Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/D342997A906811EABA2EBA49C4F9AE02.roa
File: D342997A906811EABA2EBA49C4F9AE02.roa (raw, json)
Hash identifier: axbJyJjMI6sMvUxVpUajSSCFPhbfFYxp+qG323/omsI=
Subject key identifier: 20:9D:2A:50:50:66:18:B6:FA:8E:75:16:9B:E0:64:D1:B9:A6:5A:83
Certificate issuer: /CN=A91AB6EB/serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A
Certificate serial: 0865
Authority key identifier: FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/D342997A906811EABA2EBA49C4F9AE02.roa
Signing time: Wed 08 Mar 2023 21:29:06 +0000
ROA not before: Wed 08 Mar 2023 21:29:06 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 55714
IP address blocks: 27.255.0.0/18 maxlen: 18
27.255.0.0/24 maxlen: 24
27.255.1.0/24 maxlen: 24
27.255.2.0/24 maxlen: 24
27.255.3.0/24 maxlen: 24
27.255.4.0/24 maxlen: 24
27.255.6.0/24 maxlen: 24
27.255.7.0/24 maxlen: 24
27.255.8.0/24 maxlen: 24
27.255.9.0/24 maxlen: 24
27.255.10.0/24 maxlen: 24
27.255.11.0/24 maxlen: 24
27.255.12.0/24 maxlen: 24
27.255.13.0/24 maxlen: 24
27.255.14.0/24 maxlen: 24
27.255.15.0/24 maxlen: 24
27.255.16.0/24 maxlen: 24
27.255.17.0/24 maxlen: 24
27.255.18.0/24 maxlen: 24
27.255.19.0/24 maxlen: 24
27.255.20.0/24 maxlen: 24
27.255.21.0/24 maxlen: 24
27.255.22.0/24 maxlen: 24
27.255.23.0/24 maxlen: 24
27.255.24.0/24 maxlen: 24
27.255.25.0/24 maxlen: 24
27.255.26.0/24 maxlen: 24
27.255.27.0/24 maxlen: 24
27.255.28.0/24 maxlen: 24
27.255.29.0/24 maxlen: 24
27.255.30.0/24 maxlen: 24
27.255.31.0/24 maxlen: 24
27.255.32.0/24 maxlen: 24
27.255.33.0/24 maxlen: 24
27.255.34.0/24 maxlen: 24
27.255.35.0/24 maxlen: 24
27.255.36.0/24 maxlen: 24
27.255.37.0/24 maxlen: 24
27.255.38.0/24 maxlen: 24
27.255.39.0/24 maxlen: 24
27.255.40.0/24 maxlen: 24
27.255.41.0/24 maxlen: 24
27.255.42.0/24 maxlen: 24
27.255.43.0/24 maxlen: 24
27.255.44.0/24 maxlen: 24
27.255.45.0/24 maxlen: 24
27.255.46.0/24 maxlen: 24
27.255.47.0/24 maxlen: 24
27.255.48.0/24 maxlen: 24
27.255.49.0/24 maxlen: 24
27.255.51.0/24 maxlen: 24
27.255.52.0/24 maxlen: 24
27.255.53.0/24 maxlen: 24
27.255.54.0/24 maxlen: 24
27.255.55.0/24 maxlen: 24
27.255.56.0/24 maxlen: 24
27.255.57.0/24 maxlen: 24
27.255.58.0/24 maxlen: 24
27.255.59.0/24 maxlen: 24
27.255.60.0/24 maxlen: 24
27.255.61.0/24 maxlen: 24
27.255.62.0/24 maxlen: 24
27.255.63.0/24 maxlen: 24
42.201.128.0/17 maxlen: 17
42.201.128.0/18 maxlen: 18
42.201.128.0/19 maxlen: 19
42.201.128.0/20 maxlen: 20
