Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/2DF5404AF44111ED835FDB78C4F9AE02.roa
File: 2DF5404AF44111ED835FDB78C4F9AE02.roa (raw, json)
Hash identifier: PHqhyznYLyw89l+KyBk+XmYq7U2FwR1oHS6BPX+61ds=
Subject key identifier: FA:FE:61:AD:9D:53:17:52:8C:8A:24:4A:42:BF:E1:12:79:7B:8D:21
Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Certificate serial: 16B0
Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/2DF5404AF44111ED835FDB78C4F9AE02.roa
Signing time: Thu 18 May 2023 07:17:02 +0000
ROA not before: Thu 18 May 2023 07:17:02 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 9443
IP address blocks: 14.137.64.0/18 maxlen: 18
14.137.192.0/19 maxlen: 19
58.178.0.0/16 maxlen: 16
58.179.0.0/16 maxlen: 16
111.220.0.0/16 maxlen: 16
112.141.0.0/16 maxlen: 16
112.213.128.0/18 maxlen: 18
116.240.0.0/16 maxlen: 16
121.79.126.0/23 maxlen: 23
122.148.0.0/16 maxlen: 16
122.149.0.0/16 maxlen: 16
122.150.0.0/16 maxlen: 16
122.151.0.0/16 maxlen: 16
123.2.0.0/16 maxlen: 16
123.3.0.0/16 maxlen: 16
125.168.0.0/16 maxlen: 16
202.4.64.0/19 maxlen: 19
202.14.191.0/24 maxlen: 24
202.14.192.0/22 maxlen: 22
202.61.12.0/24 maxlen: 24
202.61.13.0/24 maxlen: 24
202.62.128.0/19 maxlen: 21
202.67.64.0/18 maxlen: 18
202.76.128.0/18 maxlen: 18
202.86.113.0/24 maxlen: 24
202.86.114.0/23 maxlen: 23
202.86.116.0/23 maxlen: 23
202.86.118.0/24 maxlen: 24
202.128.112.0/20 maxlen: 20
202.128.114.0/23 maxlen: 23
202.130.195.0/24 maxlen: 24
202.130.203.0/24 maxlen: 24
202.130.205.0/24 maxlen: 24
202.130.214.0/24 maxlen: 24
202.130.217.0/24 maxlen: 24
202.136.32.0/20 maxlen: 20
202.138.0.0/18 maxlen: 18
202.147.128.0/20 maxlen: 20
202.154.64.0/18 maxlen: 18
203.16.9.0/24 maxlen: 24
203.16.170.0/24 maxlen: 24
203.21.47.0/24 maxlen: 24
203.21.104.0/24 maxlen: 24
203.23.116.0/24 maxlen: 24
203.24.100.0/23 maxlen: 23
203.30.143.0/24 maxlen: 24
203.30.211.0/24 maxlen: 24
203.34.15.0/24 maxlen: 24
203.56.5.0/24 maxlen: 24
203.57.110.0/24 maxlen: 24
203.62.135.0/24 maxlen: 24
203.91.224.0/19 maxlen: 19
203.91.224.0/20 maxlen: 20
203.91.240.0/21 maxlen: 21
203.123.64.0/20 maxlen: 20
203.132.224.0/19 maxlen: 19
203.134.0.0/17 maxlen: 17
203.134.128.0/18 maxlen: 18
203.142.128.0/19 maxlen: 19
203.161.160.0/20 maxlen: 20
203.190.192.0/20 maxlen: 20
203.191.160.0/19 maxlen: 19
203.212.128.0/19 maxlen: 19
210.50.0.0/16 maxlen: 16
210.86.240.0/20 maxlen: 20
211.26.0.0/16 maxlen: 16
211.27.0.0/16 maxlen: 16
218.214.0.0/16 maxlen: 16
218.215.0.0/16 maxlen: 16
2403:4800::/32 maxlen: 32
2403:9e00::/32 maxlen: 32
2403:fc00::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5808 (0x16b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Validity
Not Before: May 18 07:17:02 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=6465d0ed-b52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ba:6d:7c:14:be:c8:a4:03:dc:8f:e1:b9:6c:
