Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/71yUPcgCIocmOjWPHXt3ZTXXe6M.roa
File: 71yUPcgCIocmOjWPHXt3ZTXXe6M.roa (raw, json)
Hash identifier: PTzLoEG7m4varwW1Y5T1NnaupAR8nRSr9v6Itw2Js/o=
Subject key identifier: EF:5C:94:3D:C8:02:22:87:26:3A:35:8F:1D:7B:77:65:35:D7:7B:A3
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1424
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/71yUPcgCIocmOjWPHXt3ZTXXe6M.roa
Signing time: Sat 13 Apr 2024 16:23:14 +0000
ROA not before: Sat 13 Apr 2024 16:23:14 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5156 (0x1424)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 13 16:23:14 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EF5C943DC8022287263A358F1D7B776535D77BA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d9:19:cc:21:84:c0:e5:3d:9c:a0:bc:85:01:
c9:1e:0c:37:ea:7c:1a:2f:b0:11:e1:bd:47:1f:c9:
d9:b2:2f:90:c4:59:ec:e1:b6:54:bf:21:65:32:10:
b5:90:90:d2:00:7e:00:8e:07:70:94:36:48:72:09:
d5:6b:bc:67:23:d6:c4:c2:a1:17:10:d4:cc:a7:98:
e3:04:ff:b0:96:62:df:4a:ca:16:61:0a:9b:95:ae:
1e:ed:ae:db:03:b5:9f:d5:6c:17:b9:86:40:ef:3b:
01:11:90:e6:aa:c9:60:df:1f:75:9f:04:b4:73:17:
47:68:87:48:af:ea:ab:ce:1c:6a:b1:98:cc:ed:bb:
c1:6d:54:71:77:e3:53:34:2f:56:c4:30:80:53:17:
16:28:84:ee:39:59:1b:b4:eb:ad:2c:26:97:4a:4f:
6b:f2:86:1b:df:04:58:06:bf:f8:7a:1d:ad:cd:90:
26:c2:c5:9b:d8:61:a7:f3:c7:f6:5e:e2:ac:3d:21:
ea:d2:0f:e3:62:7b:a4:ea:ca:8c:49:4a:70:58:5e:
47:e1:5d:ec:f3:ff:62:e6:b0:d3:a4:f3:bb:5e:20:
4a:8e:6c:7d:bf:16:74:cd:75:0d:0e:c9:e3:fd:76:
01:66:47:a8:ef:41:14:5e:d2:c4:8c:f1:2b:a6:ca:
5a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5C:94:3D:C8:02:22:87:26:3A:35:8F:1D:7B:77:65:35:D7:7B:A3
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/71yUPcgCIocmOjWPHXt3ZTXXe6M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
da:f9:36:97:97:fd:e3:0b:9f:42:48:f1:ff:b9:3a:b1:26:2e:
c6:bd:bc:78:1e:c6:a9:7d:f4:0a:41:eb:0d:ce:ac:ba:bb:9f:
90:c5:46:c9:04:6b:7a:2d:75:10:44:86:90:c7:a6:25:2a:20:
3d:b7:bf:b5:84:99:5b:8e:f8:6e:a3:a8:92:c3:94:10:41:1c:
95:6e:f0:a8:8d:f2:92:08:8d:ae:fb:8f:c7:f8:eb:95:3c:40:
6a:e7:f4:83:93:d6:41:91:1e:d8:36:be:32:54:5d:49:ca:f6:
c9:bf:60:ff:79:bf:4b:f3:1e:3c:a4:2e:27:3a:a7:19:6a:4b:
7c:0e:3c:77:b4:03:5f:d0:4f:db:e3:a2:fb:ab:bf:b5:e9:1b:
b5:a5:94:23:bb:be:24:0a:92:42:1c:e5:6f:79:65:2d:96:96:
0b:16:41:67:d1:8d:38:4d:e4:7a:46:dc:6a:35:e1:1e:ad:0e:
68:00:68:aa:bc:0b:0c:f6:67:4f:68:93:ce:43:d6:3c:e7:c9:
e7:28:42:b0:ee:57:e1:d4:b9:ee:b1:14:93:66:ba:a0:3f:f3:
b6:8c:05:24:46:e7:ab:57:32:1a:9b:22:8a:e6:da:32:1a:42:
f1:b0:ce:79:67:b0:fb:bb:f9:c8:d6:16:f0:78:7e:de:2e:4a:
a8:9f:21:7c
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICFCQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MTMx
NjIzMTRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEVGNUM5NDNEQzgwMjIy
ODcyNjNBMzU4RjFEN0I3NzY1MzVENzdCQTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC22RnMIYTA5T2coLyFAckeDDfqfBovsBHhvUcfydmyL5DEWezh
tlS/IWUyELWQkNIAfgCOB3CUNkhyCdVrvGcj1sTCoRcQ1MynmOME/7CWYt9KyhZh
CpuVrh7trtsDtZ/VbBe5hkDvOwERkOaqyWDfH3WfBLRzF0doh0iv6qvOHGqxmMzt
u8FtVHF341M0L1bEMIBTFxYohO45WRu0660sJpdKT2vyhhvfBFgGv/h6Ha3NkCbC
xZvYYafzx/Ze4qw9IerSD+Nie6TqyoxJSnBYXkfhXezz/2LmsNOk87teIEqObH2/
FnTNdQ0OyeP9dgFmR6jvQRRe0sSM8SumylrtAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU71yUPcgCIocmOjWPHXt3ZTXXe6MwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzLzcxeVVQY2dDSW9jbU9q
V1BIWHQzWlRYWGU2TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEA2vk2l5f94wufQkjx/7k6sSYuxr28eB7G
qX30CkHrDc6surufkMVGyQRrei11EESGkMemJSogPbe/tYSZW474bqOoksOUEEEc
lW7wqI3ykgiNrvuPx/jrlTxAauf0g5PWQZEe2Da+MlRdScr2yb9g/3m/S/MePKQu
JzqnGWpLfA48d7QDX9BP2+Oi+6u/tekbtaWUI7u+JAqSQhzlb3llLZaWCxZBZ9GN
OE3kekbcajXhHq0OaABoqrwLDPZnT2iTzkPWPOfJ5yhCsO5X4dS57rEUk2a6oD/z
towFJEbnq1cyGpsiiubaMhpC8bDOeWew+7v5yNYW8Hh+3i5KqJ8hfA==
-----END CERTIFICATE-----
Generated at Sat Apr 13 18:11:38 2024 by rpki-client on console-fra.rpki-client.org