Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CA82AB881BF911EFA5FA2252C4F9AE02.roa
File: CA82AB881BF911EFA5FA2252C4F9AE02.roa (raw, json)
Hash identifier: mBKGzEw0vMAFulPvw7UGwsrVFgF1Y+25l6pXYOCmBTU=
Subject key identifier: 47:60:6D:EA:46:7F:23:32:9B:37:95:6C:B8:16:87:69:08:25:25:0C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8981
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CA82AB881BF911EFA5FA2252C4F9AE02.roa
Signing time: Thu 30 May 2024 15:59:07 +0000
ROA not before: Thu 30 May 2024 15:59:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134269
IP address blocks: 58.84.58.0/23 maxlen: 24
103.100.12.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35201 (0x8981)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 15:59:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a24b-b25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:77:17:cb:ac:a6:a3:f5:57:7d:e8:12:57:20:
f2:1f:b5:b6:9b:60:32:8d:15:2b:e4:63:03:5c:26:
81:e9:97:60:34:d3:e3:77:bf:2c:71:08:92:3f:45:
97:37:f4:79:f1:1e:0e:f3:44:8e:58:d9:89:e9:e5:
44:9f:25:0d:58:08:b1:6d:24:7f:29:6f:50:ee:b0:
cd:b7:ac:f4:a5:5f:54:03:e8:30:e3:3f:bb:ac:72:
73:b6:f9:5f:77:37:c1:1b:81:58:ed:14:29:c6:bf:
ff:a3:de:11:5b:be:f1:5f:0b:85:90:ee:02:3b:de:
1e:c3:7e:4c:fc:1f:9b:ab:d5:a4:00:22:8d:f3:d9:
20:f4:60:2c:5c:8b:c1:90:ab:fb:17:1b:5b:1f:33:
00:a1:e6:45:b1:63:d0:d3:c4:25:ac:08:be:02:18:
5a:2c:86:18:da:48:ad:b5:1c:d7:33:7d:9e:da:ba:
0a:ee:08:06:85:ac:a5:ea:60:4f:db:00:8a:72:f2:
88:ad:21:ea:a3:78:23:c6:92:c9:dc:6a:6e:7c:ac:
41:2e:01:bd:82:99:f1:fd:44:26:f0:2f:d1:e2:06:
0a:6c:30:1f:5c:4d:2e:bb:21:a9:4f:1b:67:32:35:
40:7a:52:64:62:1e:04:b5:64:dd:9c:36:a0:22:0f:
0b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:60:6D:EA:46:7F:23:32:9B:37:95:6C:B8:16:87:69:08:25:25:0C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CA82AB881BF911EFA5FA2252C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
58.84.58.0/23
103.100.12.0/22
Signature Algorithm: sha256WithRSAEncryption
78:db:25:71:dd:12:63:b9:7c:42:98:5b:a4:75:c2:05:99:64:
4b:5f:47:fc:e2:0a:c3:5f:31:bd:7c:2b:0a:9f:40:12:5b:6d:
5a:94:ee:ff:3b:35:1f:54:31:35:6c:2d:67:26:97:a3:04:63:
a3:2f:05:d3:fe:50:38:d3:0a:43:23:21:25:8f:4e:18:58:8d:
a8:4d:b1:ae:e6:4e:0a:ab:03:2d:3d:6d:cb:dd:46:c2:63:06:
ef:1f:11:30:77:6c:80:31:65:d4:1c:8c:c8:a0:27:9d:27:d1:
aa:4e:d7:a5:ef:c7:4c:8c:6f:d7:29:c2:03:67:9a:c2:0b:2d:
c4:43:e4:bd:60:74:c9:21:db:18:a5:7d:a3:a7:c4:71:cd:e7:
0a:fe:cb:43:4b:69:73:b9:74:e8:f0:b3:75:81:0a:b9:34:88:
a0:92:c9:79:15:fe:91:10:2c:c2:b1:d8:b3:2d:91:26:9a:fe:
46:ad:7a:46:7e:f1:c1:93:3f:ca:d4:d3:af:c2:9c:cc:8f:86:
64:39:6f:6b:10:04:5b:78:8b:e7:66:1b:ad:6e:0a:43:af:1d:
9d:36:61:c4:39:a9:13:d3:ae:f5:8d:ba:c0:97:2a:bb:5d:d5:
3d:a1:80:40:d8:d8:38:9c:87:ff:ef:1e:16:14:33:ff:80:4f:
94:96:a5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:22:13 2025 by rpki-client