Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/A1a9S_8gnTCuakDFPxr3qKVQZKo.roa
File: A1a9S_8gnTCuakDFPxr3qKVQZKo.roa (raw, json)
Hash identifier: HlczeasywYOpKuoGqqwMVvwocMZwjQba0sYAHkilQc4=
Subject key identifier: 03:56:BD:4B:FF:20:9D:30:AE:6A:40:C5:3F:1A:F7:A8:A5:50:64:AA
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 127C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/A1a9S_8gnTCuakDFPxr3qKVQZKo.roa
Signing time: Tue 09 Apr 2024 06:23:04 +0000
ROA not before: Tue 09 Apr 2024 06:23:04 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4732 (0x127c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 9 06:23:04 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0356BD4BFF209D30AE6A40C53F1AF7A8A55064AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c0:21:6a:9f:3c:98:8a:4f:74:a3:70:bb:96:
f6:40:dd:4e:b0:85:b8:6c:5c:e6:91:73:3d:19:42:
7d:73:4e:a5:c0:3a:1a:7a:c0:85:a6:59:72:36:67:
11:f6:46:eb:d1:00:54:c2:66:00:a3:ac:20:a0:5f:
61:40:cc:9c:67:50:e9:99:c3:1d:e6:9e:95:a0:1a:
c1:57:6c:15:1b:de:6a:92:0b:10:66:fe:ac:05:40:
cb:27:4a:6c:13:9c:52:c2:16:df:af:6d:86:8b:2a:
1e:eb:de:17:25:1c:d9:2b:d4:77:df:da:ac:04:c0:
ae:88:18:70:11:82:c2:dc:51:07:93:76:ea:ae:84:
14:d8:93:34:12:cc:6f:70:ca:84:f9:41:09:4c:7b:
43:a3:03:db:6f:7b:36:d3:a4:7c:73:56:41:48:4c:
79:7f:0a:b3:8e:74:e7:c1:db:17:dd:e3:87:bf:d2:
9f:d1:75:38:45:38:39:9f:79:bc:ea:fe:03:e6:7d:
86:66:7f:5e:33:65:f1:dd:5a:bd:b1:66:75:38:0d:
9f:59:68:a8:12:a2:42:b4:a1:1f:f0:7e:a0:e0:e5:
a8:0a:29:1b:20:04:09:62:f3:af:c6:d1:c7:f2:ce:
ea:f4:eb:47:dc:d5:20:47:0c:8a:73:bd:b3:d0:2b:
72:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:56:BD:4B:FF:20:9D:30:AE:6A:40:C5:3F:1A:F7:A8:A5:50:64:AA
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/A1a9S_8gnTCuakDFPxr3qKVQZKo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
81:e5:69:04:7b:1e:8e:00:98:dd:f2:c7:2c:17:3c:e9:c6:c4:
39:40:7d:23:ca:74:62:6e:bd:c6:b6:fc:85:37:53:77:00:96:
f3:9f:34:7e:50:d8:28:95:ee:5f:05:51:fe:3e:e4:d3:fe:49:
03:c4:22:91:0c:63:89:51:05:8f:66:10:b8:73:de:c8:69:24:
39:b3:74:d4:10:d4:d3:f1:bf:30:bd:c7:17:bb:9f:a3:0e:1f:
f0:4f:a2:58:86:3d:f2:d3:79:7b:fb:95:b9:21:65:1e:25:06:
51:25:9f:3b:b4:96:0f:a7:fb:06:47:38:5b:3d:c0:16:56:74:
61:42:a2:2f:bb:98:35:cd:2d:e9:23:17:5b:28:5a:5f:39:9c:
b2:14:c2:f1:ff:62:ca:58:fe:5e:c1:8e:c2:5f:1b:f7:f8:50:
45:71:9d:72:0b:d4:ce:53:99:cd:9b:c1:12:f0:f1:c0:65:27:
47:a4:c1:c2:16:c4:a7:bd:48:95:b4:c6:f9:f3:a9:f1:8e:96:
3b:a4:2e:1f:c0:c7:5c:e7:f7:dd:a1:54:fb:09:b2:75:58:5e:
2c:39:36:8c:44:71:95:36:ff:91:d2:a1:df:62:fe:f1:22:24:
62:7d:c1:99:e0:8c:cc:fa:98:64:77:a6:f5:ea:28:ad:bd:ff:
c6:34:e1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 9 11:49:18 2024 by rpki-client on console-fra.rpki-client.org