Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E2E0/B3E815DC9E4611E588D46016C4F9AE02/12360FCE1CAF11EEAEE7031EC4F9AE02.roa
File: 12360FCE1CAF11EEAEE7031EC4F9AE02.roa (raw, json)
Hash identifier: etD6tMzcNs4IruITR5ecY44Kr/F2W9cxVSAHdLPBO5A=
Subject key identifier: 58:83:71:98:B9:9F:C0:C4:5E:8B:7C:AA:92:DA:3C:99:89:1F:25:14
Certificate issuer: /CN=A911E2E0/serialNumber=ED68CA6A2D12A88CC7D296A2BC2BF1519A0B5FF3
Certificate serial: 2169
Authority key identifier: ED:68:CA:6A:2D:12:A8:8C:C7:D2:96:A2:BC:2B:F1:51:9A:0B:5F:F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7WjKai0SqIzH0paivCvxUZoLX_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E2E0/B3E815DC9E4611E588D46016C4F9AE02/12360FCE1CAF11EEAEE7031EC4F9AE02.roa
Signing time: Sat 08 Jul 2023 16:12:26 +0000
ROA not before: Sat 08 Jul 2023 16:12:26 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 139285
IP address blocks: 103.120.120.0/22 maxlen: 22
103.120.120.0/23 maxlen: 23
103.120.120.0/24 maxlen: 24
103.120.121.0/24 maxlen: 24
103.120.122.0/23 maxlen: 23
103.120.122.0/24 maxlen: 24
103.120.123.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8553 (0x2169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E2E0/serialNumber=ED68CA6A2D12A88CC7D296A2BC2BF1519A0B5FF3
Validity
Not Before: Jul 8 16:12:26 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64a98aea-a36d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c7:fc:57:f9:06:fe:b5:2a:29:ea:35:02:cd:
85:a6:16:09:b1:f7:7c:55:8c:6b:a8:b6:fb:ed:d2:
22:96:eb:d2:b4:99:9a:d3:20:bd:1b:35:83:2a:35:
16:89:56:50:97:7c:51:14:9c:dd:1a:9d:23:11:46:
a6:ed:c6:4e:16:69:3e:41:78:1f:3d:a5:51:47:23:
83:5e:65:79:0e:dc:b3:0c:68:a8:0f:15:b9:b2:f5:
76:52:3e:63:aa:e7:5f:6e:04:a1:81:49:51:13:07:
ec:d9:fd:c1:ae:d7:0d:20:7b:12:ad:b9:49:24:65:
59:61:67:58:9b:8c:c5:c5:97:91:b1:54:3f:ad:b0:
ba:bf:50:87:37:3c:a1:41:29:b6:16:09:56:aa:25:
79:7b:4d:b4:90:5e:82:bd:4a:bc:1a:04:c2:ff:9c:
9a:4a:e0:d9:26:9e:60:3e:43:89:89:77:e2:80:6e:
ee:a6:49:15:ba:77:a7:05:cb:61:4a:36:a4:8b:98:
ab:5c:e2:c9:7d:89:fa:1a:cf:b5:ed:dd:bf:99:d0:
e5:24:90:c4:de:19:82:ef:a1:b4:a1:3f:42:0d:8b:
51:a7:22:2c:e7:ea:d8:67:9e:b1:10:97:a7:89:b2:
1a:10:38:ac:69:8b:5d:dd:e8:ab:34:d1:31:e7:3f:
3b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:83:71:98:B9:9F:C0:C4:5E:8B:7C:AA:92:DA:3C:99:89:1F:25:14
X509v3 Authority Key Identifier:
keyid:ED:68:CA:6A:2D:12:A8:8C:C7:D2:96:A2:BC:2B:F1:51:9A:0B:5F:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E2E0/B3E815DC9E4611E588D46016C4F9AE02/7WjKai0SqIzH0paivCvxUZoLX_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7WjKai0SqIzH0paivCvxUZoLX_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E2E0/B3E815DC9E4611E588D46016C4F9AE02/12360FCE1CAF11EEAEE7031EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.120.120.0/22
