Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/4_QYaOpxA51Izgs0RBv1nlY-73c.roa
File: 4_QYaOpxA51Izgs0RBv1nlY-73c.roa (raw, json)
Hash identifier: 2JoESxGOg93kjqAipl42ijxyO1vCth2n14P6FYU52ck=
Subject key identifier: E3:F4:18:68:EA:71:03:9D:48:CE:0B:34:44:1B:F5:9E:56:3E:EF:77
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1620
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/4_QYaOpxA51Izgs0RBv1nlY-73c.roa
Signing time: Thu 18 Apr 2024 23:23:26 +0000
ROA not before: Thu 18 Apr 2024 23:23:26 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5664 (0x1620)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 18 23:23:26 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E3F41868EA71039D48CE0B34441BF59E563EEF77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e0:b8:19:b5:49:18:95:2c:fc:07:19:91:c5:
03:a3:3b:b2:90:ae:07:84:2c:59:06:06:bf:41:3c:
91:6d:ed:b1:11:53:cc:69:b0:e8:cb:31:5f:b7:20:
cd:69:36:01:62:07:1a:74:ec:8b:dd:14:91:63:6b:
f7:37:9b:31:ff:61:8a:32:16:1f:4f:0e:a4:77:05:
77:76:a8:d1:98:52:46:10:dc:9a:45:8a:04:9f:2d:
01:1f:fa:9d:af:2f:65:a3:e5:75:57:ba:ed:1d:32:
bb:00:76:99:f9:c4:64:f7:d3:79:e0:04:83:8f:aa:
f7:3c:a0:c9:9e:92:9a:41:00:ae:8b:6d:25:70:cd:
b2:e8:3d:1e:94:7f:a3:d8:7a:48:a9:fe:3b:70:a2:
21:83:85:0e:bd:a5:5a:91:23:fa:be:7f:77:2c:91:
0d:3c:d4:2e:15:34:b5:29:79:11:8b:1b:46:fa:1f:
64:30:f2:dd:1a:11:4b:6f:87:e1:54:03:e6:06:3a:
7e:7e:76:31:fc:ef:f2:9f:ad:be:a5:3d:82:ca:04:
be:c4:39:a4:7d:a7:ce:6d:19:2c:6e:8f:e6:7b:6b:
3b:a5:e3:f5:f9:52:11:1d:54:d9:28:55:e9:5e:ee:
3e:fe:7b:b6:0c:32:8a:1f:92:36:b4:06:b0:e9:6c:
14:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F4:18:68:EA:71:03:9D:48:CE:0B:34:44:1B:F5:9E:56:3E:EF:77
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/4_QYaOpxA51Izgs0RBv1nlY-73c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ae:28:bd:e2:2b:05:55:81:67:b1:2c:8d:45:7a:42:e3:dc:47:
7e:b0:81:2c:e0:f8:7e:56:b7:a3:e7:fb:60:55:b8:d7:5b:a0:
57:f5:b9:8a:86:fa:ee:5a:a1:6a:4d:a4:a0:23:24:1a:11:e0:
84:82:d5:f3:be:eb:ba:27:3a:39:60:a4:95:9a:52:46:bb:96:
f1:80:93:d7:00:63:82:61:1a:8f:7d:af:c8:98:3f:9a:06:5f:
d4:22:ce:b1:11:6a:46:47:2c:b4:30:18:1a:1b:87:1f:6f:56:
8c:63:fe:2f:1d:40:00:8c:80:24:cc:17:8c:a4:1b:35:70:c2:
77:42:b9:ee:5b:00:35:17:90:a3:cf:17:79:21:a4:d4:80:37:
83:43:06:16:d4:d5:b0:fb:4c:6d:ac:09:d2:76:c4:a3:ae:ae:
45:06:df:92:88:60:f0:b7:11:56:a2:42:bb:6e:ed:d7:59:2d:
8f:9f:46:4b:84:40:69:9f:0b:07:7d:07:94:c0:dd:4d:07:28:
f0:1b:f7:66:33:4c:1e:d8:22:7e:e2:dc:1f:ec:c3:6e:37:3e:
5a:1e:93:1f:6d:9f:0d:55:5f:b1:26:da:21:ac:e7:94:b8:32:
36:32:05:55:f7:4f:a1:ce:44:dd:5c:24:12:57:c0:90:ed:e3:
c4:5d:f0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 01:06:30 2024 by rpki-client on console-ams.rpki-client.org