Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/13B492D8C7B611EDAF22D149C4F9AE02.roa
File: 13B492D8C7B611EDAF22D149C4F9AE02.roa (raw, json)
Hash identifier: TkvE5E5AWauffQmQWeLhGx9hyQHKOHB0k+Nb4tY8Kk4=
Subject key identifier: 80:96:05:E8:A3:B7:95:5F:99:E2:F5:73:7C:57:17:57:04:91:87:29
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 33F0
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/13B492D8C7B611EDAF22D149C4F9AE02.roa
Signing time: Tue 21 Mar 2023 07:00:35 +0000
ROA not before: Tue 21 Mar 2023 07:00:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38710
IP address blocks: 111.88.76.0/24 maxlen: 24
111.88.77.0/24 maxlen: 24
111.88.79.0/24 maxlen: 24
111.88.234.0/24 maxlen: 24
111.88.235.0/24 maxlen: 24
111.88.238.0/24 maxlen: 24
111.88.239.0/24 maxlen: 24
111.88.240.0/22 maxlen: 22
111.88.240.0/24 maxlen: 24
111.88.241.0/24 maxlen: 24
111.88.242.0/24 maxlen: 24
111.88.243.0/24 maxlen: 24
111.88.244.0/22 maxlen: 22
111.88.244.0/24 maxlen: 24
111.88.245.0/24 maxlen: 24
111.88.246.0/24 maxlen: 24
111.88.247.0/24 maxlen: 24
111.88.248.0/21 maxlen: 21
111.88.248.0/22 maxlen: 22
111.88.248.0/23 maxlen: 24
111.88.250.0/24 maxlen: 24
111.88.255.0/24 maxlen: 24
115.186.1.0/24 maxlen: 24
115.186.10.0/23 maxlen: 24
115.186.12.0/23 maxlen: 24
115.186.14.0/24 maxlen: 24
115.186.16.0/24 maxlen: 24
115.186.17.0/24 maxlen: 24
115.186.21.0/24 maxlen: 24
115.186.23.0/24 maxlen: 24
115.186.24.0/23 maxlen: 23
115.186.25.0/24 maxlen: 24
115.186.30.0/23 maxlen: 24
115.186.32.0/20 maxlen: 22
115.186.32.0/24 maxlen: 24
115.186.33.0/24 maxlen: 24
115.186.34.0/24 maxlen: 24
115.186.35.0/24 maxlen: 24
115.186.36.0/22 maxlen: 23
115.186.36.0/23 maxlen: 24
115.186.40.0/24 maxlen: 24
115.186.41.0/24 maxlen: 24
115.186.42.0/24 maxlen: 24
115.186.43.0/24 maxlen: 24
115.186.44.0/24 maxlen: 24
115.186.45.0/24 maxlen: 24
115.186.46.0/24 maxlen: 24
115.186.47.0/24 maxlen: 24
115.186.56.0/21 maxlen: 24
115.186.88.0/24 maxlen: 24
115.186.90.0/24 maxlen: 24
115.186.91.0/24 maxlen: 24
115.186.93.0/24 maxlen: 24
115.186.96.0/24 maxlen: 24
115.186.98.0/24 maxlen: 24
115.186.101.0/24 maxlen: 24
115.186.102.0/24 maxlen: 24
115.186.103.0/24 maxlen: 24
115.186.104.0/24 maxlen: 24
115.186.106.0/23 maxlen: 24
115.186.108.0/22 maxlen: 24
115.186.112.0/24 maxlen: 24
115.186.113.0/24 maxlen: 24
115.186.115.0/24 maxlen: 24
115.186.117.0/24 maxlen: 24
115.186.118.0/24 maxlen: 24
115.186.119.0/24 maxlen: 24
115.186.120.0/24 maxlen: 24
115.186.121.0/24 maxlen: 24
115.186.122.0/24 maxlen: 24
115.186.123.0/24 maxlen: 24
115.186.125.0/24 maxlen: 24
115.186.126.0/24 maxlen: 24
117.102.0.0/21 maxlen: 21
117.102.0.0/22 maxlen: 22
117.102.0.0/23 maxlen: 24
117.102.2.0/24 maxlen: 24
117.102.3.0/24 maxlen: 24
117.102.4.0/24 maxlen: 24
117.102.5.0/24 maxlen: 24
117.102.6.0/24 maxlen: 24
117.102.7.0/24 maxlen: 24
117.102.8.0/24 maxlen: 24
117.102.9.0/24 maxlen: 24
117.102.10.0/24 maxlen: 24
117.102.12.0/23 maxlen: 24
117.102.16.0/24 maxlen: 24
117.102.17.0/24 maxlen: 24
117.102.18.0/23 maxlen: 24
117.102.20.0/22 maxlen: 22
117.102.21.0/24 maxlen: 24
117.102.24.0/22 maxlen: 22
117.102.24.0/23 maxlen: 24
117.102.26.0/24 maxlen: 24
117.102.27.0/24 maxlen: 24
117.102.28.0/24 maxlen: 24
117.102.30.0/24 maxlen: 24
117.102.31.0/24 maxlen: 24
117.102.32.0/24 maxlen: 24
117.102.33.0/24 maxlen: 24
117.102.34.0/24 maxlen: 24
117.102.35.0/24 maxlen: 24