Signature Algorithm: sha256WithRSAEncryption
92:1e:7e:8b:de:ec:3c:d8:5e:c3:49:c5:e1:40:8c:d0:d5:09:
c0:41:a3:e5:72:9e:b8:c3:b9:fd:2b:46:df:8c:1e:b6:c0:ca:
c1:34:86:59:c6:8e:cc:c9:bd:4b:60:75:21:15:99:f1:58:56:
69:57:cb:41:cc:00:5c:f0:fa:23:e9:12:2e:0e:c0:4d:97:b0:
07:16:7b:e6:16:76:9d:8a:ce:63:ec:f1:b7:39:67:02:72:69:
d9:55:d0:39:cf:92:3c:46:7d:55:d2:af:53:e3:b3:43:08:45:
d1:8e:86:85:40:66:9b:24:da:af:30:40:54:cc:04:6b:a2:a3:
ea:44:ee:82:74:63:1b:1d:5f:cd:08:be:35:84:91:5f:dc:a3:
b6:9f:7e:d1:9a:49:45:29:c7:c4:ae:24:ce:2a:54:8b:76:53:
eb:fa:a3:8e:08:20:47:02:49:8a:cd:f2:90:2d:a7:4e:71:49:
09:d7:c0:c1:25:de:af:92:96:55:9b:0e:e3:fb:83:45:b1:ec:
24:e7:74:c0:3d:97:b0:14:1d:23:29:8c:96:b8:81:90:b5:87:
59:5b:53:8a:d1:69:e3:09:cb:6f:23:e8:8e:47:de:ab:65:02:
b5:9a:b0:61:36:31:55:7f:5a:12:1e:3d:29:0f:e1:80:b7:40:
19:10:8b:e1
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICIWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUUyRTAxMTAvBgNVBAUTKEVENjhDQTZBMkQxMkE4OENDN0QyOTZBMkJDMkJGMTUx
OUEwQjVGRjMwHhcNMjMwNzA4MTYxMjI2WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGE5OGFlYS1hMzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmcf8V/kG/rUqKeo1As2FphYJsfd8VYxrqLb77dIiluvStJma0yC9GzWDKjUW
iVZQl3xRFJzdGp0jEUam7cZOFmk+QXgfPaVRRyODXmV5DtyzDGioDxW5svV2Uj5j
qudfbgShgUlREwfs2f3BrtcNIHsSrblJJGVZYWdYm4zFxZeRsVQ/rbC6v1CHNzyh
QSm2FglWqiV5e020kF6CvUq8GgTC/5yaSuDZJp5gPkOJiXfigG7upkkVunenBcth
Sjaki5irXOLJfYn6Gs+17d2/mdDlJJDE3hmC76G0oT9CDYtRpyIs5+rYZ56xEJen
ibIaEDisaYtd3eirNNEx5z87uQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFiDcZi5
n8DEXot8qpLaPJmJHyUUMB8GA1UdIwQYMBaAFO1oymotEqiMx9KWorwr8VGaC1/z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTJFMC9CM0U4MTVEQzlF
NDYxMUU1ODhENDYwMTZDNEY5QUUwMi83V2pLYWkwU3FJekgwcGFpdkN2eFVab0xY
X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdXakthaTBTcUl6SDBwYWl2Q3Z4VVpvTFhfTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUUyRTAvQjNFODE1REM5RTQ2MTFFNTg4RDQ2MDE2QzRGOUFFMDIvMTIzNjBGQ0Ux
Q0FGMTFFRUFFRTcwMzFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJneHgwDQYJKoZIhvcNAQELBQADggEBAJIefove7DzYXsNJ
xeFAjNDVCcBBo+VynrjDuf0rRt+MHrbAysE0hlnGjszJvUtgdSEVmfFYVmlXy0HM
AFzw+iPpEi4OwE2XsAcWe+YWdp2KzmPs8bc5ZwJyadlV0DnPkjxGfVXSr1Pjs0MI
RdGOhoVAZpsk2q8wQFTMBGuio+pE7oJ0YxsdX80IvjWEkV/co7afftGaSUUpx8Su
JM4qVIt2U+v6o44IIEcCSYrN8pAtp05xSQnXwMEl3q+SllWbDuP7g0Wx7CTndMA9
l7AUHSMpjJa4gZC1h1lbU4rRaeMJy28j6I5H3qtlArWasGE2MVV/WhIePSkP4YC3
QBkQi+E=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:47 2024 by rpki-client on console-ams.rpki-client.org