Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/E62339F4FDDE11EE8C265F41C4F9AE02.roa
File: E62339F4FDDE11EE8C265F41C4F9AE02.roa (raw, json)
Hash identifier: hMZlP9D1IygnomUBZfpYcu4sIeQhwGCe8HQkHuIGb5Y=
Subject key identifier: 2E:A8:BF:82:59:29:8C:24:F4:A9:56:92:B9:FA:95:A6:60:F3:23:73
Certificate issuer: /CN=A91DB4FE/serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179
Certificate serial: 0699
Authority key identifier: 7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/E62339F4FDDE11EE8C265F41C4F9AE02.roa
Signing time: Thu 18 Apr 2024 23:53:48 +0000
ROA not before: Thu 18 Apr 2024 23:53:48 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 9723
IP address blocks: 1.178.0.0/20 maxlen: 20
1.178.0.0/21 maxlen: 24
1.178.16.0/20 maxlen: 20
1.178.16.0/21 maxlen: 24
1.178.64.0/20 maxlen: 20
1.178.64.0/21 maxlen: 24
1.178.80.0/20 maxlen: 20
1.178.96.0/20 maxlen: 20
1.178.144.0/20 maxlen: 20
1.178.144.0/21 maxlen: 24
1.178.160.0/20 maxlen: 20
1.178.176.0/20 maxlen: 20
1.178.176.0/21 maxlen: 24
1.178.192.0/20 maxlen: 20
1.178.192.0/21 maxlen: 24
1.179.0.0/20 maxlen: 20
1.179.16.0/20 maxlen: 20
1.179.32.0/21 maxlen: 21
1.179.48.0/20 maxlen: 20
1.179.48.0/21 maxlen: 24
1.179.64.0/21 maxlen: 21
1.179.80.0/21 maxlen: 21
1.179.96.0/20 maxlen: 20
58.87.0.0/23 maxlen: 23
58.87.2.0/23 maxlen: 23
58.87.6.0/23 maxlen: 23
58.87.8.0/23 maxlen: 23
58.87.10.0/23 maxlen: 23
58.87.12.0/23 maxlen: 23
58.87.14.0/24 maxlen: 24
58.87.15.0/24 maxlen: 24
110.238.2.0/23 maxlen: 23
110.238.4.0/23 maxlen: 23
110.238.6.0/23 maxlen: 23
110.238.8.0/23 maxlen: 23
110.238.10.0/23 maxlen: 23
110.238.12.0/23 maxlen: 23
110.238.14.0/23 maxlen: 23
110.238.16.0/20 maxlen: 20
110.238.16.0/24 maxlen: 24
110.238.18.0/24 maxlen: 24
110.238.21.0/24 maxlen: 24
110.238.24.0/24 maxlen: 24
110.238.25.0/24 maxlen: 24
110.238.128.0/20 maxlen: 20
110.238.128.0/21 maxlen: 24
110.238.144.0/20 maxlen: 20
110.238.144.0/21 maxlen: 24
110.238.224.0/20 maxlen: 20
110.238.224.0/21 maxlen: 24
110.238.240.0/20 maxlen: 20
110.238.240.0/21 maxlen: 24
110.239.0.0/20 maxlen: 20
110.239.16.0/20 maxlen: 20
110.239.32.0/20 maxlen: 20
110.239.32.0/21 maxlen: 24
110.239.128.0/20 maxlen: 20
110.239.128.0/21 maxlen: 21
110.239.136.0/21 maxlen: 21
110.239.144.0/20 maxlen: 20
110.239.176.0/21 maxlen: 24
110.239.224.0/20 maxlen: 20
110.239.240.0/20 maxlen: 20
119.12.0.0/20 maxlen: 20
119.12.80.0/20 maxlen: 20
119.12.80.0/21 maxlen: 24
119.12.96.0/21 maxlen: 21
119.12.112.0/20 maxlen: 20
119.12.112.0/21 maxlen: 24
119.12.144.0/21 maxlen: 24
119.13.0.0/20 maxlen: 20
119.13.0.0/23 maxlen: 23
119.13.2.0/24 maxlen: 24
119.13.3.0/24 maxlen: 24
119.13.4.0/23 maxlen: 23
119.13.6.0/23 maxlen: 23
119.13.8.0/23 maxlen: 23
119.13.16.0/21 maxlen: 24
119.13.48.0/21 maxlen: 21
119.13.48.0/24 maxlen: 24
119.13.128.0/20 maxlen: 20
119.13.144.0/21 maxlen: 24