117.102.36.0/24 maxlen: 24
117.102.37.0/24 maxlen: 24
117.102.38.0/24 maxlen: 24
117.102.39.0/24 maxlen: 24
117.102.40.0/24 maxlen: 24
117.102.41.0/24 maxlen: 24
117.102.42.0/24 maxlen: 24
117.102.43.0/24 maxlen: 24
117.102.44.0/24 maxlen: 24
117.102.45.0/24 maxlen: 24
117.102.46.0/24 maxlen: 24
117.102.47.0/24 maxlen: 24
203.81.192.0/21 maxlen: 22
203.81.192.0/24 maxlen: 24
203.81.193.0/24 maxlen: 24
203.81.194.0/24 maxlen: 24
203.81.195.0/24 maxlen: 24
203.81.196.0/24 maxlen: 24
203.81.197.0/24 maxlen: 24
203.81.198.0/23 maxlen: 24
203.81.208.0/21 maxlen: 24
203.81.230.0/24 maxlen: 24
203.81.232.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13296 (0x33f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Mar 21 07:00:35 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64195613-5c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:22:c7:81:1d:a4:02:54:2b:3e:93:ca:a7:4a:
03:83:50:3d:f8:ce:55:89:45:bc:a0:5f:1f:15:97:
58:ce:8d:16:95:60:4f:3f:6b:57:e9:bf:24:2b:68:
95:a6:46:65:fa:9a:f9:2d:78:0b:d5:86:25:98:a7:
77:db:fa:b3:a7:ea:46:c9:b1:5d:a4:3b:fa:21:d8:
c5:10:24:f1:0f:c2:da:fe:97:e2:f3:de:79:63:66:
04:cd:de:ee:4f:b9:e3:fd:81:fc:63:bb:3e:5d:af:
4e:fd:2d:c0:9e:88:9c:d9:e0:af:74:ca:05:5e:cd:
89:99:58:e5:6a:a0:0b:d0:3d:c7:e4:f3:b3:ea:53:
d6:4f:2d:26:9c:a3:0c:0c:dd:6e:87:1a:ba:43:62:
8c:e4:22:0e:9f:ef:6e:69:87:b4:e1:e6:2b:2b:7a:
a6:b3:e4:c8:5c:15:13:11:f6:13:d3:87:27:3d:60:
a4:60:d4:14:38:d8:a6:35:2b:86:50:af:7d:45:12:
71:ac:33:3a:65:41:58:9c:e8:84:f6:ec:36:f3:56:
a1:09:b3:23:54:92:c7:0a:70:fc:bf:5a:de:c1:9b:
e3:5f:68:14:7f:86:6d:15:9c:00:07:6d:16:a2:7d:
44:92:a6:c0:d4:fe:e1:b7:2b:1c:b7:58:82:66:31:
1c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:96:05:E8:A3:B7:95:5F:99:E2:F5:73:7C:57:17:57:04:91:87:29
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/13B492D8C7B611EDAF22D149C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.88.76.0/23
111.88.79.0/24
111.88.234.0/23
111.88.238.0-111.88.255.255
115.186.1.0/24
115.186.10.0-115.186.14.255
115.186.16.0/23
115.186.21.0/24
115.186.23.0-115.186.25.255
115.186.30.0-115.186.47.255
115.186.56.0/21
115.186.88.0/24
115.186.90.0/23
115.186.93.0/24
115.186.96.0/24
115.186.98.0/24
115.186.101.0-115.186.104.255
115.186.106.0-115.186.113.255
115.186.115.0/24
115.186.117.0-115.186.123.255
115.186.125.0-115.186.126.255
117.102.0.0-117.102.10.255
117.102.12.0/23
117.102.16.0-117.102.28.255
117.102.30.0-117.102.47.255
203.81.192.0/21
203.81.208.0/21
203.81.230.0/24
203.81.232.0/21
Signature Algorithm: sha256WithRSAEncryption
74:44:8c:00:cc:62:58:ae:d3:03:e4:80:bd:c9:a8:9a:26:2e:
ee:f7:02:f3:de:d3:83:4b:d3:04:00:de:a5:ce:e5:34:4b:ce:
6d:fb:eb:fc:33:b9:f4:8d:fa:d4:1b:61:7f:c8:fb:9d:a8:49:
c2:07:af:e7:b6:40:b6:16:f5:9d:16:61:46:ee:03:1b:85:ec:
9a:79:80:4a:88:0c:35:de:94:cb:e8:ae:73:40:40:74:1d:f1:
a1:ce:7a:cd:3d:13:60:c9:3e:16:9f:ee:12:34:3f:62:5b:3c:
9b:7f:25:f5:f5:b7:dd:b3:4c:ab:f8:4b:70:96:4b:5c:14:54:
8d:37:54:c3:ee:63:71:94:00:da:5d:22:ee:44:30:08:75:1d:
73:b8:f9:8c:25:13:01:6b:73:86:a7:b1:64:ce:ba:fb:f9:d8:
9a:83:01:cf:dd:6b:66:8a:88:8c:41:d6:9b:28:d9:d6:ff:11:
34:4d:bb:6b:16:38:d2:9e:d9:5b:a2:ff:b5:4c:57:ed:30:d8:
46:e1:0b:8a:74:90:de:a1:18:2c:2c:6c:cb:a9:da:47:5d:5d:
b2:fd:59:96:9c:fb:a0:56:85:46:79:c6:42:8a:2b:c0:3b:af:
b3:8a:a1:f9:7d:88:17:3f:33:40:b3:e6:e2:a3:b3:51:3d:fc:
cf:f7:d5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:04:15 2025 by rpki-client