Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/6A53487C467311EAAF14DD62C4F9AE02.roa
File: 6A53487C467311EAAF14DD62C4F9AE02.roa (raw, json)
Hash identifier: bvCxSuM7fbfPF9jSfiqcGQWYFwvvs2r5AUFjgd1VoI0=
Subject key identifier: 08:89:16:AC:BB:AA:30:D4:4C:51:9D:D7:B4:87:87:91:FB:5A:17:40
Certificate issuer: /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
Certificate serial: 09CC
Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/6A53487C467311EAAF14DD62C4F9AE02.roa
Signing time: Wed 02 Aug 2023 20:17:58 +0000
ROA not before: Wed 02 Aug 2023 20:17:58 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 3491
IP address blocks: 116.66.208.0/20 maxlen: 20
116.66.210.0/23 maxlen: 24
116.66.212.0/22 maxlen: 22
116.66.216.0/22 maxlen: 22
116.66.217.0/24 maxlen: 24
116.66.220.0/22 maxlen: 22
203.91.128.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2508 (0x9cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9, serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
Validity
Not Before: Aug 2 20:17:58 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64cab9f6-486a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:06:0a:38:85:90:0f:c7:29:9f:50:33:e9:1c:
a1:0c:e7:0a:08:8b:17:65:d3:4a:27:fd:dd:81:3f:
93:eb:93:23:26:e9:bf:22:e3:e3:42:f9:e8:2c:99:
fd:66:ed:7f:34:ed:1a:f7:9f:70:8b:9a:86:27:2e:
e4:60:08:b3:79:cb:f2:e2:6d:7a:bd:a9:46:1a:eb:
7d:90:f8:4d:65:11:b8:d9:76:c6:50:36:ee:a1:2f:
6c:8c:64:c8:2f:b2:eb:0f:3b:c1:9a:5e:d2:b7:1b:
9c:e3:36:45:d9:28:0b:4b:13:e3:3b:44:03:86:d7:
a9:c5:62:d4:35:c3:3e:b9:73:ca:7f:ec:1a:0d:8e:
68:54:65:e6:37:f4:6e:98:4c:a9:18:53:d6:79:58:
a7:ac:f0:20:4f:c6:3f:f1:3c:ee:c4:5d:ee:d3:52:
dd:6c:6f:8a:7c:62:db:40:6c:de:1c:71:b6:6b:ca:
5c:2b:26:cd:3f:83:70:9f:97:cf:d2:d3:be:e3:78:
50:be:ba:dd:95:61:4f:9b:4d:3d:95:fc:64:d1:ae:
1a:f7:ca:70:7f:b0:ea:d8:ff:75:9c:15:95:64:d8:
c5:6d:72:83:4d:de:47:a9:6d:d4:ff:dd:aa:d9:c3:
61:35:cc:88:7c:9c:93:a4:bd:20:7d:f6:d5:4d:c3:
77:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:89:16:AC:BB:AA:30:D4:4C:51:9D:D7:B4:87:87:91:FB:5A:17:40
X509v3 Authority Key Identifier:
keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/6A53487C467311EAAF14DD62C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.66.208.0/20
203.91.128.0/19
Signature Algorithm: sha256WithRSAEncryption
19:60:1d:f6:b7:93:43:60:fb:fe:12:99:ee:de:a2:8e:37:29:
f4:01:7f:de:17:80:ae:65:1a:8b:fc:51:63:33:ee:84:e2:ad:
73:23:74:b9:73:66:5a:a5:ec:77:a6:81:30:c4:3e:f4:b9:8e:
a4:5f:da:32:8b:95:f6:26:32:47:c5:57:b7:d1:37:f5:81:2a:
2a:9e:46:85:51:ec:e3:9f:da:dd:1f:04:9e:a5:a3:09:ba:9f:
e9:0f:b9:ad:98:f3:a2:b7:02:69:1c:38:2b:22:64:19:6a:3d:
3d:c7:de:41:16:2e:28:a2:4a:20:28:2a:49:cc:77:ae:27:68:
bb:48:e4:1a:65:a5:0e:97:19:cd:fc:51:b9:89:87:da:18:90:
1b:5c:3b:b1:d6:83:86:d7:e5:d0:d2:97:1d:f6:02:a2:a8:d2:
dc:c7:23:17:7a:2b:6c:e7:27:e6:00:94:f8:d4:3a:f7:e9:0b:
b2:87:bb:77:16:eb:84:56:b7:01:5d:43:2f:3b:6f:a6:c4:1b:
7b:7f:40:09:f0:c5:ea:15:84:4b:09:05:9f:a4:1b:40:cd:d9:
a4:d7:d6:a9:7d:9e:e5:c1:fc:f8:e1:f4:00:a1:b9:3c:6d:ac:
05:c3:8e:0d:8c:54:e9:33:d0:66:6d:3e:6b:d3:f9:b6:a3:03:
87:e3:13:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 01:24:16 2025 by rpki-client