Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/2roEuM-srfvH7Vurrmy3Wf-47TY.roa
File: 2roEuM-srfvH7Vurrmy3Wf-47TY.roa (raw, json)
Hash identifier: KhdmF9Ry+0rLZG5RmnT0SPTvPFL87VbjGvRalIEA5/E=
Subject key identifier: DA:BA:04:B8:CF:AC:AD:FB:C7:ED:5B:AB:AE:6C:B7:59:FF:B8:ED:36
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 159E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/2roEuM-srfvH7Vurrmy3Wf-47TY.roa
Signing time: Wed 17 Apr 2024 14:53:23 +0000
ROA not before: Wed 17 Apr 2024 14:53:23 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5534 (0x159e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 17 14:53:23 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=DABA04B8CFACADFBC7ED5BABAE6CB759FFB8ED36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f0:1e:a7:93:b6:04:a3:2f:3b:d7:4d:50:5f:
9f:b2:13:b3:5f:44:0b:3c:49:59:52:dc:92:07:04:
53:8d:0f:6b:e1:93:21:ca:67:65:67:3f:7f:d2:4c:
cd:52:85:d3:e6:95:28:4b:7e:b4:90:71:9e:fb:96:
f6:b6:b5:c0:b2:13:3d:a9:e9:5a:30:8f:64:bd:47:
7a:8c:6b:62:da:27:bc:97:bc:e0:1a:e0:de:7f:97:
e9:79:a2:09:9a:d2:3b:ec:7e:4b:eb:c9:dd:ba:fa:
6e:bc:f2:4a:af:0e:e0:72:48:93:63:b9:93:8b:ba:
1a:8d:5b:6c:73:91:be:cd:eb:11:9e:55:2e:e3:59:
ef:88:89:8b:4c:54:02:12:61:bd:c7:60:33:f2:7f:
2d:f0:e9:a9:3f:de:91:aa:14:6c:a4:87:7d:85:40:
2f:26:e4:24:f1:f0:e8:69:7b:92:95:7d:ac:22:6e:
30:db:73:4c:23:fd:54:46:40:ef:5b:e2:9d:9c:d1:
b3:1a:be:ac:a6:08:b7:f3:37:21:dc:83:f2:0d:a9:
8c:15:2a:17:49:2d:a1:08:5c:bd:74:06:d8:44:1f:
c9:55:77:8b:84:01:5c:60:13:49:56:cd:db:99:e3:
55:ea:89:89:46:0e:60:a0:40:af:c4:34:78:c6:d8:
96:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BA:04:B8:CF:AC:AD:FB:C7:ED:5B:AB:AE:6C:B7:59:FF:B8:ED:36
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/2roEuM-srfvH7Vurrmy3Wf-47TY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
01:46:69:ae:1f:56:13:e0:26:ab:08:e2:60:fb:b7:1a:7c:dd:
11:8a:43:5c:65:9e:d0:ff:5a:6e:cf:9b:21:73:cc:ea:65:0c:
b3:ab:97:78:94:ad:33:fb:4d:da:f2:e4:17:44:27:ee:54:95:
2b:95:63:b7:8c:ae:e7:0a:c3:22:d2:48:05:1b:b0:ff:6b:0d:
f5:b6:f7:a5:32:de:93:a0:ef:7e:1e:d7:15:b0:07:9e:2a:80:
6f:f2:01:8e:2b:90:37:2c:fb:7d:c6:c5:50:d3:5d:fe:1a:42:
14:f1:32:97:0a:04:e1:f2:b8:a6:68:72:b0:6b:a4:35:85:e4:
46:e3:8a:13:78:fc:05:19:eb:71:fc:8c:e5:e5:f6:b7:7a:34:
d1:25:c3:3c:ee:19:26:53:06:05:76:0f:77:c4:96:ab:2e:dc:
99:74:94:7b:ab:27:15:e7:fb:55:a0:3f:1e:07:69:26:87:7e:
c5:f4:2b:66:58:51:3c:af:b8:b8:57:35:93:a5:7e:74:0a:f7:
5d:b6:f2:1f:90:80:56:85:4d:95:62:e7:7e:e1:2b:53:f4:ac:
3d:82:67:61:87:52:17:fd:f8:b0:cc:7c:9a:64:f5:72:51:ed:
54:79:fd:ae:c2:db:61:26:e3:dd:cb:8a:42:54:9a:c7:60:9d:
be:47:d8:63
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICFZ4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MTcx
NDUzMjNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKERBQkEwNEI4Q0ZBQ0FE
RkJDN0VENUJBQkFFNkNCNzU5RkZCOEVEMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC58B6nk7YEoy87101QX5+yE7NfRAs8SVlS3JIHBFOND2vhkyHK
Z2VnP3/STM1ShdPmlShLfrSQcZ77lva2tcCyEz2p6Vowj2S9R3qMa2LaJ7yXvOAa
4N5/l+l5ogma0jvsfkvryd26+m688kqvDuBySJNjuZOLuhqNW2xzkb7N6xGeVS7j
We+IiYtMVAISYb3HYDPyfy3w6ak/3pGqFGykh32FQC8m5CTx8Ohpe5KVfawibjDb
c0wj/VRGQO9b4p2c0bMavqymCLfzNyHcg/INqYwVKhdJLaEIXL10BthEH8lVd4uE
AVxgE0lWzduZ41XqiYlGDmCgQK/ENHjG2JbdAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU2roEuM+srfvH7Vurrmy3Wf+47TYwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzLzJyb0V1TS1zcmZ2SDdW
dXJybXkzV2YtNDdUWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAAUZprh9WE+AmqwjiYPu3GnzdEYpDXGWe
0P9abs+bIXPM6mUMs6uXeJStM/tN2vLkF0Qn7lSVK5Vjt4yu5wrDItJIBRuw/2sN
9bb3pTLek6Dvfh7XFbAHniqAb/IBjiuQNyz7fcbFUNNd/hpCFPEylwoE4fK4pmhy
sGukNYXkRuOKE3j8BRnrcfyM5eX2t3o00SXDPO4ZJlMGBXYPd8SWqy7cmXSUe6sn
Fef7VaA/HgdpJod+xfQrZlhRPK+4uFc1k6V+dAr3XbbyH5CAVoVNlWLnfuErU/Ss
PYJnYYdSF/34sMx8mmT1clHtVHn9rsLbYSbj3cuKQlSax2CdvkfYYw==
-----END CERTIFICATE-----
Generated at Wed Apr 17 18:55:19 2024 by rpki-client on console-fra.rpki-client.org