Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/62045F02FE9111ECAFD9BB1FC4F9AE02.roa
File: 62045F02FE9111ECAFD9BB1FC4F9AE02.roa (raw, json)
Hash identifier: +R5r1rvu1ZDUoKoUDVa6QYBpgvqdqZJYlAv/m7x2eV0=
Subject key identifier: 6B:EF:6C:54:82:97:9E:0A:4B:67:4B:18:93:A2:45:7F:71:17:88:C9
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 58D4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/62045F02FE9111ECAFD9BB1FC4F9AE02.roa
Signing time: Fri 08 Jul 2022 07:41:31 +0000
ROA not before: Fri 08 Jul 2022 07:41:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396073
IP address blocks: 2001:df0:46c0::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22740 (0x58d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jul 8 07:41:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62c7dfab-d25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:31:1a:cd:eb:fa:99:4b:3b:ea:5b:7f:10:cb:
f1:67:3e:52:c9:35:49:49:9f:69:78:0b:54:ac:4a:
dd:11:1e:16:05:72:63:b5:d0:93:11:c6:2f:ee:31:
67:ee:c6:c7:d1:83:30:f7:e2:9b:c8:f5:e5:e4:6e:
c3:8d:c2:42:82:5e:13:23:7a:67:ff:e0:8d:0e:8e:
4e:2f:4d:42:29:17:51:ac:1c:47:9d:db:62:7a:e7:
e3:3d:f9:82:dc:66:f3:e3:06:fd:ce:d7:12:fe:50:
a8:31:11:d8:a1:04:ea:8b:c5:bf:aa:88:3d:d3:ea:
4d:42:34:df:3e:1d:1e:02:ed:db:95:7d:4b:c2:2c:
d4:81:80:6f:e3:ab:1b:73:b0:a4:e0:43:38:a3:45:
00:a8:83:e1:e3:10:42:c2:fd:f2:53:b6:ce:09:b6:
4e:bf:4e:c0:5a:0c:a4:5a:46:7b:50:c8:8f:8c:c5:
66:59:d8:8a:5e:52:31:52:a7:ad:18:39:0d:d4:d8:
9d:38:63:fd:09:b5:d2:b4:76:a6:fe:ff:3b:2f:b2:
3c:a4:3c:c9:d2:38:a5:4b:ed:d1:13:79:f4:44:27:
91:e5:a3:b2:3a:9e:16:ba:d2:a5:8c:e6:60:c5:6a:
6a:75:c3:c1:53:5e:1c:0d:53:67:6b:1b:a1:00:46:
fa:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:EF:6C:54:82:97:9E:0A:4B:67:4B:18:93:A2:45:7F:71:17:88:C9
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/62045F02FE9111ECAFD9BB1FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:46c0::/48
Signature Algorithm: sha256WithRSAEncryption
80:cf:d0:63:0d:54:85:e7:e4:bf:01:9d:4a:f2:97:53:86:3a:
91:a2:10:65:bb:11:f8:8f:04:4c:a0:e1:c3:d9:7c:43:49:c7:
99:5d:4f:c2:42:b9:c4:0d:c4:bf:ee:b3:59:2e:7a:cd:4c:bb:
36:ba:ad:23:56:98:55:29:54:86:14:d5:ce:20:b7:14:21:4a:
12:88:16:ba:60:df:1b:4d:d5:27:7b:b9:26:c4:7e:ae:38:16:
d9:7f:99:ea:44:54:52:39:4b:82:21:a9:c7:47:e5:24:99:87:
53:1c:fa:79:f0:03:27:61:36:f6:1b:c8:5c:15:60:7b:18:a8:
db:73:d1:fb:07:4b:15:27:7b:08:af:ff:84:27:2c:2f:4d:5c:
0d:4d:ae:80:22:cc:14:ac:71:97:ed:16:91:70:ce:b4:cb:e9:
31:98:71:96:ab:d5:7b:3f:1e:e9:97:d5:44:f6:c1:8a:61:78:
25:b3:fe:f9:bf:70:e0:3d:cc:5e:5f:e4:de:26:70:02:eb:bb:
2c:bd:64:4d:6d:26:d4:84:ed:5c:b4:14:e7:42:29:e1:70:28:
ae:1b:a9:87:b2:6d:27:9f:91:b7:50:26:25:fc:93:f4:e4:a5:
e2:3a:f8:3a:1a:45:19:a6:6f:dd:0f:43:26:e3:72:7f:7d:f7:
7b:bd:6e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:52:09 2025 by rpki-client