Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DF3399ECB84E11EF97E62969C4F9AE02.roa
File: DF3399ECB84E11EF97E62969C4F9AE02.roa (raw, json)
Hash identifier: YfcH7MvFPCntwU0TJ5xtKSk7jb14lrma7x8uy/kPuIU=
Subject key identifier: 7E:B9:98:B4:77:85:B9:04:57:C7:5A:AD:AC:44:DF:94:5C:D5:96:30
Certificate issuer: /CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918
Certificate serial: 08B0
Authority key identifier: A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DF3399ECB84E11EF97E62969C4F9AE02.roa
Signing time: Thu 12 Dec 2024 06:03:57 +0000
ROA not before: Thu 12 Dec 2024 06:03:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38138
IP address blocks: 114.129.8.0/21 maxlen: 21
114.129.8.0/24 maxlen: 24
114.129.9.0/24 maxlen: 24
114.129.12.0/24 maxlen: 24
2405:eec0::/32 maxlen: 32
2405:eec0:1::/48 maxlen: 48
2405:eec0:2::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2224 (0x8b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0BDE
Validity
Not Before: Dec 12 06:03:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=675a7ccc-1a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:72:28:c5:30:bd:b4:d2:20:26:42:b7:06:c2:
e1:cc:da:36:47:c0:56:d6:1c:03:65:fd:56:6b:0c:
9f:f7:b7:41:b3:bd:28:de:c0:ed:b9:f5:a6:d4:b7:
5f:b4:cf:f6:8c:74:f8:88:ec:08:69:7b:16:f4:11:
d7:d9:5c:f5:c4:6a:6d:f4:be:22:2e:6b:4c:02:43:
86:94:b3:c5:97:3f:b8:40:58:b9:7a:85:2e:10:09:
c3:9c:31:a2:e7:75:25:da:74:76:b2:e3:23:5f:06:
79:fb:89:2d:26:2a:79:88:b7:b4:f3:a2:05:98:cb:
43:22:ad:5c:8a:17:94:d3:d8:05:88:05:2c:62:de:
46:6f:fb:2e:73:5c:81:07:99:47:e2:e4:25:51:06:
24:af:2f:4e:fa:60:c5:ee:ef:c6:a1:73:84:6b:8e:
cb:5d:fd:9f:1c:78:ff:16:1f:a3:17:78:24:05:5b:
f9:af:f0:c2:22:d3:47:90:c4:14:6f:da:ac:0e:07:
2e:f4:64:b0:06:c5:2c:42:5f:fb:62:1a:60:b2:ec:
d1:69:b2:60:d4:29:28:ee:ce:78:ff:f8:e7:a5:09:
b8:ed:4d:48:1a:62:e5:8d:1c:74:ad:94:68:6a:a6:
93:e0:7e:77:c5:bd:91:9d:0a:23:67:c3:5e:16:8d:
d0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B9:98:B4:77:85:B9:04:57:C7:5A:AD:AC:44:DF:94:5C:D5:96:30
X509v3 Authority Key Identifier:
keyid:A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DF3399ECB84E11EF97E62969C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
114.129.8.0/21
IPv6:
2405:eec0::/32
Signature Algorithm: sha256WithRSAEncryption
3a:07:f4:07:b1:4b:aa:13:8c:eb:ab:a2:30:dd:da:0c:86:11:
31:d6:93:70:b6:59:38:c9:31:dc:62:5d:ba:0d:76:30:c3:46:
38:e3:d5:13:78:b5:c1:a0:7d:f9:7f:6d:5b:a7:58:25:78:75:
3b:5b:c2:69:59:7c:2d:77:01:c1:f8:cb:f0:80:06:61:23:6f:
82:19:a8:be:3f:dd:34:88:52:92:31:3e:89:34:a9:c8:db:93:
30:ec:e7:45:32:ad:61:53:af:63:42:c4:f6:67:49:3f:8f:c2:
de:9b:16:cd:b2:34:6d:7c:20:e5:6d:29:5a:0d:61:dd:9c:1c:
ab:b5:0f:57:74:ba:d2:94:9f:ed:42:2e:b6:c9:aa:eb:56:d4:
d7:61:e5:f7:ff:84:5a:49:b6:7e:62:b9:88:28:23:f0:03:93:
f9:9f:67:0e:0b:8e:e4:20:a6:23:74:e8:be:92:a6:a4:a3:dc:
e2:00:75:29:cb:69:2f:65:14:45:57:c1:07:51:49:42:04:e5:
60:01:b5:66:99:61:75:22:02:99:d7:0a:6c:ac:71:69:fa:1b:
11:fc:54:e2:0b:91:82:5c:6e:8d:dc:90:de:93:aa:04:96:c1:
af:94:46:e0:f9:27:9a:f2:9e:d0:d1:45:d0:23:92:88:13:28:
0b:57:e5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:42:46 2025 by rpki-client