Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6A35E5EA968511EF8771C038C4F9AE02.roa
File: 6A35E5EA968511EF8771C038C4F9AE02.roa (raw, json)
Hash identifier: wck+s8Mj2Qkgy9aAPYZOi1oMmJBpa0J3yKwq0aHSeqA=
Subject key identifier: 90:E6:8B:58:18:7E:09:3C:E6:A1:93:5A:54:DA:E4:F2:BA:BA:E9:81
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1A44
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6A35E5EA968511EF8771C038C4F9AE02.roa
Signing time: Wed 30 Oct 2024 07:09:52 +0000
ROA not before: Wed 30 Oct 2024 07:09:52 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 43.226.224.0/22 maxlen: 24
103.11.63.0/24 maxlen: 24
113.203.209.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.214.0/24 maxlen: 24
113.203.215.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.241.0/24 maxlen: 24
113.203.246.0/24 maxlen: 24
115.167.6.0/24 maxlen: 24
115.167.9.0/24 maxlen: 24
115.167.26.0/24 maxlen: 24
115.167.29.0/24 maxlen: 24
115.167.30.0/24 maxlen: 24
115.167.31.0/24 maxlen: 24
115.167.48.0/24 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.52.0/22 maxlen: 22
115.167.60.0/22 maxlen: 22
115.167.64.0/24 maxlen: 24
115.167.65.0/24 maxlen: 24
115.167.67.0/24 maxlen: 24
115.167.76.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.102.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
115.167.125.0/24 maxlen: 24
175.110.80.0/22 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.105.0/24 maxlen: 24
175.110.106.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.147.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.151.0/24 maxlen: 24
180.178.152.0/21 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.163.0/24 maxlen: 24
180.178.164.0/24 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
223.29.226.0/24 maxlen: 24
223.29.227.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6724 (0x1a44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Oct 30 07:09:52 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6721dbc0-e1ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e7:45:bf:31:8a:78:71:77:ac:40:e8:84:79:
2b:49:c2:06:a4:92:de:05:97:b8:37:08:aa:8d:77:
9b:8d:f9:c1:71:3c:5a:38:d6:b3:52:a8:10:e2:5d:
5f:77:06:84:f0:8b:9f:28:44:89:00:ff:9d:21:d5:
06:d1:5b:6b:d5:16:8b:74:5c:fd:e5:4d:6d:62:43:
ca:3c:1b:8a:80:42:d6:79:26:f0:e9:90:4c:6f:20:
c6:7f:ae:37:6c:4c:f0:cf:21:70:26:f2:fd:f5:90:
2e:1b:fd:28:d4:f7:cc:b4:0a:44:7e:03:60:dc:a9:
fc:5c:57:88:19:1d:ea:ce:e1:a9:19:9b:3e:ae:7c:
43:37:2e:1a:f7:42:93:78:29:31:1a:ae:c2:d0:4f:
20:d0:26:c4:78:36:3e:46:df:02:38:2f:90:e3:0a:
06:2d:59:af:2c:a0:9c:81:d4:03:af:85:82:6d:52:
8c:96:38:91:58:13:72:07:5e:48:d2:f0:af:7d:29:
7f:45:e9:d0:ae:69:d6:49:bd:6d:b1:1c:71:cb:de:
3f:7f:6a:bf:7d:cf:cc:4b:99:1b:55:b2:1b:b0:c2:
54:e3:56:b3:26:51:e3:99:58:99:61:65:3c:9d:33:
49:6d:78:f1:52:55:ec:fc:2e:0e:36:07:22:4c:59:
9f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E6:8B:58:18:7E:09:3C:E6:A1:93:5A:54:DA:E4:F2:BA:BA:E9:81
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6A35E5EA968511EF8771C038C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.224.0/22
103.11.63.0/24
113.203.209.0-113.203.211.255
113.203.214.0/23
113.203.217.0/24
113.203.219.0/24
113.203.222.0/24
113.203.224.0/24
113.203.241.0/24
113.203.246.0/24
115.167.6.0/24
115.167.9.0/24
115.167.26.0/24
115.167.29.0-115.167.31.255
115.167.48.0/24
115.167.50.0/24
115.167.52.0/22
115.167.60.0-115.167.65.255
115.167.67.0/24
115.167.76.0/24
115.167.78.0/24
115.167.102.0/24
115.167.124.0/23
175.110.80.0/22
175.110.97.0/24
175.110.104.0-175.110.106.255
180.178.142.0/24
180.178.146.0/23
180.178.149.0-180.178.159.255
180.178.161.0-180.178.164.255
180.178.168.0/24
180.178.170.0/24
180.178.188.0/24
180.178.190.0/24
202.92.26.0/24
223.29.225.0-223.29.230.255
223.29.238.0/23
Signature Algorithm: sha256WithRSAEncryption
30:d5:92:e4:29:95:ed:bd:98:0c:72:b9:f8:52:d6:8b:3b:58:
7b:f8:18:25:72:6d:87:4c:2d:67:68:39:e5:cd:87:96:77:2b:
23:57:03:93:5f:f3:75:23:db:97:c3:21:bf:90:88:1e:ff:e2:
3b:67:4c:6a:d3:30:23:01:c9:cf:b7:e4:97:db:59:8f:ae:7c:
9a:f7:9d:f3:fb:6d:5c:29:9a:0f:66:a6:be:e8:eb:cb:23:a5:
2d:46:15:64:53:59:56:8c:07:1e:6c:9c:5d:01:a6:46:76:b3:
ec:fc:33:42:0f:10:f9:0b:f3:25:8a:e6:2d:76:14:71:7d:0a:
01:57:bc:6a:b1:b2:e1:6d:87:57:17:18:ec:2c:96:3b:ec:d4:
06:3d:6b:c1:81:f5:c4:ad:a1:84:69:38:e4:a9:d4:80:a7:92:
ce:cd:6b:14:b0:a1:60:77:a6:b0:41:ca:c8:fc:a8:5e:bf:87:
d7:81:53:3f:bf:65:e7:db:d2:b9:64:2c:94:e0:b6:14:84:3e:
10:24:a3:91:2e:ec:f7:e7:91:92:05:3c:4c:61:17:0b:2e:e8:
00:b6:ea:3b:bb:e9:95:4b:20:c1:74:9c:5f:0b:52:09:3d:00:
28:d6:ca:3e:a0:96:de:7b:3a:11:00:e1:c9:f9:be:9d:91:fa:
0c:15:a8:eb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:46:01 2025 by rpki-client