Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/8518C04E9DAB11EF81B62215C4F9AE02.roa
File: 8518C04E9DAB11EF81B62215C4F9AE02.roa (raw, json)
Hash identifier: GdZ2TQfj0CwNiCT6qUPjCD2PuCO+fLkV+HKlKoezX+g=
Subject key identifier: CD:FD:0B:CC:41:1F:3E:66:69:0B:C7:1B:E6:66:8F:EA:0B:67:DC:93
Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial: 09A2
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/8518C04E9DAB11EF81B62215C4F9AE02.roa
Signing time: Tue 12 Nov 2024 08:06:25 +0000
ROA not before: Tue 12 Nov 2024 08:06:25 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 9908
IP address blocks: 61.10.0.0/16 maxlen: 16
61.10.0.0/17 maxlen: 17
61.10.0.0/18 maxlen: 20
61.10.64.0/18 maxlen: 18
61.10.64.0/19 maxlen: 20
61.10.96.0/19 maxlen: 20
61.10.128.0/17 maxlen: 20
61.15.0.0/16 maxlen: 16
61.15.0.0/17 maxlen: 20
61.15.128.0/17 maxlen: 20
61.18.0.0/16 maxlen: 20
125.59.0.0/16 maxlen: 20
203.83.64.0/18 maxlen: 18
203.168.192.0/18 maxlen: 20
203.168.208.0/21 maxlen: 22
218.252.0.0/16 maxlen: 16
218.252.0.0/17 maxlen: 20
218.252.128.0/17 maxlen: 20
218.253.0.0/18 maxlen: 20
218.254.0.0/16 maxlen: 16
222.166.0.0/16 maxlen: 20
222.167.0.0/16 maxlen: 20
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2466 (0x9a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134172
Validity
Not Before: Nov 12 08:06:25 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=67330c80-eb34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2a:89:4b:17:95:56:68:0d:21:24:4d:85:1e:
17:f5:b8:64:a0:93:7d:0c:1c:00:db:77:2f:ec:51:
65:c4:35:84:e7:4c:b2:c2:40:79:f9:a1:13:63:41:
48:b7:1f:7a:34:8a:d9:40:51:a4:f3:e0:a5:81:8f:
cc:ad:61:e1:ef:d0:78:ae:8d:7e:83:d4:86:3f:a0:
60:df:43:8d:32:32:3f:97:52:44:dc:be:c8:89:7f:
fd:89:60:70:6e:6f:b9:de:5e:85:ad:80:28:f6:b7:
e9:da:f7:92:c5:3c:66:99:e4:ec:bd:34:b4:25:9a:
98:83:27:88:8f:85:85:69:f8:4e:4f:e9:e4:e2:16:
32:3c:6e:67:a2:07:2e:3e:5a:25:7f:db:29:c3:d2:
fc:4b:2c:7e:72:62:a6:20:cf:71:c6:14:ef:6a:ec:
d0:30:5c:01:e0:13:d5:9b:7d:3e:8a:3d:07:33:90:
64:03:2b:c5:df:e4:b5:20:d5:11:0b:3d:8c:72:b3:
47:84:bd:26:54:13:ec:d0:2e:84:54:92:06:6e:98:
93:45:40:3b:74:d0:02:08:62:59:98:75:90:42:b0:
14:11:7a:00:b0:e8:a8:4e:68:6b:57:45:00:b2:ef:
f9:91:ab:07:42:24:87:6f:4f:00:3f:25:b9:1a:7e:
61:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FD:0B:CC:41:1F:3E:66:69:0B:C7:1B:E6:66:8F:EA:0B:67:DC:93
X509v3 Authority Key Identifier:
keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/8518C04E9DAB11EF81B62215C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.10.0.0/16
61.15.0.0/16
61.18.0.0/16
125.59.0.0/16
203.83.64.0/18
203.168.192.0/18
218.252.0.0-218.253.63.255
