Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/37QqRKiWg5ORLq1JbpgkvvAT_UU.roa
File: 37QqRKiWg5ORLq1JbpgkvvAT_UU.roa (raw, json)
Hash identifier: ZNFmJWwPrYuck57UuqdvHH07Si02jekKaMQnPahGhDw=
Subject key identifier: DF:B4:2A:44:A8:96:83:93:91:2E:AD:49:6E:98:24:BE:F0:13:FD:45
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 18BA
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/37QqRKiWg5ORLq1JbpgkvvAT_UU.roa
Signing time: Thu 25 Apr 2024 21:54:35 +0000
ROA not before: Thu 25 Apr 2024 21:54:35 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6330 (0x18ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 25 21:54:35 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=DFB42A44A8968393912EAD496E9824BEF013FD45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f3:4d:7c:7b:dd:50:18:35:3d:0d:5c:03:e6:
e9:20:3c:2e:fe:cd:0e:e0:aa:4f:80:02:63:56:f4:
6d:ec:b3:30:6f:01:44:94:22:c0:a4:3b:1e:2f:c9:
68:21:da:46:df:47:32:43:11:c3:46:2e:7a:ad:08:
ef:02:f1:d0:de:a1:a5:34:61:57:9b:f8:11:98:e6:
40:9e:52:dd:28:13:22:e9:cd:f0:a3:41:b0:aa:b9:
dd:13:ab:00:82:2a:0e:8b:83:b6:76:d3:c3:0f:ed:
3c:a4:e6:a6:fe:57:39:44:06:8b:87:af:e3:1f:6d:
b0:75:f9:5f:ba:8a:0a:68:b4:38:b0:56:44:7f:a0:
31:d7:85:cc:4f:56:a5:40:b0:2f:c7:dc:5b:eb:37:
94:c3:29:38:42:26:5a:19:8f:22:22:2a:e1:68:88:
37:8a:13:a9:0e:75:79:33:ac:ea:e0:65:e0:8f:5c:
43:0b:59:21:c1:05:32:d2:f6:7a:8d:db:37:7c:eb:
c9:84:8c:95:9b:9d:01:8f:0f:f9:66:1e:db:4a:5d:
87:25:04:8c:53:3d:00:a8:2c:ab:9d:fa:57:23:8e:
b9:ee:f0:70:38:e9:b7:9c:15:fa:2f:b2:7a:59:47:
0e:7b:c5:bf:f8:4e:6d:3e:76:bf:32:d1:61:c9:d5:
fb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B4:2A:44:A8:96:83:93:91:2E:AD:49:6E:98:24:BE:F0:13:FD:45
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/37QqRKiWg5ORLq1JbpgkvvAT_UU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6a:65:91:25:71:4c:73:99:30:1b:0c:96:c6:b4:29:8c:ba:05:
94:c2:45:df:41:c2:3e:c2:b8:f4:73:28:94:2d:b0:b3:7f:94:
f4:ab:40:35:07:a0:9c:07:8c:22:b7:0f:23:ba:f1:54:08:fd:
1d:d4:67:bf:0d:e2:5c:82:06:41:32:ce:af:a2:48:44:ba:88:
63:83:ed:f9:6a:91:39:13:b8:cd:ba:e1:4f:a8:74:43:de:6e:
ed:0d:0d:d4:d2:58:bd:b6:27:be:52:56:50:d7:05:73:3f:7b:
eb:f9:1f:89:ed:aa:dd:7e:bf:53:91:37:46:1e:9c:7f:b6:4f:
71:d7:dd:9e:dc:ec:12:3f:2c:6b:e8:6a:7f:ba:4a:2f:1a:b5:
cd:37:58:77:e8:0a:59:d1:90:8e:3a:4c:80:62:85:37:7e:e6:
11:5f:af:d9:35:f8:52:7b:f4:e0:51:93:ed:dc:96:d8:48:97:
15:b3:50:12:52:1e:cd:f9:60:b3:f2:f6:36:d1:4a:8c:6a:92:
fc:79:23:88:70:84:de:75:86:4e:ae:9c:42:3b:fb:7a:04:7d:
4b:72:cb:a6:d7:d2:10:66:85:5e:42:b2:37:8e:9b:6b:7e:48:
88:da:f7:d4:78:5e:b3:35:c8:2d:e7:18:f4:a6:f6:97:a4:45:
74:f2:0b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:47:03 2024 by rpki-client on console-fra.rpki-client.org