Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E242DA540D2F11EB9714110DC4F9AE02.roa
File: E242DA540D2F11EB9714110DC4F9AE02.roa (raw, json)
Hash identifier: pRDOQJYuV3TlHvqXhoNQFSKtiqkDQk6nrWqc4uZnL7o=
Subject key identifier: 50:BD:C7:ED:FC:A6:76:82:00:A3:9C:2F:D7:F9:02:CB:99:12:5D:EC
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7977
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E242DA540D2F11EB9714110DC4F9AE02.roa
Signing time: Mon 04 Sep 2023 07:32:44 +0000
ROA not before: Mon 04 Sep 2023 07:32:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135235
IP address blocks: 45.252.80.0/22 maxlen: 24
103.221.80.0/22 maxlen: 24
2001:df1:d7c0::/48 maxlen: 48
2001:df2:de40::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31095 (0x7977)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Sep 4 07:32:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64f5881b-9e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:77:73:5c:5d:ea:b1:7b:f3:2a:19:20:bb:4c:
ec:f0:41:3a:1b:ed:bc:ff:72:41:1f:98:72:51:51:
0a:01:65:49:2e:d2:b0:ed:bf:84:29:b7:0b:54:a6:
98:08:13:ef:69:e8:6b:59:7c:32:f8:de:23:7f:a7:
0a:08:28:4d:6b:e4:2c:3e:71:87:0a:82:70:f1:4b:
54:f6:99:e6:fe:d3:1c:d7:45:a3:15:af:04:33:73:
ab:68:15:d7:39:83:2d:3f:77:a5:62:b0:a3:2f:8e:
82:c2:c8:3a:a6:3f:0d:d9:9d:1d:5d:44:dd:80:46:
be:17:71:f1:d1:d1:c0:ea:43:fe:64:59:9a:24:ae:
2a:69:42:f8:00:14:3d:1e:20:62:56:66:ce:6b:05:
4a:51:ba:70:23:d0:0f:a4:88:93:6e:43:57:8e:29:
98:75:66:d8:83:85:2c:5d:8e:76:74:ad:98:d0:24:
02:4a:3c:e5:82:07:25:91:9c:bb:3e:1b:57:04:f0:
35:45:08:a9:9d:8b:13:84:46:19:38:06:19:1c:ac:
b1:d3:08:3a:c0:07:61:5c:23:b1:a5:ce:88:a7:e6:
a4:35:a9:50:aa:bf:a9:8d:dd:e3:74:46:a6:a8:73:
5d:61:9b:78:4b:26:01:2e:3d:42:f4:ed:95:07:ce:
3e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BD:C7:ED:FC:A6:76:82:00:A3:9C:2F:D7:F9:02:CB:99:12:5D:EC
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E242DA540D2F11EB9714110DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.252.80.0/22
103.221.80.0/22
IPv6:
2001:df1:d7c0::/48
2001:df2:de40::/48
Signature Algorithm: sha256WithRSAEncryption
25:ad:10:81:a8:e6:89:a3:96:f3:43:eb:06:e7:99:05:f9:2b:
47:2c:e6:7d:39:1e:c9:73:17:f8:84:68:67:b8:65:01:12:e6:
a7:39:12:8e:d2:47:f1:dc:f2:60:1f:2a:13:45:4e:03:51:44:
84:9a:be:76:5a:c5:46:f9:ec:ff:7f:cc:c4:61:dd:a4:91:04:
4c:01:fb:a5:ae:ea:14:76:a3:20:ef:56:3a:35:fc:e1:a7:95:
f7:b7:7c:2d:19:be:c8:81:52:f6:07:9e:fd:3f:7d:24:9d:28:
81:8e:42:89:80:e4:d9:e0:dc:48:4f:da:c1:92:b4:2c:55:5d:
bc:28:e5:19:94:4e:94:69:06:cf:8f:7f:55:ed:7e:39:1e:7a:
e4:6e:c9:b7:5f:4f:7e:fd:e6:1b:71:e9:c0:81:ca:f9:6e:6c:
01:1a:97:10:54:a1:53:4c:c4:e8:6f:b4:93:d7:6b:09:c9:3b:
57:7f:86:15:e5:ab:dc:75:a4:e1:a8:8a:20:d0:c9:9d:67:90:
c6:c3:ff:5c:63:e0:72:01:ac:ee:df:46:93:c7:a3:e6:e0:af:
6b:c5:dc:e9:7f:44:fc:8d:bc:fd:22:ea:52:a2:26:cf:0d:cf:
ac:71:24:79:4a:2f:29:2a:76:fc:fd:a5:92:4e:76:7c:19:c0:
cf:26:0e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:51:50 2025 by rpki-client