Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9AF856025C7F11EB830C1E5FC4F9AE02.roa
File: 9AF856025C7F11EB830C1E5FC4F9AE02.roa (raw, json)
Hash identifier: hYGrQ1Ma9/eP81Uwhe5IuuKE1Yk8Wir7jDSdc7+2me8=
Subject key identifier: 1E:57:57:0E:85:FC:49:9E:52:ED:88:83:93:3F:CC:24:54:07:FE:10
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 90B0
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9AF856025C7F11EB830C1E5FC4F9AE02.roa
Signing time: Thu 30 May 2024 16:28:59 +0000
ROA not before: Thu 30 May 2024 16:28:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203020
IP address blocks: 45.113.224.0/22 maxlen: 24
157.119.40.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37040 (0x90b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:28:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a94b-3d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:60:fb:4e:15:46:ef:eb:66:87:6b:af:3f:c7:
3d:56:11:52:89:7b:17:b9:14:ac:52:ba:38:db:c6:
c3:01:68:ca:76:de:c4:42:bf:c3:0e:ed:4d:86:13:
e6:b8:dc:04:bf:0c:99:7d:e7:aa:6e:78:ce:1a:df:
27:71:73:d1:3e:04:11:bb:eb:dd:95:18:3d:40:84:
10:1f:39:e6:1e:77:e5:89:fd:9d:af:74:78:0b:82:
93:5a:86:90:d6:3d:a2:b3:09:7c:ef:24:4d:d8:f6:
44:95:da:ce:07:fd:3d:32:7e:75:8b:dd:67:c9:52:
9a:01:59:c2:7b:6d:ce:66:0b:e7:f6:93:38:94:ed:
63:a7:61:c2:e2:49:a0:d7:b3:d3:74:fa:f0:f3:e4:
a6:e2:47:d4:1d:cb:aa:2b:6f:c3:fa:5e:32:12:d1:
12:49:a0:30:3f:01:95:b0:7e:ec:1f:8f:1c:c7:cf:
a6:b5:70:73:a4:a3:db:b3:c0:9f:f2:17:39:53:86:
7b:7a:cb:2a:60:44:11:3a:40:c7:ce:c6:0a:16:8d:
c7:4c:66:c8:c4:00:db:2d:af:c1:04:c9:7c:3e:4d:
d1:29:4a:c1:2e:3f:59:d4:89:12:7a:09:0d:23:c5:
25:ab:f6:ed:6e:35:dc:f3:ff:72:9c:3e:3b:e5:1e:
08:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:57:57:0E:85:FC:49:9E:52:ED:88:83:93:3F:CC:24:54:07:FE:10
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9AF856025C7F11EB830C1E5FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.113.224.0/22
157.119.40.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:7a:1d:41:55:cd:15:85:c4:db:36:0c:33:b1:f9:19:9d:75:
70:c8:c3:7c:c0:76:a2:e5:d9:94:60:a6:99:94:f3:ce:9e:0e:
8b:a3:44:c9:95:bb:59:3e:d0:02:ad:33:0a:4d:6b:b6:2f:02:
b5:1c:b4:60:f9:18:8b:e3:fa:f3:68:ee:f7:c5:4e:81:2c:d1:
81:93:e3:10:06:dd:bb:04:a0:d0:a9:12:af:bf:6e:d2:08:bf:
e5:93:29:98:94:a0:12:4d:34:36:93:30:f6:d8:21:0e:b5:88:
f3:19:04:59:b5:35:6d:e9:0d:ac:89:18:b0:7e:d8:c7:ec:b7:
62:f9:22:a1:9a:46:a4:bc:40:09:ef:8a:d3:28:14:06:80:5c:
e0:53:05:4b:ad:7c:7b:21:44:a0:89:5a:70:58:3d:5c:d0:85:
c5:d6:82:d9:58:31:df:02:be:8b:98:af:2d:1f:34:eb:f8:5d:
9d:b4:54:50:7e:09:6e:49:72:f1:6d:e4:dc:8b:1d:92:39:f1:
d8:6c:d5:a4:58:4f:cb:11:d0:c1:24:b3:b6:41:45:f5:0a:e7:
f0:4d:d6:40:bf:52:8e:45:ce:d4:c5:ce:37:87:d1:9d:cc:86:
ea:fa:c7:86:ae:b9:53:92:3d:0b:64:17:0e:0f:c5:6e:f3:85:
fc:a3:65:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:00:48 2025 by rpki-client