Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4FB31A2CAAFC11EFB12B7853C4F9AE02.roa
File: 4FB31A2CAAFC11EFB12B7853C4F9AE02.roa (raw, json)
Hash identifier: QPhHtprYwszvNPDVtj7NvHKUgLtxhQZL4PvxsDeZLe0=
Subject key identifier: 83:3A:44:74:DB:1E:6D:25:A6:25:74:C5:87:E7:8B:65:C2:42:A7:DC
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9DBB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4FB31A2CAAFC11EFB12B7853C4F9AE02.roa
Signing time: Mon 25 Nov 2024 07:10:12 +0000
ROA not before: Mon 25 Nov 2024 07:10:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137159
IP address blocks: 2405:ad40:100::/40 maxlen: 48
2405:ad40:200::/40 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40379 (0x9dbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Nov 25 07:10:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=674422d4-630d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:14:c0:db:c9:ff:8e:05:22:86:95:45:69:36:
85:b0:f7:d6:20:32:a9:18:3d:88:bd:64:61:08:96:
65:4c:0e:19:e6:32:2b:a5:8b:66:9b:a1:5c:54:55:
76:38:c0:c7:41:58:03:0f:dc:7f:1d:98:b4:06:d3:
4d:10:3a:0e:cf:5b:d2:41:4e:c6:e2:ad:21:c2:9f:
d9:77:08:59:98:1d:92:d0:e6:29:f7:c8:87:c7:8e:
fd:c3:19:c4:12:3a:15:23:d2:fe:24:6f:63:5d:00:
90:1c:1b:51:31:e2:04:46:c9:9a:12:78:00:5d:29:
aa:d3:94:dc:89:ea:7f:14:2a:83:d0:15:c7:9c:34:
dc:d5:4c:7c:b9:0b:43:cf:77:6c:5e:c9:28:7b:f8:
a7:0b:78:99:55:86:91:88:d0:7b:30:77:6e:6d:1c:
6a:53:e9:5e:a2:3e:82:9f:8c:07:d2:f3:dc:0c:35:
3e:42:48:98:07:21:3f:ed:63:10:ea:bd:2c:97:c6:
9e:37:5d:0b:9c:ee:4b:75:f3:f8:77:8c:39:13:e9:
24:c3:d7:64:17:69:ff:17:87:0f:e1:5c:a5:4a:4b:
1b:f3:32:33:69:75:a8:bf:60:02:38:aa:73:15:11:
b1:12:70:2d:d2:79:f0:1b:ad:c7:18:15:92:c3:a9:
33:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:3A:44:74:DB:1E:6D:25:A6:25:74:C5:87:E7:8B:65:C2:42:A7:DC
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4FB31A2CAAFC11EFB12B7853C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:ad40:100::-2405:ad40:2ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
79:da:9e:6c:e1:6e:e9:54:d9:ae:3f:cd:b5:1c:5a:4d:0f:d3:
47:9c:bc:0a:00:53:10:84:ad:2a:fd:de:6f:0b:e3:f0:30:59:
fe:13:c8:ec:79:7f:a9:1d:f2:11:df:4e:5f:5a:17:52:1c:03:
7f:7d:95:02:75:18:87:d6:12:ba:d4:67:94:b0:d9:20:e6:88:
60:70:1f:cd:58:19:29:59:86:c1:f5:5b:e4:a3:1f:57:a6:30:
df:5f:22:13:b8:94:87:06:c3:70:c0:09:e0:f4:37:7f:2c:c3:
4d:d2:4d:49:dd:06:8b:b2:35:ca:37:44:1f:59:41:60:92:ed:
7e:0a:89:5b:ab:43:df:bc:63:20:9f:ee:93:97:18:70:9d:5d:
25:42:fa:94:e3:97:d6:b2:73:1c:aa:c2:24:cf:c3:c2:89:aa:
a3:6c:3c:74:52:46:a6:74:c2:e4:7d:23:55:2b:15:e5:04:46:
e1:c9:f2:a6:4d:d8:26:20:e7:de:b7:20:77:03:5d:98:99:62:
6a:19:17:c7:20:86:31:25:d2:a6:0d:fb:9d:9c:4c:50:91:50:
a3:33:f1:2b:f2:2e:94:2d:78:80:35:16:50:c2:f0:00:bb:40:
31:5c:7e:a6:be:35:62:ec:13:c6:2e:69:de:8f:86:26:c6:26:
dd:b8:05:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:15:09 2025 by rpki-client