Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/CB81A562DDA411EF946B497FC4F9AE02.roa
File: CB81A562DDA411EF946B497FC4F9AE02.roa (raw, json)
Hash identifier: y9EM4XuE3WqouMtEuW3D+UtnCuKsFTPvqV0Hl/ihysA=
Subject key identifier: 40:DF:CA:CE:A9:48:75:22:F2:83:7E:96:94:2F:37:A7:73:70:71:8E
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 3755
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/CB81A562DDA411EF946B497FC4F9AE02.roa
Signing time: Tue 28 Jan 2025 18:22:13 +0000
ROA not before: Tue 28 Jan 2025 18:22:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38710
IP address blocks: 111.88.72.0/21 maxlen: 21
111.88.72.0/23 maxlen: 24
111.88.74.0/23 maxlen: 24
111.88.76.0/22 maxlen: 23
111.88.78.0/24 maxlen: 24
111.88.96.0/19 maxlen: 19
111.88.144.0/20 maxlen: 23
111.88.164.0/22 maxlen: 23
111.88.168.0/22 maxlen: 24
111.88.184.0/22 maxlen: 23
111.88.188.0/22 maxlen: 23
111.88.233.0/24 maxlen: 24
111.88.238.0/24 maxlen: 24
111.88.239.0/24 maxlen: 24
111.88.244.0/22 maxlen: 22
115.186.10.0/23 maxlen: 23
115.186.12.0/23 maxlen: 23
115.186.14.0/24 maxlen: 24
115.186.16.0/24 maxlen: 24
115.186.17.0/24 maxlen: 24
115.186.21.0/24 maxlen: 24
115.186.23.0/24 maxlen: 24
115.186.24.0/23 maxlen: 23
115.186.25.0/24 maxlen: 24
115.186.30.0/23 maxlen: 24
115.186.32.0/20 maxlen: 22
115.186.32.0/24 maxlen: 24
115.186.33.0/24 maxlen: 24
115.186.34.0/24 maxlen: 24
115.186.35.0/24 maxlen: 24
115.186.36.0/22 maxlen: 23
115.186.36.0/23 maxlen: 24
115.186.40.0/24 maxlen: 24
115.186.42.0/24 maxlen: 24
115.186.43.0/24 maxlen: 24
115.186.44.0/24 maxlen: 24
115.186.45.0/24 maxlen: 24
115.186.46.0/24 maxlen: 24
115.186.47.0/24 maxlen: 24
115.186.56.0/21 maxlen: 23
115.186.56.0/22 maxlen: 24
115.186.60.0/23 maxlen: 24
115.186.63.0/24 maxlen: 24
115.186.64.0/19 maxlen: 23
115.186.76.0/22 maxlen: 24
115.186.80.0/21 maxlen: 24
115.186.90.0/24 maxlen: 24
115.186.96.0/20 maxlen: 23
115.186.96.0/22 maxlen: 24
115.186.101.0/24 maxlen: 24
115.186.102.0/23 maxlen: 24
115.186.104.0/24 maxlen: 24
115.186.106.0/23 maxlen: 24
115.186.108.0/22 maxlen: 24
115.186.112.0/20 maxlen: 23
115.186.112.0/23 maxlen: 24
115.186.115.0/24 maxlen: 24
115.186.117.0/24 maxlen: 24
115.186.118.0/23 maxlen: 24
115.186.120.0/23 maxlen: 24
115.186.125.0/24 maxlen: 24
115.186.126.0/24 maxlen: 24
117.102.0.0/21 maxlen: 21
117.102.0.0/22 maxlen: 22
117.102.0.0/23 maxlen: 24
117.102.2.0/24 maxlen: 24
117.102.3.0/24 maxlen: 24
117.102.4.0/24 maxlen: 24
117.102.5.0/24 maxlen: 24
