Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/AyKaUdoWBNkc0QXsqGssj5Y6KlA.roa
File: AyKaUdoWBNkc0QXsqGssj5Y6KlA.roa (raw, json)
Hash identifier: 0M2zGs94ylSmGPKoZtD2K3JJmb8c/6+aK0n2rsZPfHw=
Subject key identifier: 03:22:9A:51:DA:16:04:D9:1C:D1:05:EC:A8:6B:2C:8F:96:3A:2A:50
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 116C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/AyKaUdoWBNkc0QXsqGssj5Y6KlA.roa
Signing time: Sat 06 Apr 2024 10:22:51 +0000
ROA not before: Sat 06 Apr 2024 10:22:51 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4460 (0x116c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 6 10:22:51 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=03229A51DA1604D91CD105ECA86B2C8F963A2A50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e9:9e:d7:b9:88:4f:db:36:eb:28:e5:f2:7f:
f1:13:eb:cd:7a:e4:38:a7:fa:88:09:ff:65:49:ce:
2b:4d:c2:54:e1:88:86:51:97:8a:7c:4e:50:30:bd:
27:b1:5f:69:47:88:f6:3e:f3:26:0d:ca:7e:85:0a:
cc:e6:a2:84:d0:8f:06:81:bb:53:56:9e:91:34:1c:
e6:be:0a:c8:98:81:f7:fb:7e:96:b3:52:f3:01:52:
a5:e8:45:4a:04:18:75:10:03:a0:b3:8a:42:b4:d6:
20:dd:8f:c0:05:8a:96:61:0d:68:20:23:88:04:7c:
6c:4e:ee:6c:40:ad:24:9f:5f:cd:f4:89:7f:90:ed:
6c:ec:1e:ad:8c:6d:d3:3c:47:dd:1c:c1:4e:92:b9:
89:3b:b3:3e:a7:4e:1a:bc:98:07:ee:b5:af:c9:ae:
f5:11:f4:36:7c:20:a8:bb:34:9c:6b:eb:f6:71:41:
a5:cb:88:e5:88:aa:03:5c:d0:bb:88:c7:f2:f5:73:
76:32:51:59:8d:e8:b6:f4:a7:93:06:20:df:55:1d:
99:dd:99:ed:59:52:16:92:75:77:83:1d:5f:df:a4:
5d:10:ed:4b:32:49:56:ca:54:0d:31:03:da:f1:03:
a7:75:61:03:65:dc:db:7d:ac:c4:44:61:e0:08:ac:
51:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:22:9A:51:DA:16:04:D9:1C:D1:05:EC:A8:6B:2C:8F:96:3A:2A:50
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/AyKaUdoWBNkc0QXsqGssj5Y6KlA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
74:27:1b:00:50:07:ae:4a:94:fa:2a:ef:9f:f3:01:1f:10:e3:
9e:fc:70:66:94:28:90:4c:c0:95:21:8a:f2:94:57:62:bc:4f:
0c:12:c7:7d:b6:d3:71:53:6f:6d:d0:26:8c:38:4a:af:56:9d:
d7:e6:70:5f:47:35:59:bd:ac:1e:07:63:41:af:f6:b5:59:68:
3a:76:ad:02:99:e6:fe:f0:af:95:38:f1:58:79:4f:40:bb:df:
68:0d:5f:ab:46:7c:ce:92:24:f5:b5:fd:cf:10:c3:93:30:44:
1e:30:62:b9:d0:8f:82:e0:70:21:9d:8e:47:a3:ed:f6:ac:1d:
57:a2:97:ea:4e:89:fc:17:a4:09:1b:b2:03:ed:c0:9b:72:73:
49:29:b8:7d:00:fd:23:34:6f:a6:5e:49:a1:1b:9a:e2:9e:16:
20:64:54:5a:4e:5f:09:13:40:ce:a6:0e:b7:d8:8b:a8:e3:21:
1f:03:5c:2f:8b:c9:68:97:4c:ed:93:52:18:34:b6:17:ec:9e:
60:60:7a:1a:b2:1d:50:05:1e:af:1f:c9:3c:50:df:d0:08:c3:
94:a5:62:98:72:58:6a:31:a3:77:a4:98:a2:08:be:f6:fd:d9:
b6:92:98:fc:b5:79:ea:8e:c3:74:aa:9c:81:4b:ae:fb:bf:7a:
c6:f2:88:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 6 12:13:37 2024 by rpki-client on console-fra.rpki-client.org