119.13.176.0/21 maxlen: 24
119.13.240.0/21 maxlen: 24
121.91.16.0/20 maxlen: 20
121.91.96.0/21 maxlen: 21
121.91.112.0/20 maxlen: 20
121.91.128.0/21 maxlen: 24
121.91.144.0/21 maxlen: 21
121.91.160.0/21 maxlen: 21
121.91.192.0/21 maxlen: 21
123.200.128.0/20 maxlen: 20
123.200.133.0/24 maxlen: 24
123.200.136.0/22 maxlen: 22
123.200.140.0/22 maxlen: 22
123.200.144.0/22 maxlen: 22
123.200.148.0/22 maxlen: 22
123.200.152.0/21 maxlen: 21
123.200.160.0/23 maxlen: 23
123.200.162.0/23 maxlen: 23
123.200.164.0/23 maxlen: 23
123.200.165.0/24 maxlen: 24
123.200.166.0/23 maxlen: 23
123.200.168.0/23 maxlen: 23
123.200.170.0/23 maxlen: 23
123.200.172.0/24 maxlen: 24
123.200.173.0/24 maxlen: 24
123.200.174.0/24 maxlen: 24
123.200.175.0/24 maxlen: 24
123.200.176.0/23 maxlen: 23
123.200.179.0/24 maxlen: 24
123.200.180.0/23 maxlen: 23
123.200.182.0/23 maxlen: 23
123.200.184.0/22 maxlen: 22
123.200.187.0/24 maxlen: 24
123.200.188.0/23 maxlen: 23
123.200.192.0/21 maxlen: 21
123.200.200.0/21 maxlen: 21
123.200.208.0/21 maxlen: 21
123.200.216.0/21 maxlen: 21
123.200.224.0/21 maxlen: 21
123.200.240.0/21 maxlen: 21
202.83.64.0/19 maxlen: 19
202.83.64.0/22 maxlen: 22
202.83.68.0/23 maxlen: 23
202.83.70.0/23 maxlen: 23
202.83.72.0/24 maxlen: 24
202.83.73.0/24 maxlen: 24
202.83.74.0/23 maxlen: 23
202.83.76.0/22 maxlen: 22
202.83.80.0/23 maxlen: 23
202.83.82.0/24 maxlen: 24
202.83.83.0/24 maxlen: 24
202.83.84.0/22 maxlen: 22
202.83.88.0/23 maxlen: 23
202.83.90.0/23 maxlen: 23
202.83.92.0/23 maxlen: 23
202.83.94.0/24 maxlen: 24
202.83.95.0/24 maxlen: 24
202.183.96.0/20 maxlen: 20
202.183.96.0/24 maxlen: 24
202.183.97.0/24 maxlen: 24
202.183.98.0/24 maxlen: 24
202.183.100.0/23 maxlen: 23
202.183.102.0/23 maxlen: 23
202.183.102.0/24 maxlen: 24
202.183.103.0/24 maxlen: 24
202.183.104.0/22 maxlen: 22
202.183.108.0/23 maxlen: 23
202.183.109.0/24 maxlen: 24
202.183.110.0/24 maxlen: 24
202.183.111.0/24 maxlen: 24
202.183.112.0/20 maxlen: 20
202.183.112.0/23 maxlen: 23
202.183.114.0/23 maxlen: 23
202.183.116.0/23 maxlen: 23
202.183.118.0/24 maxlen: 24
202.183.119.0/24 maxlen: 24
202.183.120.0/22 maxlen: 22
202.183.124.0/23 maxlen: 23
202.183.126.0/24 maxlen: 24
202.183.127.0/24 maxlen: 24
210.56.64.0/20 maxlen: 20
210.56.64.0/22 maxlen: 22
210.56.64.0/24 maxlen: 24
210.56.65.0/24 maxlen: 24
210.56.66.0/24 maxlen: 24
210.56.67.0/24 maxlen: 24
210.56.68.0/23 maxlen: 23
210.56.70.0/23 maxlen: 23
210.56.72.0/23 maxlen: 23
210.56.74.0/23 maxlen: 23
210.56.76.0/23 maxlen: 23
210.56.78.0/23 maxlen: 23
220.157.64.0/23 maxlen: 23
220.157.66.0/23 maxlen: 23
220.157.66.0/24 maxlen: 24
220.157.69.0/24 maxlen: 24
220.157.70.0/24 maxlen: 24
220.157.71.0/24 maxlen: 24
220.157.72.0/23 maxlen: 23
220.157.76.0/23 maxlen: 23
220.157.78.0/23 maxlen: 23
220.157.78.0/24 maxlen: 24
220.157.79.0/24 maxlen: 24
220.157.80.0/23 maxlen: 23
