Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CE40/0042AD6A053211EA95776851C4F9AE02/964C5368DF3011EBB4DB844EC4F9AE02.roa
File: 964C5368DF3011EBB4DB844EC4F9AE02.roa (raw, json)
Hash identifier: hfLiBxfHsgVbINNJa0fff/g0p17CeaZ/JdAO9x4R+ZE=
Subject key identifier: A3:E3:5C:A0:74:B6:F8:82:8B:DA:C9:FC:6E:42:B3:43:E7:17:97:45
Certificate issuer: /CN=A911CE40/serialNumber=9CF5C275B7B3162D15714131E25493B0938DF6FC
Certificate serial: 0981
Authority key identifier: 9C:F5:C2:75:B7:B3:16:2D:15:71:41:31:E2:54:93:B0:93:8D:F6:FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPXCdbezFi0VcUEx4lSTsJON9vw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CE40/0042AD6A053211EA95776851C4F9AE02/964C5368DF3011EBB4DB844EC4F9AE02.roa
Signing time: Wed 25 May 2022 20:19:22 +0000
ROA not before: Wed 25 May 2022 20:19:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137531
IP address blocks: 103.112.60.0/23 maxlen: 24
2001:df6:fd80::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2433 (0x981)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CE40/serialNumber=9CF5C275B7B3162D15714131E25493B0938DF6FC
Validity
Not Before: May 25 20:19:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=628e8f49-2010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d2:fc:dd:2d:2f:80:7d:70:54:ab:1f:23:ad:
2a:fd:1a:09:0e:90:c1:b0:92:19:83:3f:ee:7e:a4:
48:02:5b:ae:7d:eb:d3:4d:62:3a:eb:5d:10:94:aa:
6e:6c:77:64:e0:78:46:2d:ed:08:38:76:87:f4:81:
63:b9:25:73:b4:46:fc:88:0f:f5:f5:fe:be:e9:ba:
b7:0d:9a:a9:f0:b9:63:10:5a:d9:87:a5:7a:9e:12:
89:7c:b1:c6:e6:b9:90:03:6f:b7:7a:23:0b:30:f8:
bf:81:4a:d0:e5:64:1f:4a:54:84:b0:ec:58:b1:12:
70:c8:c3:6b:9c:fc:9b:1f:48:02:33:6a:c0:93:1a:
10:9c:ff:80:dd:c8:06:f0:82:db:0c:d3:7c:32:a5:
0d:05:9c:09:00:ab:0f:0a:9a:4b:8c:8a:7f:d9:75:
1f:03:0a:8d:90:a5:d2:07:a8:5f:02:b3:5e:ca:bc:
09:ec:58:80:dd:25:26:85:02:83:c2:3f:56:a1:27:
57:59:dd:42:cc:e1:20:4b:3d:05:4d:38:e3:10:e3:
b8:9a:fe:25:07:8e:17:59:20:01:0e:2b:a7:3c:af:
40:b6:83:ff:f0:de:ac:7e:54:d2:7b:10:36:b9:70:
f3:a8:be:d1:f9:d7:29:f3:10:71:ea:c4:13:30:d6:
d1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E3:5C:A0:74:B6:F8:82:8B:DA:C9:FC:6E:42:B3:43:E7:17:97:45
X509v3 Authority Key Identifier:
keyid:9C:F5:C2:75:B7:B3:16:2D:15:71:41:31:E2:54:93:B0:93:8D:F6:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CE40/0042AD6A053211EA95776851C4F9AE02/nPXCdbezFi0VcUEx4lSTsJON9vw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPXCdbezFi0VcUEx4lSTsJON9vw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CE40/0042AD6A053211EA95776851C4F9AE02/964C5368DF3011EBB4DB844EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.112.60.0/23
