24
192.68.132.0/24 maxlen: 24
192.82.140.0/24 maxlen: 24
192.83.238.0/24 maxlen: 24
192.84.237.0/24 maxlen: 24
192.84.238.0/24 maxlen: 24
192.94.62.0/23 maxlen: 24
192.94.64.0/24 maxlen: 24
192.94.209.0/24 maxlen: 24
192.102.250.0/23 maxlen: 24
192.107.9.0/24 maxlen: 24
192.111.32.0/24 maxlen: 24
192.122.176.0/24 maxlen: 24
192.124.117.0/24 maxlen: 24
192.124.152.0/24 maxlen: 24
192.138.100.0/24 maxlen: 24
192.149.36.0/24 maxlen: 24
192.150.202.0/24 maxlen: 24
192.160.16.0/24 maxlen: 24
192.188.115.0/24 maxlen: 24
192.188.186.0/24 maxlen: 24
192.207.156.0/23 maxlen: 24
192.207.158.0/24 maxlen: 24
192.207.197.0/24 maxlen: 24
192.207.198.0/24 maxlen: 24
192.231.212.0/24 maxlen: 24
192.245.210.0/23 maxlen: 24
192.245.212.0/22 maxlen: 24
192.245.216.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 796 (0x31c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F33A5
Validity
Not Before: Feb 17 05:18:10 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=67b2c692-d38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e7:25:2f:9f:cd:6b:4a:2b:31:48:d6:24:fb:
5f:cc:b8:4f:e3:1e:ce:57:26:9d:1e:9e:10:61:d0:
9c:5c:fd:9e:73:59:87:74:25:9e:2d:34:06:b2:06:
03:6f:d5:87:a9:36:57:f2:ac:5a:5a:83:82:dd:ea:
49:ce:7a:cd:0d:38:43:98:7f:24:78:d9:36:b0:35:
bc:f7:55:37:0f:b4:a0:6d:10:c5:0a:47:7b:69:5a:
8e:ba:9a:69:ef:c1:b7:e6:09:24:fc:1e:1a:fd:02:
97:48:61:dc:12:36:80:6b:21:f1:fa:e3:ab:ff:1a:
f8:c1:bc:e5:32:7b:c6:1b:0b:40:3f:71:9e:84:ba:
21:d1:94:c8:69:ac:d1:62:63:a5:92:f9:4b:25:c6:
95:97:8c:9d:e5:de:58:f9:81:96:8b:d2:66:8a:0f:
cb:70:52:45:14:f4:93:1c:15:ec:e8:9d:b3:59:34:
e3:9b:c0:03:0d:4d:18:6a:2f:45:41:0b:bd:90:77:
26:f2:14:f1:ae:5a:ab:30:54:2d:34:71:dd:48:ce:
bd:81:1e:40:7f:94:96:8b:83:2e:65:9d:19:ff:e9:
84:f5:6a:0a:ef:90:b9:db:bb:6c:e5:de:97:c6:82:
d3:57:df:91:1c:a3:4a:a9:57:c6:8e:1d:f9:4e:4d:
23:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B5:7C:AD:A7:6A:2C:F0:73:73:C3:0A:E6:11:38:09:F0:63:0B:0B
X509v3 Authority Key Identifier:
keyid:4F:F5:28:47:21:5C:4A:22:E9:F1:14:9E:6C:BF:ED:F7:4D:61:CE:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/93C83B50ECEE11EFBDA58651C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
130.116.0.0/16
130.155.0.0/16
138.194.0.0/16
140.79.0.0/16
140.253.0.0/16
144.110.0.0/16
146.118.0.0/16
152.83.0.0/16
192.16.180.0/24
192.41.146.0/24
192.42.60.0-192.42.62.255
192.54.105.0-192.54.106.255
192.55.219.0/24
192.55.232.0/24
192.65.130.0/24
192.67.12.0/24
192.67.171.0/24
192.68.132.0/24
192.82.140.0/24
192.83.238.0/24
192.84.237.0-192.84.238.255
192.94.62.0-192.94.64.255
192.94.209.0/24
192.102.250.0/23
192.107.9.0/24
192.111.32.0/24
192.122.176.0/24
192.124.117.0/24
192.124.152.0/24
192.138.100.0/24
192.149.36.0/24
192.150.202.0/24
192.160.16.0/24
192.188.115.0/24
192.188.186.0/24
192.207.156.0-192.207.158.255
192.207.197.0-192.207.198.255
192.231.212.0/24
192.245.210.0-192.245.217.255
Signature Algorithm: sha256WithRSAEncryption
84:bc:16:12:fb:49:c8:a4:b2:57:62:8e:b3:a2:4d:f1:f4:cf:
de:7c:b0:8a:05:f0:f3:61:17:ce:af:e2:56:87:46:93:b2:0c:
30:2d:f3:25:25:8b:85:bd:d2:66:49:58:13:c0:d0:15:3f:ae:
f7:3c:05:86:1b:9a:4b:94:48:5f:47:82:90:0f:18:de:37:ea:
b2:dc:0c:66:a0:23:02:1d:01:38:45:e1:5e:1a:09:f6:21:28:
fb:e9:e0:dd:53:4c:d5:44:0c:c4:6f:bb:61:01:d9:89:e4:81:
95:af:6e:b4:ab:6a:4a:15:d5:3e:df:cd:77:dc:42:e7:86:01:
79:67:05:ba:16:7c:d5:65:52:27:3d:dd:ae:05:03:9b:0f:ec:
87:31:b6:3f:e9:dd:9c:5c:d7:d5:94:ae:85:63:39:5c:bf:13:
f9:02:40:73:32:32:e3:4d:6e:31:fe:78:e3:d5:a6:2d:bb:04:
4f:ec:86:f6:30:c0:43:57:cc:19:2c:4f:0d:43:6f:fe:1a:b8:
2b:4a:32:d4:7f:d4:40:9d:5e:4a:98:1e:e4:b6:85:7f:69:95:
d8:c2:09:5a:6c:44:27:56:9c:28:a6:25:72:25:f3:0e:5d:b6:
c8:13:c6:42:f6:af:a4:53:09:00:2f:00:4e:2f:ac:58:4d:4e:
bb:4f:62:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:30:17 2025 by rpki-client