Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/AiGSgXbx5VGNCa6JxR_qnFpiWec.roa
File: AiGSgXbx5VGNCa6JxR_qnFpiWec.roa (raw, json)
Hash identifier: 4MhpRuh0T5SRruGFIj5/UVeAT1YnUym9a1BN4i1f+YA=
Subject key identifier: 02:21:92:81:76:F1:E5:51:8D:09:AE:89:C5:1F:EA:9C:5A:62:59:E7
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0EF0
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/AiGSgXbx5VGNCa6JxR_qnFpiWec.roa
Signing time: Sat 30 Mar 2024 19:22:33 +0000
ROA not before: Sat 30 Mar 2024 19:22:33 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3824 (0xef0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 30 19:22:33 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0221928176F1E5518D09AE89C51FEA9C5A6259E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ed:9a:d1:48:13:8d:4b:c7:36:67:b9:c3:11:
4e:48:fd:8b:d2:10:0c:2a:b5:f7:35:6f:e9:62:77:
f9:15:f7:12:bb:71:70:68:a1:ba:46:43:3b:3f:a6:
6f:6e:a5:34:f4:f7:34:76:c7:4f:0c:8b:1b:d6:22:
b3:7e:d8:34:31:36:02:7a:39:fe:7b:fd:79:77:2b:
4f:b6:2f:5d:01:48:86:ae:6d:4b:ff:1a:9b:97:2b:
16:b2:74:0a:5a:a6:a1:47:81:d7:92:50:5e:38:f4:
8f:92:d7:d9:d1:4c:09:5a:0e:1a:5e:b5:ce:bf:4a:
c6:dd:d3:a4:df:d9:32:74:73:27:64:52:81:37:2b:
0d:97:ef:78:ed:84:fc:38:92:1b:fe:b3:6b:9c:85:
c7:31:01:d7:01:de:02:81:48:46:3e:28:35:18:b9:
3c:c4:f9:3c:1f:8a:3b:14:2b:79:9d:bc:0d:c5:3a:
47:76:7d:ae:99:99:9e:57:08:41:6c:2b:7f:33:94:
22:d6:5a:56:10:1a:55:69:bb:76:cb:b3:92:d8:25:
36:dc:1b:2d:a1:e1:6d:60:fa:a8:c1:e1:3a:0b:2a:
8a:3d:4f:41:26:1d:3b:a9:06:b9:76:37:c4:bd:61:
33:e1:33:2e:4e:49:b7:54:20:c6:d0:3b:6a:3f:e1:
22:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:21:92:81:76:F1:E5:51:8D:09:AE:89:C5:1F:EA:9C:5A:62:59:E7
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/AiGSgXbx5VGNCa6JxR_qnFpiWec.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
be:ea:d5:df:7f:91:d8:92:32:ea:9f:f1:3d:8e:94:f0:be:b1:
b6:b5:0b:14:45:25:10:b6:20:6b:d3:1f:fd:c6:4c:fe:34:d4:
40:91:d9:9b:4a:fe:6a:ea:41:d9:9d:ec:2f:60:c3:9d:e0:e9:
7b:42:77:1a:20:e2:15:2b:d6:7c:62:ba:d0:b8:c0:ab:f1:43:
6c:e1:6f:b4:54:8e:9c:9a:a7:52:fa:2c:ad:b2:7c:0e:f7:c1:
99:f7:41:76:04:58:1b:93:26:6e:65:be:15:c6:9c:78:dc:4f:
b0:3a:7b:ea:d4:ee:61:ea:98:86:8d:09:a8:6d:29:e2:41:fd:
7b:2d:8b:41:2d:33:ae:dd:8e:ea:6f:d6:48:45:71:f9:6c:25:
c1:18:9f:2b:86:4d:75:05:a1:ac:7f:e1:c6:ee:2e:36:1d:38:
31:18:95:c5:a0:4c:3e:e2:a1:cd:1c:5b:4f:99:02:86:26:d3:
89:11:1b:8f:d6:7c:d2:cb:54:20:94:f6:ec:31:32:1a:2e:d1:
15:d2:15:14:71:46:c9:c6:f9:b4:f9:62:3d:88:90:23:d6:11:
dc:2d:ae:53:5d:70:bf:31:e4:d0:8e:05:36:18:f7:f0:47:ce:
70:a6:80:6c:b5:40:ac:1d:3b:f5:cb:29:97:b0:3d:ce:42:15:
0e:d4:ee:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 30 22:45:01 2024 by rpki-client on console-fra.rpki-client.org