117.102.6.0/24 maxlen: 24
117.102.7.0/24 maxlen: 24
117.102.8.0/24 maxlen: 24
117.102.9.0/24 maxlen: 24
117.102.12.0/23 maxlen: 23
117.102.12.0/24 maxlen: 24
117.102.14.0/23 maxlen: 23
117.102.16.0/24 maxlen: 24
117.102.17.0/24 maxlen: 24
117.102.18.0/23 maxlen: 24
117.102.20.0/22 maxlen: 23
117.102.24.0/22 maxlen: 22
117.102.24.0/23 maxlen: 24
117.102.26.0/24 maxlen: 24
117.102.28.0/24 maxlen: 24
117.102.32.0/24 maxlen: 24
117.102.33.0/24 maxlen: 24
117.102.34.0/24 maxlen: 24
117.102.35.0/24 maxlen: 24
117.102.36.0/24 maxlen: 24
117.102.37.0/24 maxlen: 24
117.102.38.0/24 maxlen: 24
117.102.39.0/24 maxlen: 24
117.102.40.0/24 maxlen: 24
117.102.41.0/24 maxlen: 24
117.102.42.0/24 maxlen: 24
117.102.43.0/24 maxlen: 24
117.102.44.0/24 maxlen: 24
117.102.45.0/24 maxlen: 24
117.102.46.0/24 maxlen: 24
117.102.47.0/24 maxlen: 24
203.81.192.0/21 maxlen: 22
203.81.192.0/24 maxlen: 24
203.81.193.0/24 maxlen: 24
203.81.194.0/24 maxlen: 24
203.81.195.0/24 maxlen: 24
203.81.196.0/24 maxlen: 24
203.81.197.0/24 maxlen: 24
203.81.198.0/23 maxlen: 24
203.81.208.0/20 maxlen: 23
203.81.208.0/22 maxlen: 24
203.81.213.0/24 maxlen: 24
203.81.215.0/24 maxlen: 24
203.81.224.0/20 maxlen: 23
203.81.230.0/24 maxlen: 24
203.81.239.0/24 maxlen: 24
2406:7000::/32 maxlen: 32
2406:7000::/48 maxlen: 48
2406:7000:1::/48 maxlen: 48
2406:7000:2::/48 maxlen: 48
2406:7000:3::/48 maxlen: 48
2406:7000:4::/48 maxlen: 48
2406:7000:5::/48 maxlen: 48
2406:7000:6::/48 maxlen: 48
2406:7000:7::/48 maxlen: 48
2406:7000:8::/48 maxlen: 48
2406:7000:9::/48 maxlen: 48
2406:7000:a::/48 maxlen: 48
2406:7000:b::/48 maxlen: 48
2406:7000:c::/48 maxlen: 48
2406:7000:d::/48 maxlen: 48
2406:7000:e::/48 maxlen: 48
2406:7000:f::/48 maxlen: 48
2406:7000:10::/48 maxlen: 48
2406:7000:11::/48 maxlen: 48
2406:7000:12::/48 maxlen: 48
2406:7000:13::/48 maxlen: 48
2406:7000:14::/48 maxlen: 48
2406:7000:15::/48 maxlen: 48
2406:7000:16::/48 maxlen: 48
2406:7000:17::/48 maxlen: 48
2406:7000:18::/48 maxlen: 48
2406:7000:19::/48 maxlen: 48
2406:7000:1a::/48 maxlen: 48
2406:7000:1b::/48 maxlen: 48
2406:7000:1c::/48 maxlen: 48
2406:7000:1d::/48 maxlen: 48
2406:7000:1e::/48 maxlen: 48
2406:7000:1f::/48 maxlen: 48
2406:7000:20::/48 maxlen: 48
2406:7000:21::/48 maxlen: 48
2406:7000:22::/48 maxlen: 48
2406:7000:23::/48 maxlen: 48
2406:7000:24::/48 maxlen: 48
