Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/Aq6UU6SLB7hvlQsKu0Ng0s9b-oU.roa
File: Aq6UU6SLB7hvlQsKu0Ng0s9b-oU.roa (raw, json)
Hash identifier: leStie8CxL39DapOIRcWNfQMcTAXFSCwKHh6Y/8i1fs=
Subject key identifier: 02:AE:94:53:A4:8B:07:B8:6F:95:0B:0A:BB:43:60:D2:CF:5B:FA:85
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0FDE
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Aq6UU6SLB7hvlQsKu0Ng0s9b-oU.roa
Signing time: Tue 02 Apr 2024 06:52:43 +0000
ROA not before: Tue 02 Apr 2024 06:52:43 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4062 (0xfde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 2 06:52:43 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=02AE9453A48B07B86F950B0ABB4360D2CF5BFA85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7d:91:70:2a:38:ab:2a:c6:ca:0a:4f:82:8a:
22:03:bd:00:b5:a0:78:10:35:19:ab:8b:53:7f:c5:
3e:ee:d4:c1:95:a4:b6:54:1b:74:68:e9:ca:d9:5e:
82:40:9d:64:f6:a1:4e:c1:45:65:14:9a:cc:a8:b5:
b9:56:0e:11:99:fa:8d:c4:44:35:2f:1f:3e:52:0d:
78:aa:29:c8:83:a7:a3:bc:c3:15:29:b3:a6:d6:f2:
ed:53:56:6a:48:ba:c2:a9:8b:99:22:6a:81:6c:7a:
eb:88:18:09:4f:bd:7e:7c:aa:3f:c3:cb:de:38:87:
c0:5d:02:67:7e:8d:c7:36:c9:28:e5:0e:f0:35:de:
f9:e5:b0:47:9b:36:88:1e:69:76:0e:43:96:93:cd:
31:f3:7f:d5:f0:dd:a9:3c:ce:e3:f8:dd:dc:24:13:
0d:e9:da:73:cd:4f:e0:9b:ac:df:ea:9d:66:7d:d0:
2d:da:73:1a:55:b3:79:f2:af:02:e9:ca:5d:15:e8:
e9:fe:93:2d:8d:33:da:b5:a1:c8:00:af:5e:49:8c:
19:96:02:51:39:ee:7b:b9:1e:98:45:2f:d4:e6:a8:
d8:33:91:fc:01:09:ef:b5:4a:c9:f4:92:55:67:c2:
05:23:bc:b6:11:ee:d8:a8:fb:53:48:f3:87:d9:0f:
b7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AE:94:53:A4:8B:07:B8:6F:95:0B:0A:BB:43:60:D2:CF:5B:FA:85
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Aq6UU6SLB7hvlQsKu0Ng0s9b-oU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
98:ca:64:35:ed:00:38:a8:3a:78:4c:fd:63:69:1a:63:98:f5:
ed:2c:67:93:ac:1d:4f:6e:5a:4f:ac:b5:7c:12:42:74:1f:c6:
c2:f8:3d:84:0f:c3:19:bc:32:19:b8:7b:f6:26:32:0f:8a:58:
5c:29:27:03:d4:71:ea:5e:2e:62:9a:05:61:6e:ce:a4:93:c4:
65:35:26:df:c2:1a:f3:19:c1:c0:2b:eb:34:fb:0d:e4:1b:ef:
6e:8f:d1:b0:8e:4a:ba:f3:74:19:53:6c:0d:a8:e3:78:6a:58:
e3:9d:55:fd:3e:8d:84:8b:4e:61:0e:c9:4f:0f:92:a4:ee:b6:
f6:a7:a8:a7:a1:b8:5d:92:84:f0:1d:44:09:b4:6e:9c:69:8d:
94:fd:6c:fa:f3:99:54:22:24:04:d8:43:92:07:d8:aa:fc:64:
c6:33:7b:39:68:33:6a:bf:d9:b4:34:bb:5c:bb:9f:bc:1d:a1:
3d:54:7c:5d:c6:e2:76:4c:a0:b5:bb:76:66:36:bc:83:dc:d0:
63:44:25:73:9f:eb:8b:98:e0:30:c5:2b:90:e6:9b:9a:03:63:
09:71:16:1d:7f:7b:3c:7f:86:1f:d2:0f:42:d6:82:47:87:c7:
f0:ce:65:7d:ba:8a:cd:9e:dd:0b:9f:38:cd:0a:ef:43:75:62:
33:bf:1b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 2 11:41:23 2024 by rpki-client on console-fra.rpki-client.org