42.201.128.0/21 maxlen: 21
42.201.128.0/23 maxlen: 23
42.201.128.0/24 maxlen: 24
42.201.129.0/24 maxlen: 24
42.201.130.0/24 maxlen: 24
42.201.131.0/24 maxlen: 24
42.201.132.0/24 maxlen: 24
42.201.133.0/24 maxlen: 24
42.201.134.0/24 maxlen: 24
42.201.135.0/24 maxlen: 24
42.201.136.0/24 maxlen: 24
42.201.137.0/24 maxlen: 24
42.201.138.0/24 maxlen: 24
42.201.139.0/24 maxlen: 24
42.201.140.0/24 maxlen: 24
42.201.141.0/24 maxlen: 24
42.201.142.0/24 maxlen: 24
42.201.143.0/24 maxlen: 24
42.201.144.0/24 maxlen: 24
42.201.145.0/24 maxlen: 24
42.201.146.0/24 maxlen: 24
42.201.147.0/24 maxlen: 24
42.201.148.0/24 maxlen: 24
42.201.149.0/24 maxlen: 24
42.201.150.0/24 maxlen: 24
42.201.151.0/24 maxlen: 24
42.201.152.0/24 maxlen: 24
42.201.153.0/24 maxlen: 24
42.201.154.0/24 maxlen: 24
42.201.155.0/24 maxlen: 24
42.201.156.0/24 maxlen: 24
42.201.157.0/24 maxlen: 24
42.201.158.0/24 maxlen: 24
42.201.159.0/24 maxlen: 24
42.201.160.0/24 maxlen: 24
42.201.161.0/24 maxlen: 24
42.201.162.0/24 maxlen: 24
42.201.163.0/24 maxlen: 24
42.201.164.0/24 maxlen: 24
42.201.165.0/24 maxlen: 24
42.201.166.0/24 maxlen: 24
42.201.167.0/24 maxlen: 24
42.201.168.0/24 maxlen: 24
42.201.169.0/24 maxlen: 24
42.201.170.0/24 maxlen: 24
42.201.171.0/24 maxlen: 24
42.201.172.0/24 maxlen: 24
42.201.173.0/24 maxlen: 24
42.201.175.0/24 maxlen: 24
42.201.176.0/24 maxlen: 24
42.201.177.0/24 maxlen: 24
42.201.178.0/24 maxlen: 24
42.201.179.0/24 maxlen: 24
42.201.180.0/24 maxlen: 24
42.201.181.0/24 maxlen: 24
42.201.183.0/24 maxlen: 24
42.201.184.0/24 maxlen: 24
42.201.185.0/24 maxlen: 24
42.201.186.0/24 maxlen: 24
42.201.187.0/24 maxlen: 24
42.201.188.0/24 maxlen: 24
42.201.189.0/24 maxlen: 24
42.201.190.0/24 maxlen: 24
42.201.191.0/24 maxlen: 24
42.201.192.0/24 maxlen: 24
42.201.193.0/24 maxlen: 24
42.201.194.0/24 maxlen: 24
42.201.195.0/24 maxlen: 24
42.201.196.0/24 maxlen: 24
42.201.197.0/24 maxlen: 24
42.201.198.0/24 maxlen: 24
42.201.199.0/24 maxlen: 24
42.201.200.0/24 maxlen: 24
42.201.201.0/24 maxlen: 24
42.201.202.0/24 maxlen: 24
42.201.203.0/24 maxlen: 24
42.201.204.0/24 maxlen: 24
42.201.205.0/24 maxlen: 24
42.201.206.0/24 maxlen: 24
42.201.207.0/24 maxlen: 24
42.201.208.0/24 maxlen: 24
42.201.209.0/24 maxlen: 24
42.201.210.0/24 maxlen: 24
42.201.211.0/24 maxlen: 24
42.201.212.0/24 maxlen: 24
42.201.213.0/24 maxlen: 24
42.201.214.0/24 maxlen: 24
42.201.215.0/24 maxlen: 24
42.201.216.0/24 maxlen: 24
42.201.217.0/24 maxlen: 24
