Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/9EE762148E7611ED8EB31B64C4F9AE02.roa
File: 9EE762148E7611ED8EB31B64C4F9AE02.roa (raw, json)
Hash identifier: F1TJh5DTQXhicypApyBmSEf6MzeqJUmX4heXeoJt2RU=
Subject key identifier: 73:CC:4B:62:A4:B8:71:0A:ED:D1:79:DB:A9:9F:43:AB:24:B7:01:3D
Certificate issuer: /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
Certificate serial: 2027
Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/9EE762148E7611ED8EB31B64C4F9AE02.roa
Signing time: Thu 02 Mar 2023 11:42:50 +0000
ROA not before: Thu 02 Mar 2023 11:42:50 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 134712
IP address blocks: 103.197.152.0/22 maxlen: 22
103.197.152.0/24 maxlen: 24
103.197.153.0/24 maxlen: 24
103.197.154.0/24 maxlen: 24
103.197.155.0/24 maxlen: 24
220.158.204.0/22 maxlen: 22
220.158.204.0/24 maxlen: 24
220.158.205.0/24 maxlen: 24
220.158.206.0/24 maxlen: 24
220.158.207.0/24 maxlen: 24
2405:d340::/32 maxlen: 32
2405:d340::/48 maxlen: 48
2405:d340:1::/48 maxlen: 48
2405:d340:2::/48 maxlen: 48
2405:d340:3::/48 maxlen: 48
2405:d340:4::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8231 (0x2027)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
Validity
Not Before: Mar 2 11:42:50 2023 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=64008bba-6d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:23:4d:ab:05:c4:d0:53:13:ad:d3:8d:75:79:
b7:fc:df:98:9b:58:68:14:4f:7d:a6:59:60:92:56:
79:37:4c:c3:0f:02:6e:5e:79:bd:e3:66:f0:f6:df:
8a:b1:bf:90:a9:fc:a9:44:5d:2d:49:dd:6a:e8:b7:
98:b1:5d:87:ea:d1:0a:95:8c:7d:90:50:d2:e8:4d:
9c:56:a9:27:69:1c:c6:b5:80:96:ae:4c:9b:c7:15:
80:52:fe:61:22:bb:30:2d:3c:b2:4b:9b:cf:bb:c5:
36:cb:cf:8c:41:d8:c5:05:90:a6:10:88:a9:39:8c:
97:24:2c:bd:7d:58:1d:1e:59:b3:98:83:dc:af:a8:
c1:db:34:5d:a5:da:b6:a9:1b:0f:d6:1e:ad:86:1f:
38:a9:e7:0c:07:84:e0:e9:21:95:f3:1c:da:64:79:
c6:0a:83:84:05:69:c5:0f:84:6d:56:ac:36:a9:0c:
69:72:0a:bf:a8:d3:8b:be:f2:a8:de:60:f4:97:b6:
80:4e:53:b4:13:b7:2b:9f:bc:18:27:4d:90:75:3d:
55:d6:b3:14:c4:9c:c5:89:78:0a:51:d3:b8:44:f7:
94:49:1e:89:27:62:5d:75:70:b2:54:a2:d8:ae:07:
65:fd:28:f7:0d:4a:79:44:24:14:38:9b:54:bb:99:
b1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CC:4B:62:A4:B8:71:0A:ED:D1:79:DB:A9:9F:43:AB:24:B7:01:3D
X509v3 Authority Key Identifier:
keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/9EE762148E7611ED8EB31B64C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.197.152.0/22
220.158.204.0/22
IPv6:
2405:d340::/32
Signature Algorithm: sha256WithRSAEncryption
