Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/40tl9CaL11NyoxSsFZsfQVOPj64.roa
File: 40tl9CaL11NyoxSsFZsfQVOPj64.roa (raw, json)
Hash identifier: EddK4W7ncOX0zcjs5dSOw12ZXizqhSf0H3P4913WMOE=
Subject key identifier: E3:4B:65:F4:26:8B:D7:53:72:A3:14:AC:15:9B:1F:41:53:8F:8F:AE
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 163A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/40tl9CaL11NyoxSsFZsfQVOPj64.roa
Signing time: Fri 19 Apr 2024 05:53:31 +0000
ROA not before: Fri 19 Apr 2024 05:53:31 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5690 (0x163a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 19 05:53:31 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E34B65F4268BD75372A314AC159B1F41538F8FAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8a:e6:fa:ed:53:e0:fd:6d:e2:b7:0d:5b:6a:
60:d4:65:24:6c:ed:db:5d:59:5b:c8:f1:2c:15:2d:
f5:3d:d2:13:1b:d0:9d:ba:b3:39:b1:7e:40:d2:a8:
99:57:e9:15:99:79:d7:4e:da:65:b9:d4:3e:f6:24:
7a:48:a8:d2:31:27:85:6b:a3:97:fb:85:24:c2:ed:
a4:53:9c:df:18:23:51:a9:cb:dc:98:b7:d4:2c:66:
db:58:30:90:ac:0e:32:86:96:77:c8:89:5e:66:4a:
e6:c0:c3:4f:03:e9:a4:75:27:3f:54:b8:a2:9d:0a:
bb:dc:50:34:0a:e1:5b:01:44:ac:ee:8b:c5:26:4c:
06:45:a9:99:e1:ff:68:ee:84:e8:2a:d7:91:cb:53:
80:09:6f:69:08:16:ae:d8:ed:f6:85:68:5f:62:02:
84:ce:7a:2c:1f:04:aa:db:dd:be:d0:d1:04:47:8b:
a2:b7:b6:64:bc:ff:40:97:5a:ee:8f:ab:e3:b6:59:
d0:ff:fd:6f:20:e3:b1:d2:68:f2:53:13:25:65:4b:
5f:68:9e:25:2b:ca:9a:fa:de:d0:51:65:82:48:08:
71:ff:a1:5f:be:ce:7c:22:66:4b:6e:f0:c0:f2:1f:
04:28:2e:ff:65:5f:75:ca:7d:fa:f4:5c:22:2f:6d:
db:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4B:65:F4:26:8B:D7:53:72:A3:14:AC:15:9B:1F:41:53:8F:8F:AE
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/40tl9CaL11NyoxSsFZsfQVOPj64.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6e:7b:db:8e:77:d3:ec:69:6a:ef:e7:35:2b:e5:9f:96:23:ab:
86:15:f7:e0:e4:a7:fd:09:aa:e0:f7:ca:34:00:1a:32:1e:41:
c3:60:ae:e8:b9:2c:ac:aa:f7:87:80:04:fa:b7:b5:a5:16:03:
6c:cc:bb:b5:45:39:fa:a0:c1:f3:78:bf:b0:57:06:3b:55:4e:
cf:7f:ee:1b:c9:8b:ef:31:8b:81:a5:a4:31:d4:27:b7:b8:9a:
7e:db:9b:92:13:97:c0:e5:da:2f:c5:8b:03:57:f4:c7:67:13:
55:a1:01:d2:64:3c:8a:6f:f1:1d:ab:16:82:d6:96:21:07:fb:
c8:3f:ab:d6:a7:80:ea:0b:c9:23:e9:f5:bd:3f:96:07:d3:11:
1e:f3:3e:58:27:bc:80:85:cb:a1:af:f7:4e:48:cd:70:14:98:
cf:f7:6d:62:96:db:72:50:14:8c:92:d1:c4:c7:8f:23:00:e3:
bf:97:34:2f:6c:8d:dd:1a:c9:a7:14:00:cb:14:92:5a:db:5c:
d4:ec:d5:c5:4b:54:e6:92:91:e4:9a:7c:8e:60:08:a4:8c:e2:
ab:55:c7:6d:b5:65:2d:c3:ec:b5:01:2e:e8:15:73:ee:35:0e:
46:81:cc:af:f4:ee:c5:06:7e:17:98:05:78:4d:bc:4a:82:53:
87:33:e6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 09:42:50 2024 by rpki-client on console-ams.rpki-client.org