2406:7000:25::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14165 (0x3755)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Jan 28 18:22:13 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67992055-767c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cb:59:47:c6:c0:fe:6d:b9:72:fe:e8:3c:76:
d0:3c:bc:31:5e:1f:30:de:37:1b:66:4e:4c:89:45:
11:7e:f7:7e:6c:bc:f5:7c:c4:ba:00:61:e7:79:99:
76:27:e7:61:d0:50:76:de:f7:39:96:d9:18:81:4e:
8a:22:1b:2a:ed:78:88:03:95:0e:a0:31:2e:7b:d0:
c3:2e:cd:b0:aa:89:7d:bb:fd:c8:a2:5f:87:74:27:
14:52:b8:04:5b:1d:6d:ee:ca:6f:b1:40:42:2b:ae:
79:5e:3c:b9:39:e2:04:98:82:c0:ed:71:dc:7e:6d:
1b:4a:f7:5e:19:a2:b1:89:c5:a7:5c:94:1d:5f:b5:
6a:2a:9c:6f:25:a2:ae:28:68:c9:60:d5:81:46:99:
f7:b6:be:ab:fe:79:51:33:ca:47:22:8b:1b:d8:f1:
35:d5:4b:39:ef:b6:3f:8c:ba:1e:53:f1:80:e1:cc:
ac:dc:d6:f5:82:07:ea:ce:b2:36:a3:15:da:a6:5d:
53:0c:89:67:90:8f:d0:40:98:35:b0:19:f0:18:30:
cd:0c:fe:c0:e9:7c:94:97:62:c9:b6:70:63:07:94:
ad:88:c1:8b:3d:d2:be:9a:bd:dc:ab:92:9f:e2:f2:
18:3a:0e:9e:ab:a6:eb:5c:4a:c2:e9:fb:ab:a7:bf:
9b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DF:CA:CE:A9:48:75:22:F2:83:7E:96:94:2F:37:A7:73:70:71:8E
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/CB81A562DDA411EF946B497FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.88.72.0/21
111.88.96.0/19
111.88.144.0/20
111.88.164.0-111.88.171.255
111.88.184.0/21
111.88.233.0/24
111.88.238.0/23
111.88.244.0/22
115.186.10.0-115.186.14.255
115.186.16.0/23
115.186.21.0/24
115.186.23.0-115.186.25.255
115.186.30.0-115.186.47.255
115.186.56.0-115.186.127.255
117.102.0.0-117.102.9.255
117.102.12.0-117.102.28.255
117.102.32.0/20
203.81.192.0/21
203.81.208.0-203.81.239.255
IPv6:
2406:7000::/32
Signature Algorithm: sha256WithRSAEncryption
94:ee:57:a3:b8:4b:0a:3d:16:60:48:c1:56:6c:ff:a3:d1:92:
71:91:2b:fc:7e:c2:a3:b3:05:6c:93:70:2f:c6:2e:57:68:e0:
60:71:90:b8:b7:2c:e2:79:97:54:d8:32:e8:e7:ce:fb:ad:c4:
2b:89:fa:fa:2c:b7:41:02:29:20:de:04:32:57:88:88:85:53:
be:bc:ff:b6:af:99:12:5b:c5:05:7d:59:76:1d:80:61:8e:f8:
2f:00:18:9b:45:36:84:14:0a:08:8a:53:7a:23:ff:c5:a8:30:
2c:c3:ee:59:ea:6e:d1:d1:d1:c9:d7:e7:03:ef:70:52:e1:ec:
c9:60:e7:dd:75:12:2f:7c:6b:e2:2b:c1:fa:da:ab:63:eb:3e:
e4:fd:34:1a:69:93:89:53:c2:8e:06:95:b9:9a:71:a0:c7:87:
dd:22:c8:1d:4f:3e:c2:16:ec:cb:5c:54:06:13:c8:2c:ec:c7:
37:11:65:53:1b:fa:65:8b:2d:3c:9f:cb:4e:32:73:51:e9:ee:
fb:16:13:46:ae:1e:07:cd:e0:65:83:1d:41:81:14:9f:c2:f7:
b0:65:92:c1:a5:4f:b8:c2:2e:e0:b2:fd:2a:32:43:9d:a5:5d:
d8:b2:ed:32:9c:42:4a:2c:5c:fd:e0:ef:6d:1c:23:18:b1:d5:
8c:ea:8c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:27:34 2025 by rpki-client