Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/82x6-dorarq5vd0pZxpDYrjhYsw.roa
File: 82x6-dorarq5vd0pZxpDYrjhYsw.roa (raw, json)
Hash identifier: 8x9VYm9USw3o5hl15HgPyqGcZNlrdkhvy7WVb79KtAA=
Subject key identifier: F3:6C:7A:F9:DA:2B:6A:BA:B9:BD:DD:29:67:1A:43:62:B8:E1:62:CC
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1508
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/82x6-dorarq5vd0pZxpDYrjhYsw.roa
Signing time: Tue 16 Apr 2024 01:23:22 +0000
ROA not before: Tue 16 Apr 2024 01:23:22 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5384 (0x1508)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 16 01:23:22 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F36C7AF9DA2B6ABAB9BDDD29671A4362B8E162CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ab:11:d0:9f:73:bf:fd:7d:53:a4:c6:2d:a0:
b5:48:e3:5d:74:24:fa:18:67:00:71:4f:8e:4d:1d:
ef:bd:9d:3d:b1:ad:ca:70:13:45:0b:8f:a9:dd:32:
6f:94:5f:a3:22:34:56:f0:bb:c3:07:a3:32:5a:ad:
da:84:45:27:9d:b8:f9:e6:16:28:13:6e:64:e3:bb:
42:f5:e2:2d:e0:76:ec:e2:9a:d6:a5:67:2e:e3:7e:
98:18:fe:11:71:2e:e9:96:86:f9:c4:19:1a:9e:37:
f1:6f:38:1e:cf:93:c8:af:a2:b3:59:81:45:c6:39:
9d:7b:a7:96:ec:c1:39:e2:bc:a7:37:95:6d:36:61:
88:0e:0a:08:ef:cc:78:b8:e6:df:06:50:b9:a1:3c:
58:86:fc:a3:10:e1:81:62:b8:15:be:f0:04:cc:5f:
d6:09:3f:c9:a7:9b:bd:9b:07:11:59:03:de:63:f0:
b5:df:f6:e6:f4:49:05:ad:14:57:82:68:e5:12:ef:
25:57:a3:c7:00:3e:c4:dd:14:23:6f:ac:93:ec:83:
9a:eb:2c:43:46:7e:a7:a4:b9:88:6d:0b:c1:c3:21:
98:23:e3:8b:64:2a:4f:95:cd:d0:83:dd:f6:72:41:
8e:92:7f:ac:76:06:94:cb:c4:fe:e7:c3:d6:d1:84:
3b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6C:7A:F9:DA:2B:6A:BA:B9:BD:DD:29:67:1A:43:62:B8:E1:62:CC
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/82x6-dorarq5vd0pZxpDYrjhYsw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7a:2f:0e:69:a1:b6:a8:d7:f9:40:e9:66:0d:12:cd:9d:87:d8:
85:a4:2e:f9:e3:9b:e8:d9:74:e3:27:8d:46:3b:a8:be:4d:30:
60:53:2e:b7:d7:1f:a0:d6:b9:be:76:5a:32:9c:0d:cd:1c:61:
1a:d9:4f:99:91:99:45:fe:bb:42:09:f4:f4:d3:68:2e:89:fa:
f8:60:13:bb:27:a5:2a:8a:21:91:71:ef:91:14:47:cd:f9:c1:
a8:4b:26:24:f0:64:b6:24:53:fd:23:46:0b:6d:1f:46:b4:58:
96:f8:18:a2:5b:0d:1c:7d:df:84:ba:57:55:13:a7:fb:a9:58:
f2:ce:01:b6:3c:d8:8b:61:05:28:52:aa:0e:a0:b2:f4:d6:87:
69:6a:84:b7:ad:94:62:d9:e6:05:23:92:76:ad:1f:a8:7f:6a:
eb:99:60:5a:a9:6e:51:c5:b9:2c:a5:ec:0f:2d:2b:49:d4:7f:
7b:41:72:ce:02:d7:aa:64:d4:7b:a5:1d:f9:9e:a8:a3:d2:ed:
5c:4e:a4:dc:f7:d7:f6:74:08:da:ba:9b:de:99:61:97:16:a0:
83:7c:e2:75:df:67:a1:51:28:11:91:a5:f1:8f:33:a7:61:5e:
63:9c:e3:39:c5:ad:5c:d8:36:c1:68:9b:15:8f:42:73:99:2f:
0c:93:60:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 02:44:40 2024 by rpki-client on console-fra.rpki-client.org