42.201.218.0/24 maxlen: 24
42.201.219.0/24 maxlen: 24
42.201.220.0/24 maxlen: 24
42.201.221.0/24 maxlen: 24
42.201.222.0/24 maxlen: 24
42.201.223.0/24 maxlen: 24
42.201.224.0/24 maxlen: 24
42.201.225.0/24 maxlen: 24
42.201.226.0/24 maxlen: 24
42.201.227.0/24 maxlen: 24
42.201.228.0/24 maxlen: 24
42.201.229.0/24 maxlen: 24
42.201.230.0/24 maxlen: 24
42.201.231.0/24 maxlen: 24
42.201.232.0/24 maxlen: 24
42.201.233.0/24 maxlen: 24
42.201.234.0/24 maxlen: 24
42.201.235.0/24 maxlen: 24
42.201.236.0/24 maxlen: 24
42.201.237.0/24 maxlen: 24
42.201.238.0/24 maxlen: 24
42.201.239.0/24 maxlen: 24
42.201.240.0/24 maxlen: 24
42.201.241.0/24 maxlen: 24
42.201.242.0/24 maxlen: 24
42.201.243.0/24 maxlen: 24
42.201.244.0/24 maxlen: 24
42.201.245.0/24 maxlen: 24
42.201.246.0/24 maxlen: 24
42.201.247.0/24 maxlen: 24
42.201.248.0/24 maxlen: 24
42.201.249.0/24 maxlen: 24
42.201.250.0/24 maxlen: 24
42.201.251.0/24 maxlen: 24
42.201.252.0/24 maxlen: 24
42.201.253.0/24 maxlen: 24
42.201.254.0/24 maxlen: 24
42.201.255.0/24 maxlen: 24
103.17.200.0/22 maxlen: 22
103.17.200.0/24 maxlen: 24
103.17.201.0/24 maxlen: 24
103.17.202.0/24 maxlen: 24
103.17.203.0/24 maxlen: 24
110.34.32.0/24 maxlen: 24
110.34.33.0/24 maxlen: 24
110.34.34.0/24 maxlen: 24
110.34.35.0/24 maxlen: 24
110.34.36.0/24 maxlen: 24
110.34.37.0/24 maxlen: 24
110.34.38.0/24 maxlen: 24
110.34.39.0/24 maxlen: 24
180.92.128.0/24 maxlen: 24
180.92.129.0/24 maxlen: 24
180.92.131.0/24 maxlen: 24
180.92.132.0/24 maxlen: 24
180.92.133.0/24 maxlen: 24
180.92.134.0/24 maxlen: 24
180.92.135.0/24 maxlen: 24
180.92.136.0/24 maxlen: 24
180.92.137.0/24 maxlen: 24
180.92.138.0/24 maxlen: 24
180.92.139.0/24 maxlen: 24
180.92.140.0/24 maxlen: 24
180.92.141.0/24 maxlen: 24
180.92.142.0/24 maxlen: 24
180.92.143.0/24 maxlen: 24
180.92.144.0/24 maxlen: 24
180.92.145.0/24 maxlen: 24
180.92.146.0/24 maxlen: 24
180.92.147.0/24 maxlen: 24
180.92.148.0/24 maxlen: 24
180.92.149.0/24 maxlen: 24
180.92.150.0/24 maxlen: 24
180.92.151.0/24 maxlen: 24
180.92.152.0/24 maxlen: 24
180.92.153.0/24 maxlen: 24
180.92.154.0/24 maxlen: 24
180.92.155.0/24 maxlen: 24
180.92.156.0/24 maxlen: 24
180.92.157.0/24 maxlen: 24
180.92.158.0/24 maxlen: 24
180.92.159.0/24 maxlen: 24
192.135.90.0/24 maxlen: 24
192.135.91.0/24 maxlen: 24
192.144.78.0/24 maxlen: 24
192.144.79.0/24 maxlen: 24
2406:f500::/32 maxlen: 32
2406:f500::/36 maxlen: 36
