Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/06412614F65F11EAB777382BC4F9AE02.roa
File: 06412614F65F11EAB777382BC4F9AE02.roa (raw, json)
Hash identifier: 9cK90E05TlCfEUnZPho5aFD/uXWM4b4t2wMr7K7NUAs=
Subject key identifier: C5:C1:CF:D4:9F:1F:52:CC:C0:9D:BF:C1:B5:4E:FB:23:36:35:48:FD
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8861
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/06412614F65F11EAB777382BC4F9AE02.roa
Signing time: Thu 30 May 2024 15:54:18 +0000
ROA not before: Thu 30 May 2024 15:54:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 132518
IP address blocks: 2406:58c0::/32 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34913 (0x8861)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 15:54:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a12a-45a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ee:5d:11:d4:c3:e5:08:74:c2:47:25:b6:fd:
3c:e4:e7:0e:af:1f:35:7d:72:9c:7f:fc:38:bc:62:
07:c8:a1:e8:f1:6f:16:5c:f7:00:63:12:f0:bb:2f:
f7:1f:e1:ae:35:a8:6d:3d:3d:57:65:ca:4c:21:d5:
a1:47:7e:50:82:4c:6c:f7:ce:2e:8c:27:20:39:7b:
8a:ea:96:18:02:e6:c4:7e:68:a2:f3:cb:a3:b4:73:
7a:da:85:7f:24:2f:e4:54:7d:df:0e:7b:f5:af:7f:
11:cf:83:5d:61:ec:6f:a5:2f:a9:f1:5e:67:f0:27:
15:94:02:f6:1f:f2:33:c8:62:4b:fa:30:b0:61:89:
eb:f2:4b:0d:b1:d1:44:ea:c7:ea:b2:9a:a1:5e:a9:
31:78:d3:0d:9a:b7:e8:a9:a6:87:4c:87:99:01:7c:
3b:be:54:27:07:f4:f7:03:57:bd:50:cf:c2:9b:87:
41:d3:32:5d:53:34:0b:7a:64:2f:e9:3d:e2:e3:8e:
40:5a:87:b4:d5:71:23:95:e4:a8:8e:44:b9:91:27:
42:7c:20:54:61:bc:00:5c:44:46:ed:07:dc:73:4b:
77:78:ae:2d:2b:5b:09:35:dd:ce:03:6a:58:f2:13:
32:86:9e:30:5c:91:45:b5:3e:ee:db:18:fc:9d:17:
1d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C1:CF:D4:9F:1F:52:CC:C0:9D:BF:C1:B5:4E:FB:23:36:35:48:FD
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/06412614F65F11EAB777382BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:58c0::/32
Signature Algorithm: sha256WithRSAEncryption
17:42:81:a2:99:f8:09:8d:85:b0:84:a4:9c:41:f7:51:d8:6d:
80:8e:0c:c9:75:be:8a:59:2b:53:ef:c7:05:d1:88:5c:40:bf:
e0:cf:19:71:09:1c:e1:af:57:65:a9:59:b2:31:82:4a:0b:44:
7c:ab:7e:b4:88:be:92:47:d1:85:db:d5:bb:8f:ae:38:0f:f1:
17:b9:8c:57:2c:98:70:1e:0b:5a:1e:f6:d6:46:eb:37:86:40:
d8:bc:06:85:59:c5:22:46:cb:94:58:1a:5e:07:a9:00:cd:39:
af:0c:68:24:1b:67:a4:e9:87:c4:55:26:cb:39:3e:0a:43:1a:
67:6b:03:ed:fc:9f:a2:36:f3:37:65:92:b5:2d:4e:92:95:27:
82:aa:b6:47:b9:5a:bd:d9:8c:50:c0:c5:f6:fd:14:aa:aa:23:
eb:78:fe:08:1e:87:3a:23:0c:0e:d7:72:b5:8b:d7:73:8b:0f:
f3:d1:b3:75:fa:82:77:ca:65:62:61:95:53:ce:66:de:84:36:
11:de:39:f9:25:4d:e6:90:ca:66:19:6b:c7:90:8b:80:62:30:
de:04:7b:c1:74:0a:a3:80:bf:ac:61:60:ae:0b:b9:7a:59:36:
58:61:0b:24:f5:20:6a:78:28:0b:ab:31:aa:86:fe:d0:0e:2b:
27:d3:cf:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:44 2025 by rpki-client