Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/7AdX-ADUPi5uZ7O8l-x6UlncdQI.roa
File: 7AdX-ADUPi5uZ7O8l-x6UlncdQI.roa (raw, json)
Hash identifier: XrSHCdb8OB38ScBx7pTVuPeA1Lx1Jg2k+203fN9C6LA=
Subject key identifier: EC:07:57:F8:00:D4:3E:2E:6E:67:B3:BC:97:EC:7A:52:59:DC:75:02
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 12D2
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/7AdX-ADUPi5uZ7O8l-x6UlncdQI.roa
Signing time: Wed 10 Apr 2024 03:53:04 +0000
ROA not before: Wed 10 Apr 2024 03:53:04 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4818 (0x12d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 10 03:53:04 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EC0757F800D43E2E6E67B3BC97EC7A5259DC7502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1f:64:2a:12:a0:16:97:18:17:87:f7:46:6d:
6a:e3:15:9d:63:c9:2c:3d:1f:fa:b6:8b:df:20:ce:
ce:fe:4c:3b:a1:af:fd:4c:be:73:66:a7:76:41:af:
23:75:75:b4:45:f0:10:3a:4c:97:e7:5f:2f:1b:57:
d7:a8:71:b0:92:e8:3d:d2:9a:ee:c4:70:43:ae:cb:
88:d4:f0:0a:bc:32:f5:b4:09:98:7f:aa:e0:19:2d:
be:ca:8a:c6:8f:40:f5:6f:c5:6e:83:4a:4f:dc:13:
c1:62:28:bd:39:40:66:a7:17:e5:af:64:7b:2a:34:
44:9c:83:84:a2:ca:b6:0a:65:13:b9:cc:b7:72:7c:
7a:ab:3d:90:0a:3c:17:3a:e7:31:b1:a1:e9:03:d1:
2a:89:90:6a:93:e1:00:4f:d3:30:94:32:cb:71:0a:
0b:17:84:96:3c:da:01:e2:bd:91:ee:e8:f9:02:c1:
a7:60:7d:ca:3f:94:2e:8b:df:6b:62:98:d8:28:4c:
b8:b6:86:78:45:43:ca:e3:51:ba:05:78:c8:e5:fe:
dd:45:5a:f7:4b:a9:47:b0:05:0c:1b:76:14:c1:a4:
6e:a4:16:47:54:d4:3c:b0:23:25:d9:af:97:35:72:
d3:32:22:43:46:f4:2b:f8:f3:8a:32:6d:03:b2:d0:
4f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:07:57:F8:00:D4:3E:2E:6E:67:B3:BC:97:EC:7A:52:59:DC:75:02
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/7AdX-ADUPi5uZ7O8l-x6UlncdQI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6d:fc:79:29:b4:34:db:cb:75:51:3f:d3:e7:c7:fb:0e:0c:7c:
7b:25:5a:e4:e2:3d:c8:99:e9:d3:f0:77:eb:58:85:3a:ce:11:
67:e9:ff:54:16:47:bf:a4:95:a8:cd:af:62:a8:6b:2e:54:0e:
72:03:44:ec:8d:ab:15:18:eb:46:9b:28:4e:68:b2:00:d9:e3:
64:2f:f2:47:da:a4:ad:a1:88:e2:1c:5e:5a:4f:a6:0e:bc:07:
65:fe:85:20:7e:ed:13:cd:45:99:46:d7:f5:05:a2:2c:a5:0e:
15:16:47:57:e3:89:0c:ce:66:df:88:85:fe:8a:c4:9c:0c:37:
78:90:52:41:8b:b3:97:94:7d:5b:e9:36:1c:a7:7e:68:ed:f3:
e4:3b:71:61:9f:f4:8d:ae:42:a9:48:19:55:89:4f:51:a4:dd:
ff:56:7a:41:6f:ac:7a:ae:90:fa:0e:96:66:6d:2c:9e:09:82:
27:5b:5f:55:c0:bf:3d:b2:f6:89:c8:f4:c2:ca:bb:de:f4:82:
65:e9:1e:9c:fb:80:82:65:b2:75:18:fd:99:18:4f:9d:f2:47:
95:2a:f9:9f:25:50:63:69:3b:cf:34:c1:00:a8:f0:d8:b6:11:
7e:88:69:db:9e:8c:e4:39:08:c0:1a:f7:87:a6:ad:58:0d:b3:
93:dd:62:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 05:26:29 2024 by rpki-client on console-ams.rpki-client.org