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2149 (0x865)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB6EB/serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A
Validity
Not Before: Mar 8 21:29:06 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=6408fe22-02b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5a:17:5c:06:62:72:81:29:49:b1:1e:a0:2a:
3a:f7:94:fd:32:08:ae:ab:25:1f:59:8d:05:98:25:
86:9b:ca:15:b3:62:af:92:be:8f:67:c4:8b:11:17:
1a:46:e1:cd:57:cf:97:36:0e:e9:d2:0f:80:05:69:
39:46:b5:80:9a:f9:59:3b:7d:7c:88:53:22:0d:9b:
94:b8:f4:66:c1:80:fa:4d:5a:53:70:cc:c2:5d:4d:
c1:3e:fd:ab:c2:e6:b8:07:26:94:96:39:94:96:e0:
cd:8b:16:2c:1a:e0:29:e6:45:5b:39:5c:25:14:87:
21:90:01:9a:9b:2f:09:41:0d:2f:2a:53:ad:8d:19:
cd:7d:91:55:fc:dc:a7:ee:ae:97:af:4e:5c:e6:73:
45:1c:77:65:4a:6c:16:54:0f:38:0b:c4:1c:8c:3d:
b7:c4:70:86:4f:46:37:d5:35:f6:9b:9c:f4:54:e0:
1a:9e:e5:cc:11:7b:48:51:f0:02:8e:94:5d:27:b9:
a7:81:09:f0:cc:1e:51:91:39:0c:7c:18:03:14:98:
fe:43:84:a9:05:3c:b3:8a:ec:87:31:24:67:3d:28:
bd:1f:41:e8:6f:0f:be:9f:ec:9d:64:b4:74:27:79:
02:42:cc:61:1e:c3:84:79:21:df:14:4c:57:43:30:
ec:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9D:2A:50:50:66:18:B6:FA:8E:75:16:9B:E0:64:D1:B9:A6:5A:83
X509v3 Authority Key Identifier:
keyid:FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/D342997A906811EABA2EBA49C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.255.0.0/18
42.201.128.0/17
103.17.200.0/22
110.34.32.0/21
180.92.128.0/23
180.92.131.0-180.92.159.255
192.135.90.0/23
192.144.78.0/23
IPv6:
2406:f500::/32
Signature Algorithm: sha256WithRSAEncryption
3d:2a:59:92:1d:e2:82:61:ac:68:46:9f:bf:44:48:d7:e7:ea:
0b:fb:bf:38:53:8c:a3:4e:9b:37:bf:c7:a3:18:16:10:14:60:
6b:66:e1:d0:c4:c3:d1:a8:79:25:e8:04:ff:b6:51:21:82:6f:
b1:79:3c:32:05:86:10:29:13:86:a2:c3:14:b0:d0:05:5b:5d:
84:3e:c7:93:08:f7:a1:8f:27:56:d9:44:67:b6:8e:eb:e6:d9:
ec:3b:8a:c0:b1:d2:fc:ab:78:9c:3d:95:53:39:dd:9a:4b:b9:
97:1e:17:47:d7:ed:74:f9:27:02:ff:b9:a7:5d:33:c3:dd:66:
bf:b2:e9:2e:2c:55:72:32:c7:e1:77:84:72:97:65:57:67:2b:
a4:7c:0d:b1:fc:ea:27:1a:10:05:a5:d3:cf:57:1a:6c:81:30:
b5:6d:01:08:ee:ee:f4:1c:bf:3c:14:26:ac:ec:4c:58:15:ef:
59:50:d2:eb:cb:84:9e:3d:c8:7e:80:97:4a:98:37:7c:09:21:
55:91:6d:5a:79:86:b9:b1:05:d4:33:ed:25:23:23:6d:cb:35:
94:df:8d:1b:7e:ca:6f:43:2e:b5:fe:39:00:b5:cc:01:65:ce:
d5:02:55:d1:fc:e4:a1:6a:a8:50:78:eb:1c:f4:24:d5:02:59:
44:ec:70:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:55 2024 by rpki-client on console-ams.rpki-client.org