218.254.0.0/16
222.166.0.0/15
Signature Algorithm: sha256WithRSAEncryption
66:a4:a8:ef:3a:39:67:97:07:d9:fc:c6:32:f8:71:ad:af:d5:
ae:4d:f2:2c:b5:1b:5e:35:9f:d9:2d:3d:c8:37:41:c1:b0:a7:
74:de:30:2b:5e:d0:31:85:d9:d1:5a:e3:de:20:08:6c:97:3a:
be:5d:5a:5d:42:43:26:30:b9:08:64:81:0c:5b:d6:46:10:98:
ca:9b:b7:cd:67:2a:c5:ff:80:2a:9e:e1:e4:31:9d:8e:7b:2e:
c8:ab:e8:a1:c1:23:3e:de:cd:d9:0b:e8:75:0a:ce:e3:9a:b6:
d1:df:ca:f4:48:c7:ed:fd:b7:31:e6:34:42:01:ae:f2:51:d5:
3c:65:7c:4f:6c:91:8f:67:1f:09:1c:f2:8c:fa:43:b2:e5:bb:
f6:c7:15:4b:5b:ca:8b:21:a6:ca:5d:38:6a:f8:91:77:94:8e:
b0:43:6f:e5:42:30:1d:75:d2:b3:5c:77:ec:85:60:91:d2:67:
91:92:d8:d6:67:f7:f1:81:1b:48:f5:70:0d:da:98:6a:9c:7e:
e9:6a:31:85:4d:1d:8e:f3:6c:fb:47:67:b7:e7:dc:2b:85:f5:
12:6e:a6:7e:b8:b4:31:fc:5b:ac:e3:26:72:94:7e:07:73:20:
c8:02:08:90:c2:75:2d:a5:7d:d7:b9:f9:85:58:28:0f:50:74:
b0:ee:ef:69
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgICCaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQxNzIxMTAvBgNVBAUTKEY0NUMwRjRGNDY3Q0UxNTc2RTVFRTlFNDFFNTU3NkYw
MzQ4QzQ2QTcwHhcNMjQxMTEyMDgwNjI1WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NzMzMGM4MC1lYjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyyqJSxeVVmgNISRNhR4X9bhkoJN9DBwA23cv7FFlxDWE50yywkB5+aETY0FI
tx96NIrZQFGk8+ClgY/MrWHh79B4ro1+g9SGP6Bg30ONMjI/l1JE3L7IiX/9iWBw
bm+53l6FrYAo9rfp2veSxTxmmeTsvTS0JZqYgyeIj4WFafhOT+nk4hYyPG5nogcu
Plolf9spw9L8Syx+cmKmIM9xxhTvauzQMFwB4BPVm30+ij0HM5BkAyvF3+S1INUR
Cz2McrNHhL0mVBPs0C6EVJIGbpiTRUA7dNACCGJZmHWQQrAUEXoAsOioTmhrV0UA
su/5kasHQiSHb08APyW5Gn5hlQIDAQABo4ICxjCCAsIwHQYDVR0OBBYEFM39C8xB
Hz5maQvHG+Zmj+oLZ9yTMB8GA1UdIwQYMBaAFPRcD09GfOFXbl7p5B5VdvA0jEan
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDE3Mi81OTc2MTI2NDlF
NEQxMUVBOUMyM0FGMUZDNEY5QUUwMi85RndQVDBaODRWZHVYdW5rSGxWMjhEU01S
cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlGd1BUMFo4NFZkdVh1bmtIbFYyOERTTVJxYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzQxNzIvNTk3NjEyNjQ5RTREMTFFQTlDMjNBRjFGQzRGOUFFMDIvODUxOEMwNEU5
REFCMTFFRjgxQjYyMjE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUAYIKwYBBQUHAQcBAf8E
QTA/MD0EAgABMDcDAwA9CgMDAD0PAwMAPRIDAwB9OwMEBstTQAMEBsuowDALAwMC
2vwDBAba/QADAwDa/gMDAd6mMA0GCSqGSIb3DQEBCwUAA4IBAQBmpKjvOjlnlwfZ
/MYy+HGtr9WuTfIstRteNZ/ZLT3IN0HBsKd03jArXtAxhdnRWuPeIAhslzq+XVpd
QkMmMLkIZIEMW9ZGEJjKm7fNZyrF/4AqnuHkMZ2Oey7Iq+ihwSM+3s3ZC+h1Cs7j
mrbR38r0SMft/bcx5jRCAa7yUdU8ZXxPbJGPZx8JHPKM+kOy5bv2xxVLW8qLIabK
XThq+JF3lI6wQ2/lQjAdddKzXHfshWCR0meRktjWZ/fxgRtI9XAN2phqnH7pajGF
TR2O82z7R2e359wrhfUSbqZ+uLQx/Fus4yZylH4HcyDIAgiQwnUtpX3XufmFWCgP
UHSw7u9p
-----END CERTIFICATE-----
Generated at Mon Apr 7 10:27:41 2025 by rpki-client