Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DE47678E0F0F11ECA4E15B18C4F9AE02.roa
File: DE47678E0F0F11ECA4E15B18C4F9AE02.roa (raw, json)
Hash identifier: 0VyZiqQTZwV9c/EvwvxDj/JCdkuYcb55xr40r8aRt8g=
Subject key identifier: 04:EF:BA:39:07:B5:BC:14:BC:E0:24:BA:CE:AE:CB:CC:14:11:53:0A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 90A5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DE47678E0F0F11ECA4E15B18C4F9AE02.roa
Signing time: Thu 30 May 2024 16:28:49 +0000
ROA not before: Thu 30 May 2024 16:28:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 18008
IP address blocks: 118.88.0.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37029 (0x90a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:28:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a941-fb49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4d:52:06:ca:eb:4d:fc:49:1d:0e:a3:a5:b2:
2f:52:b0:49:72:87:ab:a7:57:42:e8:37:0a:60:af:
74:d5:e4:9e:a1:dd:08:fb:94:e2:e0:e7:1c:be:c4:
4c:37:0e:a9:1a:8a:78:6d:1a:40:d9:45:55:5b:30:
fa:15:6a:5b:e2:89:f9:be:50:3e:59:50:dc:41:88:
8c:31:b2:b1:4d:19:4f:42:86:08:d3:fb:a1:d6:04:
dc:06:55:ff:4f:3b:45:76:24:b4:d3:f8:43:8d:3a:
f1:56:30:04:f3:01:d2:b5:35:3f:c1:00:d6:46:ed:
07:bd:96:3c:08:8c:8e:6c:bf:49:d5:f9:29:13:86:
71:5b:b9:6c:0f:dc:3b:de:9d:e4:c5:c8:d7:41:e9:
b3:cb:8d:ec:9f:f3:6e:bd:ba:ba:70:39:d6:b0:86:
b7:69:a7:0f:f3:ba:7a:95:a5:41:84:61:28:ee:31:
8c:b7:28:70:73:58:37:51:22:1c:fd:a6:99:d5:91:
bd:2f:41:1c:03:55:e0:af:f1:29:de:9e:9a:5e:b6:
13:c0:c1:9c:6f:b5:23:00:51:b4:77:b8:08:ce:96:
de:de:f8:9c:02:90:da:21:e1:ab:a9:34:a7:1e:f4:
81:0d:e4:8f:a5:c0:17:ed:23:a9:21:6b:a9:11:36:
87:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:EF:BA:39:07:B5:BC:14:BC:E0:24:BA:CE:AE:CB:CC:14:11:53:0A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DE47678E0F0F11ECA4E15B18C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
118.88.0.0/21
Signature Algorithm: sha256WithRSAEncryption
1b:7c:1c:e3:e1:ba:73:a0:a8:2b:bf:27:49:cf:7b:52:da:61:
74:23:c8:db:45:d9:95:6d:9d:83:0b:e1:98:df:8b:d4:95:3e:
b3:25:c5:a5:40:9c:43:9f:da:ff:be:3c:d1:d1:97:ef:4c:a6:
f3:79:3a:14:32:ae:83:0a:b0:6f:f7:70:ca:e6:92:4c:73:f8:
40:0c:d8:54:8f:f3:64:4d:16:39:f2:4f:ee:67:13:00:7c:46:
e0:83:b7:68:e1:b3:62:68:d9:6d:c0:c1:e5:a2:58:1d:31:7e:
55:63:d4:98:8c:0a:e5:31:89:45:65:db:c5:0e:94:26:d4:04:
b0:40:ad:0a:43:9c:2d:70:2a:a3:ff:24:99:cd:bc:49:83:f1:
1c:cf:1a:36:2d:d9:2e:9c:c7:07:bf:50:e4:71:a7:53:95:5d:
b7:f9:3d:83:20:87:56:66:b1:23:ee:33:4d:ab:32:43:b2:ae:
70:b8:b5:cb:76:cb:a2:34:49:a1:91:23:76:27:25:87:46:43:
bd:6e:ec:22:57:f2:9c:0f:4f:a6:9a:8c:0e:6e:ca:d4:d3:79:
a5:86:84:34:1f:9b:f3:9b:e0:21:cc:35:f1:96:be:b7:f3:75:
a3:53:bf:c1:fa:38:3b:62:0a:00:e1:cc:4f:72:83:eb:13:f3:
92:1a:da:b6
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgIDAJClMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDUzMDE2Mjg0OVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjY1OGE5NDEtZmI0OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOxNUgbK6038SR0Oo6WyL1KwSXKHq6dXQug3CmCvdNXknqHdCPuU4uDnHL7E
TDcOqRqKeG0aQNlFVVsw+hVqW+KJ+b5QPllQ3EGIjDGysU0ZT0KGCNP7odYE3AZV
/087RXYktNP4Q4068VYwBPMB0rU1P8EA1kbtB72WPAiMjmy/SdX5KROGcVu5bA/c
O96d5MXI10Hps8uN7J/zbr26unA51rCGt2mnD/O6epWlQYRhKO4xjLcocHNYN1Ei
HP2mmdWRvS9BHANV4K/xKd6eml62E8DBnG+1IwBRtHe4CM6W3t74nAKQ2iHhq6k0
px70gQ3kj6XAF+0jqSFrqRE2h5ECAwEAAaOCApUwggKRMB0GA1UdDgQWBBQE77o5
B7W8FLzgJLrOrsvMFBFTCjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0RFNDc2NzhF
MEYwRjExRUNBNEUxNUIxOEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQDdlgAMA0GCSqGSIb3DQEBCwUAA4IBAQAbfBzj4bpzoKgr
vydJz3tS2mF0I8jbRdmVbZ2DC+GY34vUlT6zJcWlQJxDn9r/vjzR0ZfvTKbzeToU
Mq6DCrBv93DK5pJMc/hADNhUj/NkTRY58k/uZxMAfEbgg7do4bNiaNltwMHlolgd
MX5VY9SYjArlMYlFZdvFDpQm1ASwQK0KQ5wtcCqj/ySZzbxJg/Eczxo2LdkunMcH
v1DkcadTlV23+T2DIIdWZrEj7jNNqzJDsq5wuLXLdsuiNEmhkSN2JyWHRkO9buwi
V/KcD0+mmowObsrU03mlhoQ0H5vzm+AhzDXxlr6383WjU7/B+jg7YgoA4cxPcoPr
E/OSGtq2
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:18:43 2025 by rpki-client