93:2f:00:1a:f6:dd:70:51:3d:05:05:33:56:61:aa:
7b:7c:5c:ab:93:c6:47:cc:9c:33:e0:80:3c:82:c2:
fd:b4:22:ed:d9:5b:b1:87:69:53:70:0d:ab:81:e8:
3d:2a:a8:3c:92:d4:74:1a:20:26:e8:a4:4d:70:02:
b0:49:43:27:01:bd:56:df:2e:88:1a:f6:4a:7b:7b:
3e:4c:77:6f:21:d0:96:b8:86:2e:9b:b8:79:fa:fc:
84:fc:ba:51:10:b2:8d:3f:b0:21:c5:34:8d:16:61:
b9:6e:40:3f:13:9d:b7:bc:0f:fa:11:6f:32:c1:17:
51:44:8f:92:7f:1e:43:f1:48:e1:45:02:26:b9:ef:
c8:90:b3:3e:08:8c:fc:ba:62:ed:ef:b1:64:cd:34:
02:b5:e6:03:46:1c:4c:6d:cf:c7:58:87:de:ca:f5:
be:55:2b:76:65:ed:d7:0d:3b:7d:03:c0:70:1c:32:
86:7b:37:0b:0e:a9:f3:70:a1:b7:3c:04:c5:fb:ef:
82:22:75:02:bd:35:5d:63:bf:19:2f:85:c9:8f:73:
e0:aa:d1:6c:b8:8f:c8:ce:29:73:40:00:fb:09:43:
03:35:77:4f:35:4c:8c:70:c7:b4:5f:8b:68:74:e9:
a3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FE:61:AD:9D:53:17:52:8C:8A:24:4A:42:BF:E1:12:79:7B:8D:21
X509v3 Authority Key Identifier:
keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/2DF5404AF44111ED835FDB78C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.137.64.0/18
14.137.192.0/19
58.178.0.0/15
111.220.0.0/16
112.141.0.0/16
112.213.128.0/18
116.240.0.0/16
121.79.126.0/23
122.148.0.0/14
123.2.0.0/15
125.168.0.0/16
202.4.64.0/19
202.14.191.0-202.14.195.255
202.61.12.0/23
202.62.128.0/19
202.67.64.0/18
202.76.128.0/18
202.86.113.0-202.86.118.255
202.128.112.0/20
202.130.195.0/24
202.130.203.0/24
202.130.205.0/24
202.130.214.0/24
202.130.217.0/24
202.136.32.0/20
202.138.0.0/18
202.147.128.0/20
202.154.64.0/18
203.16.9.0/24
203.16.170.0/24
203.21.47.0/24
203.21.104.0/24
203.23.116.0/24
203.24.100.0/23
203.30.143.0/24
203.30.211.0/24
203.34.15.0/24
203.56.5.0/24
203.57.110.0/24
203.62.135.0/24
203.91.224.0/19
203.123.64.0/20
203.132.224.0/19
203.134.0.0-203.134.191.255
203.142.128.0/19
203.161.160.0/20
203.190.192.0/20
203.191.160.0/19
203.212.128.0/19
210.50.0.0/16
210.86.240.0/20
211.26.0.0/15
218.214.0.0/15
IPv6:
2403:4800::/32
2403:9e00::/32
2403:fc00::/32
Signature Algorithm: sha256WithRSAEncryption
77:cf:d9:b9:52:0e:54:38:f8:a8:a7:90:ad:cf:7e:91:07:51:
2d:24:bc:3f:6c:fb:1b:be:a7:e8:c3:12:5a:8d:ef:4a:3c:74:
ff:49:9d:61:71:2a:e7:84:97:b0:19:ed:9a:27:79:e9:ab:79:
91:64:79:c6:16:30:a0:3c:b1:a6:e8:bb:87:fd:37:f2:84:37:
6f:39:a3:c4:96:8f:41:5f:97:f9:c0:68:81:f9:83:9c:d7:b5:
b2:af:5c:ef:b3:7a:1f:37:d7:ba:15:0b:e6:ca:7f:3b:b1:b9:
6c:69:01:33:f4:9a:62:9e:cb:f0:4d:1c:80:86:c5:76:e1:f8:
5f:41:73:a9:72:b2:0c:75:a1:9f:1c:4d:af:c8:1e:b6:b7:72:
6c:56:6f:61:95:80:17:d5:a6:56:a9:a1:57:b6:f2:5a:b7:bd:
de:a2:e4:b3:7d:ce:1b:87:fe:d2:7b:72:7b:21:c9:7b:4a:2c:
01:78:8a:de:1d:60:11:9c:28:0c:70:e3:e1:45:2e:ad:d5:27:
1a:8e:bd:c4:a0:af:e4:f1:6d:ac:2a:03:f6:d4:47:62:ba:ed:
8c:f8:57:f4:5c:bc:22:b0:1e:76:a4:e1:76:dd:7d:6b:e2:c2:
b9:4d:29:30:10:55:d8:b0:9b:8f:07:4b:a8:76:86:0a:eb:16:
74:bd:f7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:13 2023 by rpki-client on console-fra.rpki-client.org