Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/5uD2cxZMmeQ6bETZUFyiGXbOvRc.roa
File: 5uD2cxZMmeQ6bETZUFyiGXbOvRc.roa (raw, json)
Hash identifier: WjfFJL2ZvRrlMteCOciV8Tq2uLcYOD+L0OVjtnjJxXM=
Subject key identifier: E6:E0:F6:73:16:4C:99:E4:3A:6C:44:D9:50:5C:A2:19:76:CE:BD:17
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0E50
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/5uD2cxZMmeQ6bETZUFyiGXbOvRc.roa
Signing time: Fri 29 Mar 2024 03:22:27 +0000
ROA not before: Fri 29 Mar 2024 03:22:27 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3664 (0xe50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 29 03:22:27 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E6E0F673164C99E43A6C44D9505CA21976CEBD17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f7:a3:b1:9a:42:38:cf:43:87:a6:dc:11:f2:
e1:3d:64:77:ba:51:43:23:77:8a:ca:66:5c:6a:6d:
7f:b8:fd:e7:9f:d0:fe:d5:af:d5:ff:04:87:39:5b:
5a:3e:94:30:bc:1f:14:39:65:40:64:a5:db:f8:5b:
09:8b:c3:bd:fc:04:2a:6f:2c:24:2d:ac:7c:b7:dd:
9d:22:8f:04:32:7a:e3:eb:3c:5a:8e:a4:a3:e3:ee:
56:85:86:02:39:d8:1b:b6:41:48:7f:c9:46:c9:40:
8a:e1:87:74:7e:25:3b:a1:a6:98:ff:c6:d0:5a:53:
98:ed:07:25:b4:b4:bb:87:33:40:bb:13:c3:5d:77:
a6:06:8b:ab:c4:2a:7f:f0:a2:70:93:c6:a2:8a:25:
a6:68:ce:f9:55:e3:71:26:52:91:73:76:52:e0:9b:
65:98:18:be:db:32:79:01:0b:06:e1:e7:dd:a3:b3:
b2:d0:0a:ba:c2:9f:5c:cc:33:14:18:e4:25:34:05:
44:a0:ad:51:b9:fb:93:56:f8:b1:40:ed:e8:a2:10:
04:e3:dd:3e:1b:44:f6:39:54:5b:e3:5b:bd:60:f1:
9c:82:da:b2:e9:1f:63:45:b1:85:d4:c0:96:55:2e:
55:e7:8d:f2:9f:e7:11:9f:57:91:29:35:76:5f:61:
04:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E0:F6:73:16:4C:99:E4:3A:6C:44:D9:50:5C:A2:19:76:CE:BD:17
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/5uD2cxZMmeQ6bETZUFyiGXbOvRc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7f:b3:0c:c2:66:6e:84:04:c1:4f:23:3e:c8:aa:7e:fe:ee:91:
b1:12:44:58:bd:48:c4:bd:cd:0a:b0:92:aa:25:f6:30:a9:e9:
3b:f2:e1:b1:dc:a1:59:e9:18:56:d5:60:95:1b:60:6a:2b:08:
8b:fe:97:26:bb:26:9d:53:18:cf:69:a4:ee:5f:a9:d1:2e:49:
7d:9f:74:60:06:e8:5f:8a:0b:01:9e:99:00:43:37:75:60:12:
75:63:e9:de:d7:2f:ff:40:59:53:50:6a:42:07:d3:1d:f7:30:
95:6a:a9:fc:af:83:3c:9c:1c:02:0e:f4:8b:55:3e:65:f8:b7:
eb:ed:ee:f9:4a:a1:1f:15:25:96:5b:0c:04:a4:38:ec:00:44:
f7:ce:96:08:82:a5:30:06:75:a0:74:39:c9:20:34:5c:f0:58:
85:48:eb:20:3f:07:6a:5d:db:83:1d:01:47:ca:ca:3c:25:2b:
1a:82:9b:e6:72:2d:66:cc:4f:89:04:1d:4e:b8:06:95:9c:3c:
53:58:cc:ae:ee:83:c9:e1:1b:4f:f0:6a:c5:c8:a3:ab:88:c7:
1e:ae:19:44:b6:cb:c8:43:d1:d7:a2:e3:82:79:60:9d:e9:6f:
be:9e:b9:dd:bb:af:db:06:d2:66:0b:f3:c7:ae:55:5e:8b:99:
12:84:1b:56
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDlAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDAzMjkw
MzIyMjdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEU2RTBGNjczMTY0Qzk5
RTQzQTZDNDREOTUwNUNBMjE5NzZDRUJEMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDB96OxmkI4z0OHptwR8uE9ZHe6UUMjd4rKZlxqbX+4/eef0P7V
r9X/BIc5W1o+lDC8HxQ5ZUBkpdv4WwmLw738BCpvLCQtrHy33Z0ijwQyeuPrPFqO
pKPj7laFhgI52Bu2QUh/yUbJQIrhh3R+JTuhppj/xtBaU5jtByW0tLuHM0C7E8Nd
d6YGi6vEKn/wonCTxqKKJaZozvlV43EmUpFzdlLgm2WYGL7bMnkBCwbh592js7LQ
CrrCn1zMMxQY5CU0BUSgrVG5+5NW+LFA7eiiEATj3T4bRPY5VFvjW71g8ZyC2rLp
H2NFsYXUwJZVLlXnjfKf5xGfV5EpNXZfYQRnAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU5uD2cxZMmeQ6bETZUFyiGXbOvRcwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzLzV1RDJjeFpNbWVRNmJF
VFpVRnlpR1hiT3ZSYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAf7MMwmZuhATBTyM+yKp+/u6RsRJEWL1I
xL3NCrCSqiX2MKnpO/LhsdyhWekYVtVglRtgaisIi/6XJrsmnVMYz2mk7l+p0S5J
fZ90YAboX4oLAZ6ZAEM3dWASdWPp3tcv/0BZU1BqQgfTHfcwlWqp/K+DPJwcAg70
i1U+Zfi36+3u+UqhHxUlllsMBKQ47ABE986WCIKlMAZ1oHQ5ySA0XPBYhUjrID8H
al3bgx0BR8rKPCUrGoKb5nItZsxPiQQdTrgGlZw8U1jMru6DyeEbT/Bqxcijq4jH
Hq4ZRLbLyEPR16Ljgnlgnelvvp653buv2wbSZgvzx65VXouZEoQbVg==
-----END CERTIFICATE-----
Generated at Fri Mar 29 05:06:55 2024 by rpki-client on console-ams.rpki-client.org