IPv6:
2001:df6:fd80::/48
Signature Algorithm: sha256WithRSAEncryption
82:e1:c9:df:3b:18:13:94:ff:4d:e0:d6:2d:dc:ec:90:0b:a3:
ff:1d:fc:01:91:b2:96:5b:5a:ec:5f:ca:a4:d8:31:57:90:63:
a8:f8:28:8b:22:bd:6d:40:47:72:a2:ef:a5:b1:de:ab:a2:5f:
8e:15:66:54:2e:91:98:e0:6e:6e:0d:63:5b:5b:fc:d6:5b:d9:
a9:f6:dd:4b:fe:e1:e6:29:4a:3e:8d:68:6b:95:ef:00:91:bb:
76:1a:4c:9a:54:64:86:75:2c:d8:9f:76:37:aa:2a:c1:68:c4:
4d:af:2c:e3:61:9a:ca:a4:4f:8d:c7:43:16:b2:bd:93:35:82:
b9:b0:21:d8:38:17:46:5a:87:5c:1f:b1:a1:5a:b7:21:92:18:
46:67:3c:5f:e1:fb:31:00:8f:a3:da:46:e8:28:3e:2b:0a:09:
3a:bd:85:48:e4:6e:d8:e5:fc:e9:fd:bb:80:57:33:42:7e:e6:
9f:c0:6b:13:47:51:05:42:cb:a4:a4:79:45:c4:ee:f2:2c:43:
d6:fc:04:a4:4f:ae:e1:51:8c:25:c1:10:93:17:74:da:83:a2:
62:83:f1:8a:35:1d:da:78:53:23:d3:d4:4b:bc:db:b1:4b:82:
c1:aa:14:26:96:90:f1:88:22:ef:2f:c8:8e:ed:79:c7:95:2d:
4c:2e:71:0f
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICCYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUNFNDAxMTAvBgNVBAUTKDlDRjVDMjc1QjdCMzE2MkQxNTcxNDEzMUUyNTQ5M0Iw
OTM4REY2RkMwHhcNMjIwNTI1MjAxOTIyWhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjhlOGY0OS0yMDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvtL83S0vgH1wVKsfI60q/RoJDpDBsJIZgz/ufqRIAluufevTTWI6610QlKpu
bHdk4HhGLe0IOHaH9IFjuSVztEb8iA/19f6+6bq3DZqp8LljEFrZh6V6nhKJfLHG
5rmQA2+3eiMLMPi/gUrQ5WQfSlSEsOxYsRJwyMNrnPybH0gCM2rAkxoQnP+A3cgG
8ILbDNN8MqUNBZwJAKsPCppLjIp/2XUfAwqNkKXSB6hfArNeyrwJ7FiA3SUmhQKD
wj9WoSdXWd1CzOEgSz0FTTjjEOO4mv4lB44XWSABDiunPK9AtoP/8N6sflTSexA2
uXDzqL7R+dcp8xBx6sQTMNbRHwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKPjXKB0
tviCi9rJ/G5Cs0PnF5dFMB8GA1UdIwQYMBaAFJz1wnW3sxYtFXFBMeJUk7CTjfb8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0U0MC8wMDQyQUQ2QTA1
MzIxMUVBOTU3NzY4NTFDNEY5QUUwMi9uUFhDZGJlekZpMFZjVUV4NGxTVHNKT045
dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25QWENkYmV6RmkwVmNVRXg0bFNUc0pPTjl2dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUNFNDAvMDA0MkFENkEwNTMyMTFFQTk1Nzc2ODUxQzRGOUFFMDIvOTY0QzUzNjhE
RjMwMTFFQkI0REI4NDRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFncDwwDwQCAAIwCQMHACABDfb9gDANBgkqhkiG9w0BAQsF
AAOCAQEAguHJ3zsYE5T/TeDWLdzskAuj/x38AZGyllta7F/KpNgxV5BjqPgoiyK9
bUBHcqLvpbHeq6JfjhVmVC6RmOBubg1jW1v81lvZqfbdS/7h5ilKPo1oa5XvAJG7
dhpMmlRkhnUs2J92N6oqwWjETa8s42GayqRPjcdDFrK9kzWCubAh2DgXRlqHXB+x
oVq3IZIYRmc8X+H7MQCPo9pG6Cg+KwoJOr2FSORu2OX86f27gFczQn7mn8BrE0dR
BULLpKR5RcTu8ixD1vwEpE+u4VGMJcEQkxd02oOiYoPxijUd2nhTI9PUS7zbsUuC
waoUJpaQ8Ygi7y/Iju15x5UtTC5xDw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:47 2024 by rpki-client on console-ams.rpki-client.org