Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/75tKZfU2AVqgd8RuFjYLs40P3pA.roa
File: 75tKZfU2AVqgd8RuFjYLs40P3pA.roa (raw, json)
Hash identifier: SHDAVOWkY/3FINkCF4TqJjibWdHWHYR18ZQ3hsoKU3g=
Subject key identifier: EF:9B:4A:65:F5:36:01:5A:A0:77:C4:6E:16:36:0B:B3:8D:0F:DE:90
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 13D0
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/75tKZfU2AVqgd8RuFjYLs40P3pA.roa
Signing time: Fri 12 Apr 2024 19:23:13 +0000
ROA not before: Fri 12 Apr 2024 19:23:13 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5072 (0x13d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 12 19:23:13 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EF9B4A65F536015AA077C46E16360BB38D0FDE90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:28:3c:82:ae:d5:3c:b7:aa:93:87:ab:12:03:
9f:fd:6d:8f:c8:e6:bc:d5:ad:69:50:42:3e:31:2d:
a5:56:ae:c1:5c:31:f8:86:98:da:b9:18:21:17:9a:
9b:d6:a1:83:b3:27:58:07:b0:79:3c:36:df:13:ba:
8d:80:79:08:b8:c9:a4:8b:bd:46:98:fb:53:d0:78:
28:c2:ed:e3:8e:be:c9:e9:92:81:47:e1:57:c1:ff:
a4:a4:89:d5:55:fe:36:b1:c0:81:67:c5:e6:f8:39:
d5:3b:dc:de:47:b8:3e:72:59:c0:a5:9a:f3:9a:64:
72:8e:d9:ae:5d:74:d0:f6:bc:66:21:90:f3:50:4d:
8e:11:56:08:9b:f2:f9:0b:50:d5:de:44:c1:8f:92:
f2:ca:26:7b:34:81:69:f7:bf:6c:5e:90:67:65:71:
d0:e2:86:b4:8c:ce:f0:84:03:b0:84:60:fd:4f:ac:
13:f6:52:5d:be:f3:23:23:b3:f0:1d:61:89:f4:94:
c6:9c:b2:9f:71:ac:8d:4d:9c:b0:52:bb:69:03:36:
38:d2:5d:1b:1e:1b:c2:38:5d:9e:c8:c3:c8:1b:1c:
0f:63:b2:cb:8e:71:86:4e:d4:74:3a:5c:72:58:6b:
a5:52:c1:67:a9:93:ac:59:07:f5:00:ae:7c:0d:0f:
6a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9B:4A:65:F5:36:01:5A:A0:77:C4:6E:16:36:0B:B3:8D:0F:DE:90
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/75tKZfU2AVqgd8RuFjYLs40P3pA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a2:86:f7:45:f2:c2:be:5d:10:21:3c:97:00:fe:a9:7c:62:4c:
7e:08:44:4c:80:68:fa:6e:d1:e5:5d:1b:d1:13:84:5f:a3:dd:
54:14:2b:c0:07:1c:5e:56:8c:37:27:3e:19:22:6b:5f:28:e8:
13:75:80:8d:52:60:ca:ff:f5:01:99:b0:6f:d5:78:0d:46:7a:
ec:8f:c7:be:5d:bf:35:d8:c0:a4:4d:08:85:62:6f:5d:67:1d:
f2:86:a2:a0:5d:b6:1b:ac:42:1a:a9:bd:46:bd:65:9b:23:e2:
19:bb:13:c8:81:78:9c:3d:ae:28:e8:b9:97:e8:a5:48:66:f2:
81:ec:52:f0:a8:c9:db:bb:f0:1f:f3:a5:1e:7e:04:fa:71:63:
8f:8e:c0:f0:72:ab:23:bb:52:05:09:29:2a:59:52:21:b8:52:
27:c2:88:b2:5c:b5:1c:a6:c6:cf:ff:a5:e2:90:34:14:8c:15:
39:6d:f6:3b:da:23:87:d5:b7:14:7e:f6:b5:bd:5e:ee:bc:da:
3c:d9:1b:9a:ec:26:65:0a:8c:86:26:69:7c:2a:ed:f9:84:5b:
c4:83:29:9a:6d:80:40:df:18:28:f3:0b:7d:53:9b:33:45:70:
6c:58:bb:a5:ce:b0:da:eb:ae:1f:2f:d2:48:4b:7a:2a:bf:59:
62:8f:5f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 20:47:52 2024 by rpki-client on console-fra.rpki-client.org