220.157.82.0/23 maxlen: 23
220.157.84.0/23 maxlen: 23
220.157.86.0/23 maxlen: 23
220.157.88.0/23 maxlen: 23
220.157.90.0/24 maxlen: 24
220.157.91.0/24 maxlen: 24
220.157.92.0/24 maxlen: 24
220.157.93.0/24 maxlen: 24
220.157.94.0/24 maxlen: 24
220.157.95.0/24 maxlen: 24
2407:6800::/32 maxlen: 32
2407:6800:0:200::/56 maxlen: 56
2407:6800:0:300::/56 maxlen: 56
2407:6800:0:400::/56 maxlen: 56
2407:6800:0:500::/56 maxlen: 56
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1689 (0x699)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB4FE, serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179
Validity
Not Before: Apr 18 23:53:48 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=6621b28c-08e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9e:9b:24:87:16:9e:4b:42:1c:49:91:c8:b0:
4c:7c:00:23:cf:68:16:88:e5:b5:f8:38:72:96:53:
0d:ff:db:30:08:a9:55:54:e1:b0:09:6d:bb:fd:19:
af:2d:76:e0:0b:24:38:e6:d9:c3:0b:17:1e:f1:5c:
95:86:4e:37:7e:76:01:c2:6f:f9:2d:fb:8e:89:65:
8b:c7:d8:7e:ef:cb:a2:bf:49:43:40:07:ca:d4:f5:
01:53:a6:fe:ba:61:3a:ab:f7:eb:bd:77:93:9e:d7:
2d:34:fc:c9:c4:b3:bb:85:d7:00:cf:89:27:a1:a8:
33:57:8c:3c:76:4a:b7:45:53:34:97:76:ba:f2:7a:
8e:73:58:ec:95:06:b5:72:41:6f:9e:99:02:c3:5b:
b0:50:e8:83:cb:b9:8a:81:9b:35:c3:37:f8:62:33:
ae:03:32:ae:03:4b:ba:f6:50:83:02:2c:77:e4:b3:
6e:a5:a1:56:b9:8f:dc:1d:ed:22:0a:59:1c:80:f4:
f0:a4:1e:34:5f:18:a0:15:36:c5:3b:44:ed:78:13:
74:06:79:95:a8:2c:b3:b0:d9:c5:ef:b3:cc:2f:8c:
24:3a:dc:1e:9d:1d:32:48:37:45:5e:1f:08:7b:96:
6c:43:2e:dc:84:92:ce:77:41:f8:0e:93:86:fd:90:
37:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A8:BF:82:59:29:8C:24:F4:A9:56:92:B9:FA:95:A6:60:F3:23:73
X509v3 Authority Key Identifier:
keyid:7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/E62339F4FDDE11EE8C265F41C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.178.0.0/19
1.178.64.0-1.178.111.255
1.178.144.0-1.178.207.255
1.179.0.0-1.179.39.255
1.179.48.0-1.179.71.255
1.179.80.0/21
1.179.96.0/20
58.87.0.0/22
58.87.6.0-58.87.15.255
110.238.2.0-110.238.31.255
110.238.128.0/19
110.238.224.0-110.239.47.255
110.239.128.0/19
110.239.176.0/21
110.239.224.0/19
119.12.0.0/20
119.12.80.0-119.12.103.255
119.12.112.0/20
119.12.144.0/21
119.13.0.0-119.13.23.255
119.13.48.0/21
119.13.128.0-119.13.151.255
119.13.176.0/21
119.13.240.0/21
121.91.16.0/20
121.91.96.0/21
121.91.112.0-121.91.135.255
121.91.144.0/21
121.91.160.0/21
121.91.192.0/21
123.200.128.0-123.200.177.255
123.200.179.0-123.200.189.255
123.200.192.0-123.200.231.255
123.200.240.0/21
202.83.64.0/19
202.183.96.0/19
210.56.64.0/20
220.157.64.0/22
220.157.69.0-220.157.73.255
220.157.76.0-220.157.95.255
IPv6:
2407:6800::/32
Signature Algorithm: sha256WithRSAEncryption
b7:fa:b1:19:c3:cc:99:d7:6d:79:88:37:34:3e:b0:76:40:93:
5c:e2:9c:6a:48:a2:1d:46:3b:85:d0:af:74:e1:9a:04:ee:28:
26:f4:67:94:02:59:e4:5c:fc:70:1d:c9:01:e2:07:c6:6b:40:
