Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/AF00B3C08EC511EA89B77B4DC4F9AE02.roa
File: AF00B3C08EC511EA89B77B4DC4F9AE02.roa (raw, json)
Hash identifier: p2SEMrYf0tp6PJxfPgmjgEzfSGXydyQ1Lfj4XiVwZ+w=
Subject key identifier: A2:23:42:67:B6:B8:3C:89:9B:5E:32:9A:6C:E2:2F:97:E1:AE:62:D2
Certificate issuer: /CN=A91AB6EB/serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A
Certificate serial: 094C
Authority key identifier: FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/AF00B3C08EC511EA89B77B4DC4F9AE02.roa
Signing time: Tue 29 Aug 2023 23:45:12 +0000
ROA not before: Tue 29 Aug 2023 23:45:12 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 23607
IP address blocks: 27.255.0.0/18 maxlen: 18
27.255.0.0/24 maxlen: 24
27.255.1.0/24 maxlen: 24
27.255.2.0/24 maxlen: 24
27.255.3.0/24 maxlen: 24
27.255.4.0/24 maxlen: 24
27.255.5.0/24 maxlen: 24
27.255.6.0/24 maxlen: 24
27.255.7.0/24 maxlen: 24
27.255.8.0/24 maxlen: 24
27.255.9.0/24 maxlen: 24
27.255.10.0/24 maxlen: 24
27.255.11.0/24 maxlen: 24
27.255.12.0/24 maxlen: 24
27.255.13.0/24 maxlen: 24
27.255.14.0/24 maxlen: 24
27.255.15.0/24 maxlen: 24
27.255.16.0/24 maxlen: 24
27.255.17.0/24 maxlen: 24
27.255.18.0/24 maxlen: 24
27.255.19.0/24 maxlen: 24
27.255.20.0/24 maxlen: 24
27.255.21.0/24 maxlen: 24
27.255.22.0/24 maxlen: 24
27.255.23.0/24 maxlen: 24
27.255.24.0/24 maxlen: 24
27.255.25.0/24 maxlen: 24
27.255.26.0/24 maxlen: 24
27.255.27.0/24 maxlen: 24
27.255.28.0/24 maxlen: 24
27.255.29.0/24 maxlen: 24
27.255.30.0/24 maxlen: 24
27.255.31.0/24 maxlen: 24
27.255.32.0/24 maxlen: 24
27.255.33.0/24 maxlen: 24
27.255.34.0/24 maxlen: 24
27.255.36.0/24 maxlen: 24
27.255.37.0/24 maxlen: 24
27.255.38.0/24 maxlen: 24
27.255.39.0/24 maxlen: 24
27.255.40.0/24 maxlen: 24
27.255.41.0/24 maxlen: 24
27.255.42.0/24 maxlen: 24
27.255.43.0/24 maxlen: 24
27.255.44.0/24 maxlen: 24
27.255.45.0/24 maxlen: 24
27.255.46.0/24 maxlen: 24
27.255.47.0/24 maxlen: 24
27.255.48.0/24 maxlen: 24
27.255.49.0/24 maxlen: 24
27.255.50.0/24 maxlen: 24
27.255.51.0/24 maxlen: 24
27.255.52.0/24 maxlen: 24
27.255.53.0/24 maxlen: 24
27.255.54.0/24 maxlen: 24
27.255.55.0/24 maxlen: 24
27.255.56.0/24 maxlen: 24
27.255.57.0/24 maxlen: 24
27.255.58.0/24 maxlen: 24
27.255.59.0/24 maxlen: 24
27.255.60.0/24 maxlen: 24
27.255.61.0/24 maxlen: 24
27.255.62.0/24 maxlen: 24
27.255.63.0/24 maxlen: 24
42.201.133.0/24 maxlen: 24
42.201.139.0/24 maxlen: 24
42.201.140.0/24 maxlen: 24