6c:8f:22:df:47:f4:ba:de:7a:ae:1f:65:d5:74:c6:71:83:53:
bc:04:a6:9a:88:25:ff:c8:78:e7:ee:7d:20:29:65:66:07:43:
0a:4c:99:ef:8f:e7:82:06:7c:13:b4:83:1b:7e:4e:e2:80:8d:
02:7f:8d:9f:e3:bf:c4:39:dc:73:c4:cf:67:c1:2e:41:f5:82:
5c:06:01:e8:23:a6:57:e1:a8:88:3f:1a:c3:ea:24:af:07:f6:
7c:7e:23:b4:f8:b9:da:ac:1c:9d:55:18:d6:29:4e:39:87:91:
35:b6:11:13:db:98:7f:7c:d9:25:d3:2b:9b:48:6b:87:27:16:
13:8f:4d:fc:fc:13:a7:f3:d0:73:bf:a6:ea:56:96:37:8e:f1:
7f:72:a0:8f:71:96:30:04:de:72:18:75:36:93:9b:75:f3:5f:
1b:ed:70:07:f7:33:f3:07:8e:60:f4:0b:1a:3a:1c:8d:ae:53:
d6:e7:9f:c8:19:19:be:60:b8:b1:23:a3:4a:be:7e:0e:08:5c:
97:26:30:94:12:6c:7d:cb:13:b4:ec:88:61:da:ac:ea:26:3d:
be:60:2f:90:5c:87:65:0e:44:a3:36:cd:f7:c2:f6:5d:78:38:
1f:14:05:52:fb:78:30:ad:33:42:13:5c:25:a2:fb:7b:bb:75:
3e:39:a3:b2
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICICcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTQ4NDUxMTAvBgNVBAUTKDAxQTQxMkVGNDE2Qzg4NEY2RjYzN0YxQkRBODAwRUI2
RUY2N0I2RDYwHhcNMjMwMzAyMTE0MjUwWhcNMjQwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDAwOGJiYS02ZDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnCNNqwXE0FMTrdONdXm3/N+Ym1hoFE99pllgklZ5N0zDDwJuXnm942bw9t+K
sb+QqfypRF0tSd1q6LeYsV2H6tEKlYx9kFDS6E2cVqknaRzGtYCWrkybxxWAUv5h
IrswLTyyS5vPu8U2y8+MQdjFBZCmEIipOYyXJCy9fVgdHlmzmIPcr6jB2zRdpdq2
qRsP1h6thh84qecMB4Tg6SGV8xzaZHnGCoOEBWnFD4RtVqw2qQxpcgq/qNOLvvKo
3mD0l7aATlO0E7crn7wYJ02QdT1V1rMUxJzFiXgKUdO4RPeUSR6JJ2JddXCyVKLY
rgdl/Sj3DUp5RCQUOJtUu5mx5QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFHPMS2Kk
uHEK7dF526mfQ6sktwE9MB8GA1UdIwQYMBaAFAGkEu9BbIhPb2N/G9qADrbvZ7bW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDg0NS80MDAxNTNCNkQy
RUIxMUU1QjREMTVBNEVDNEY5QUUwMi9BYVFTNzBGc2lFOXZZMzhiMm9BT3R1OW50
dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FhUVM3MEZzaUU5dlkzOGIyb0FPdHU5bnR0WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTQ4NDUvNDAwMTUzQjZEMkVCMTFFNUI0RDE1QTRFQzRGOUFFMDIvOUVFNzYyMTQ4
RTc2MTFFRDhFQjMxQjY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E
JTAjMBIEAgABMAwDBAJnxZgDBALcnswwDQQCAAIwBwMFACQF00AwDQYJKoZIhvcN
AQELBQADggEBAGyPIt9H9Lreeq4fZdV0xnGDU7wEppqIJf/IeOfufSApZWYHQwpM
me+P54IGfBO0gxt+TuKAjQJ/jZ/jv8Q53HPEz2fBLkH1glwGAegjplfhqIg/GsPq
JK8H9nx+I7T4udqsHJ1VGNYpTjmHkTW2ERPbmH982SXTK5tIa4cnFhOPTfz8E6fz
0HO/pupWljeO8X9yoI9xljAE3nIYdTaTm3XzXxvtcAf3M/MHjmD0Cxo6HI2uU9bn
n8gZGb5guLEjo0q+fg4IXJcmMJQSbH3LE7TsiGHarOomPb5gL5Bch2UORKM2zffC
9l14OB8UBVL7eDCtM0ITXCWi+3u7dT45o7I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:32 2024 by rpki-client on console-ams.rpki-client.org