83:26:d5:d0:36:3a:a4:f2:82:95:ff:86:07:88:0c:26:d8:f0:
80:4d:a3:43:df:6d:64:3c:fa:c6:04:e5:ec:a9:8e:b0:67:3e:
6f:ef:fb:ae:49:49:9c:97:19:75:c2:26:f5:55:7c:bf:ac:34:
72:73:d3:bb:f1:b4:10:54:ff:75:d1:8c:a2:56:69:b8:2a:c0:
10:67:07:09:16:3d:05:b0:44:3b:e6:6b:23:65:18:4f:71:e9:
cf:84:e0:91:2c:8c:94:47:57:02:bc:23:3e:07:68:c6:71:c2:
e8:1e:0a:79:23:75:2c:37:54:aa:6f:39:77:70:b8:f3:8a:dc:
ca:82:b5:c6:c2:65:20:fc:a0:eb:94:89:85:13:d4:8e:47:27:
5c:f5:c9:8e:f8:8a:cf:8f:86:4b:7e:86:75:52:8b:4c:c1:2b:
2d:70:9f:fc:99:5c:bf:9e:4b:60:63:52:de:08:8c:5d:ae:b3:
8e:d7:24:cc:e5:39:e0:35:ef:df:7a:a9:a2:9e:f9:e3:33:05:
4b:0a:68:72
-----BEGIN CERTIFICATE-----
MIIG8jCCBdqgAwIBAgICBpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REI0RkUxMTAvBgNVBAUTKDdGNkJFMUQ1QTI3MzBGQzIyN0ZBRkM4OTZEMTM0MzMy
NDE3ODMxNzkwHhcNMjQwNDE4MjM1MzQ4WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjIxYjI4Yy0wOGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1Z6bJIcWnktCHEmRyLBMfAAjz2gWiOW1+DhyllMN/9swCKlVVOGwCW27/Rmv
LXbgCyQ45tnDCxce8VyVhk43fnYBwm/5LfuOiWWLx9h+78uiv0lDQAfK1PUBU6b+
umE6q/frvXeTntctNPzJxLO7hdcAz4knoagzV4w8dkq3RVM0l3a68nqOc1jslQa1
ckFvnpkCw1uwUOiDy7mKgZs1wzf4YjOuAzKuA0u69lCDAix35LNupaFWuY/cHe0i
ClkcgPTwpB40XxigFTbFO0TteBN0BnmVqCyzsNnF77PML4wkOtwenR0ySDdFXh8I
e5ZsQy7chJLOd0H4DpOG/ZA3KwIDAQABo4IEFjCCBBIwHQYDVR0OBBYEFC6ov4JZ
KYwk9KlWkrn6laZg8yNzMB8GA1UdIwQYMBaAFH9r4dWicw/CJ/r8iW0TQzJBeDF5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjRGRS9DRjRBMTBFQTg1
RTExMUVCQUZCNTFFODRDNEY5QUUwMi9mMnZoMWFKekQ4SW4tdnlKYlJORE1rRjRN
WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2YydmgxYUp6RDhJbi12eUpiUk5ETWtGNE1Yay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REI0RkUvQ0Y0QTEwRUE4NUUxMTFFQkFGQjUxRTg0QzRGOUFFMDIvRTYyMzM5RjRG
RERFMTFFRThDMjY1RjQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggGeBggrBgEFBQcBBwEB
/wSCAY0wggGJMIIBdgQCAAEwggFuAwQFAbIAMAwDBAYBskADBAQBsmAwDAMEBAGy
kAMEBAGywDALAwMAAbMDBAMBsyAwDAMEBAGzMAMEAwGzQAMEAwGzUAMEBAGzYAME
AjpXADAMAwQBOlcGAwQEOlcAMAwDBAFu7gIDBAVu7gADBAVu7oAwDAMEBW7u4AME
BG7vIAMEBW7vgAMEA27vsAMEBW7v4AMEBHcMADAMAwQEdwxQAwQDdwxgAwQEdwxw
AwQDdwyQMAsDAwB3DQMEA3cNEAMEA3cNMDAMAwQHdw2AAwQDdw2QAwQDdw2wAwQD
dw3wAwQEeVsQAwQDeVtgMAwDBAR5W3ADBAN5W4ADBAN5W5ADBAN5W6ADBAN5W8Aw
DAMEB3vIgAMEAXvIsDAMAwQAe8izAwQBe8i8MAwDBAZ7yMADBAN7yOADBAN7yPAD
BAXKU0ADBAXKt2ADBATSOEADBALcnUAwDAMEANydRQMEAdydSDAMAwQC3J1MAwQF
3J1AMA0EAgACMAcDBQAkB2gAMA0GCSqGSIb3DQEBCwUAA4IBAQC3+rEZw8yZ1215
iDc0PrB2QJNc4pxqSKIdRjuF0K904ZoE7igm9GeUAlnkXPxwHckB4gfGa0CDJtXQ
Njqk8oKV/4YHiAwm2PCATaND321kPPrGBOXsqY6wZz5v7/uuSUmclxl1wib1VXy/
rDRyc9O78bQQVP910YyiVmm4KsAQZwcJFj0FsEQ75msjZRhPcenPhOCRLIyUR1cC
vCM+B2jGccLoHgp5I3UsN1Sqbzl3cLjzitzKgrXGwmUg/KDrlImFE9SORydc9cmO
+IrPj4ZLfoZ1UotMwSstcJ/8mVy/nktgY1LeCIxdrrOO1yTM5TngNe/feqminvnj
MwVLCmhy
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:43:59 2025 by rpki-client