42.201.143.0/24 maxlen: 24
42.201.148.0/24 maxlen: 24
42.201.152.0/24 maxlen: 24
42.201.156.0/24 maxlen: 24
42.201.157.0/24 maxlen: 24
42.201.160.0/24 maxlen: 24
42.201.163.0/24 maxlen: 24
42.201.164.0/24 maxlen: 24
42.201.171.0/24 maxlen: 24
42.201.174.0/24 maxlen: 24
42.201.175.0/24 maxlen: 24
42.201.178.0/24 maxlen: 24
42.201.180.0/24 maxlen: 24
42.201.182.0/24 maxlen: 24
42.201.192.0/24 maxlen: 24
42.201.194.0/24 maxlen: 24
42.201.198.0/24 maxlen: 24
42.201.201.0/24 maxlen: 24
42.201.202.0/24 maxlen: 24
42.201.203.0/24 maxlen: 24
42.201.205.0/24 maxlen: 24
42.201.211.0/24 maxlen: 24
42.201.218.0/24 maxlen: 24
42.201.221.0/24 maxlen: 24
42.201.226.0/24 maxlen: 24
42.201.246.0/24 maxlen: 24
42.201.247.0/24 maxlen: 24
103.17.200.0/24 maxlen: 24
103.17.201.0/24 maxlen: 24
103.17.202.0/24 maxlen: 24
103.17.203.0/24 maxlen: 24
110.34.32.0/24 maxlen: 24
110.34.33.0/24 maxlen: 24
110.34.34.0/24 maxlen: 24
110.34.35.0/24 maxlen: 24
110.34.36.0/24 maxlen: 24
110.34.37.0/24 maxlen: 24
110.34.38.0/24 maxlen: 24
110.34.39.0/24 maxlen: 24
180.92.128.0/24 maxlen: 24
180.92.129.0/24 maxlen: 24
180.92.130.0/24 maxlen: 24
180.92.131.0/24 maxlen: 24
180.92.132.0/24 maxlen: 24
180.92.133.0/24 maxlen: 24
180.92.134.0/24 maxlen: 24
180.92.135.0/24 maxlen: 24
180.92.136.0/24 maxlen: 24
180.92.137.0/24 maxlen: 24
180.92.138.0/24 maxlen: 24
180.92.139.0/24 maxlen: 24
180.92.140.0/24 maxlen: 24
180.92.141.0/24 maxlen: 24
180.92.142.0/24 maxlen: 24
180.92.143.0/24 maxlen: 24
180.92.144.0/24 maxlen: 24
180.92.145.0/24 maxlen: 24
180.92.146.0/24 maxlen: 24
180.92.147.0/24 maxlen: 24
180.92.148.0/24 maxlen: 24
180.92.149.0/24 maxlen: 24
180.92.150.0/24 maxlen: 24
180.92.151.0/24 maxlen: 24
180.92.152.0/24 maxlen: 24
180.92.153.0/24 maxlen: 24
180.92.154.0/24 maxlen: 24
180.92.155.0/24 maxlen: 24
180.92.156.0/24 maxlen: 24
180.92.157.0/24 maxlen: 24
180.92.158.0/24 maxlen: 24
180.92.159.0/24 maxlen: 24
192.135.90.0/24 maxlen: 24
192.135.91.0/24 maxlen: 24
192.144.78.0/24 maxlen: 24
192.144.79.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2380 (0x94c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB6EB/serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A
Validity
Not Before: Aug 29 23:45:12 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=64ee8308-d7e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ca:96:0d:5f:d4:ba:88:31:9e:78:27:09:64:
07:80:ea:86:e0:9c:24:8c:0a:40:f0:d6:5e:c5:de:
d7:08:58:a8:e0:8d:d7:ce:56:cd:92:bf:d3:9e:f1:
33:79:03:4a:f2:33:9c:23:43:60:b1:07:70:1e:04:
40:4f:d4:4d:15:89:26:7c:83:0c:fa:9d:a0:a5:ae:
ac:68:59:f4:7f:22:f0:7a:f1:b1:42:7f:4e:45:d4:
35:55:de:14:c7:b7:87:35:ce:12:ce:62:6f:d2:d9:
a1:dc:4c:cd:5c:05:d5:9d:9d:46:23:89:36:ed:6f:
e4:db:c8:e2:87:db:e5:83:c1:4c:94:49:97:77:fb:
7d:55:49:26:d2:77:ba:af:42:75:20:e9:48:eb:15:
78:a5:da:f7:db:41:f1:12:4b:a0:40:07:69:e3:e1:
8c:84:1d:c8:9b:64:db:24:3e:11:07:87:19:39:38:
48:f3:06:5c:70:6b:f6:db:e4:4d:69:8b:28:87:69:
5d:42:a0:76:24:e2:2c:98:ff:11:b5:5c:e9:9c:02:
1f:3a:09:60:c9:52:2d:62:10:61:d0:c2:70:4d:00:
aa:a3:67:63:e9:27:6b:3a:0b:58:f5:8b:4a:1e:48:
7b:56:c8:d1:69:4d:f9:a9:36:e3:3c:c5:b9:6c:4e:
96:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:23:42:67:B6:B8:3C:89:9B:5E:32:9A:6C:E2:2F:97:E1:AE:62:D2
X509v3 Authority Key Identifier:
keyid:FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/AF00B3C08EC511EA89B77B4DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.255.0.0/18
42.201.133.0/24
42.201.139.0-42.201.140.255
42.201.143.0/24
42.201.148.0/24
42.201.152.0/24
42.201.156.0/23
42.201.160.0/24
42.201.163.0-42.201.164.255
42.201.171.0/24
42.201.174.0/23
42.201.178.0/24
42.201.180.0/24
42.201.182.0/24
42.201.192.0/24
42.201.194.0/24
42.201.198.0/24
42.201.201.0-42.201.203.255
42.201.205.0/24
42.201.211.0/24
42.201.218.0/24
42.201.221.0/24
42.201.226.0/24
42.201.246.0/23
103.17.200.0/22
110.34.32.0/21
180.92.128.0/19
192.135.90.0/23
192.144.78.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:e7:5b:ec:15:88:8f:8c:97:ec:c3:17:67:3b:cf:60:75:74:
f2:ed:41:ce:c0:b1:d3:34:47:74:0a:43:01:75:06:c2:52:d8:
2e:f9:e3:07:50:9f:c8:f3:ce:ac:29:10:9c:74:0b:4d:c0:83:
72:9f:43:bc:ee:c4:e8:73:46:ae:c3:db:b7:db:9f:10:be:07:
72:70:fc:8b:60:33:46:5b:c8:b8:94:67:a3:a5:86:58:36:80:
da:27:35:88:8b:fe:8c:a5:22:2f:fd:46:3d:1e:66:f3:1c:2c:
45:ec:e9:38:81:0b:76:68:d1:45:9c:90:c3:c6:52:1c:45:43:
de:9f:ba:f7:a5:e6:d3:e7:64:5c:88:f2:6d:07:16:eb:02:1b:
1c:24:f7:64:9b:a8:22:0e:89:9b:99:66:ab:3b:3e:4d:f5:d6:
67:d2:77:2b:02:c1:5c:ea:29:95:77:92:24:be:4a:86:a3:e2:
c0:3b:03:f5:ed:fd:9a:c1:17:de:94:1c:59:23:94:b6:ab:6f:
42:9a:b3:81:b7:c6:da:49:bd:a8:03:64:12:73:13:74:94:c1:
6d:fc:f2:6e:b6:8b:59:3b:e8:5d:c2:e9:48:d3:2b:5a:b5:cd:
33:b7:bf:ee:2e:5b:0b:ea:ab:07:da:0d:a7:88:dd:7c:be:65:
a9:d9:d2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:37 2024 by rpki-client on console-fra.rpki-client.org