Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/F_Pi2qRLnoPHKXvx2cQSGZYZYSU.roa
File: F_Pi2qRLnoPHKXvx2cQSGZYZYSU.roa (raw, json)
Hash identifier: e/Z1MgVPjEPuF66p0PFJGnOdKZZQxJbfhdfR+CeXT+w=
Subject key identifier: 17:F3:E2:DA:A4:4B:9E:83:C7:29:7B:F1:D9:C4:12:19:96:19:61:25
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0DE8
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/F_Pi2qRLnoPHKXvx2cQSGZYZYSU.roa
Signing time: Thu 28 Mar 2024 01:22:23 +0000
ROA not before: Thu 28 Mar 2024 01:22:23 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3560 (0xde8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 28 01:22:23 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=17F3E2DAA44B9E83C7297BF1D9C4121996196125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3d:47:a8:06:e7:92:0c:48:42:6b:f9:9a:e2:
c4:3d:c1:f2:b2:de:04:d1:f4:65:09:07:95:ed:e3:
a3:7d:c2:f7:4b:46:8c:84:4c:49:82:94:f3:ba:35:
73:ab:18:35:32:02:39:67:1f:5f:19:4c:ec:b9:19:
0a:50:40:23:e0:23:1d:91:8f:fc:93:90:6a:d9:21:
ed:1c:f5:89:db:68:48:c9:06:29:20:08:02:bc:a5:
ed:da:cb:bc:2c:c4:e8:b9:67:b7:c3:6a:7f:34:16:
a4:40:92:83:a9:c1:04:f0:e1:9f:db:0a:11:57:b6:
1c:a5:03:58:fb:30:61:d9:33:b0:92:f3:40:5c:d7:
be:0d:24:22:17:81:67:23:34:ce:6f:0d:9f:b7:8b:
5d:21:90:07:39:2a:05:cf:c8:ae:99:de:89:3e:c7:
af:d5:7f:2a:4e:d5:bb:89:01:e9:db:44:ef:56:2c:
88:e9:49:d6:51:1d:c3:d4:a8:12:ef:da:ad:27:4e:
c5:e6:11:67:86:a0:9b:45:19:32:d4:01:ac:d7:cb:
c2:57:98:f9:bd:b0:1f:37:a2:5c:7c:aa:74:57:75:
87:04:7f:e0:81:3a:e6:24:cc:5f:f8:46:83:90:c2:
7a:4e:73:61:da:1c:aa:5d:6a:08:dc:38:17:3f:0f:
b5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F3:E2:DA:A4:4B:9E:83:C7:29:7B:F1:D9:C4:12:19:96:19:61:25
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/F_Pi2qRLnoPHKXvx2cQSGZYZYSU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
89:ae:21:07:d1:08:1f:65:c5:c7:5d:df:72:1b:2e:98:4c:7d:
a6:7a:d4:37:6f:3d:53:a0:20:8d:4a:e6:d8:46:bc:ff:50:59:
14:6e:de:71:7c:53:ee:1a:a1:f4:80:c6:1a:0a:16:82:fc:21:
a1:f1:c4:a0:7f:b4:cf:ce:5f:ce:8a:fe:bb:15:ed:3c:47:8e:
bf:1e:20:35:e0:48:f5:75:45:e3:82:5c:f6:fb:1b:ae:2b:a3:
51:9f:45:5b:39:e6:17:0c:d3:95:02:07:07:cf:7b:15:01:b5:
1d:06:3f:9e:14:f2:1c:5a:18:e7:fb:46:0c:e0:24:87:7f:8c:
de:0a:c6:2e:bc:28:23:bb:e2:a0:af:c2:e1:02:60:b6:bc:cf:
c4:f8:99:fe:3d:6f:2b:b9:48:af:12:c8:79:76:db:2a:8b:20:
61:1d:52:66:47:71:be:ac:68:22:ca:99:93:da:a6:b5:b9:e9:
4e:e1:c6:7b:db:2c:68:f7:35:3d:8b:04:5e:fa:35:ab:38:2f:
bd:22:b3:54:04:32:4d:17:32:0a:62:9a:0b:1c:bb:6e:d0:9b:
7b:a8:47:dc:c3:df:c3:a1:c7:73:40:0d:d6:30:c4:50:fa:b8:
52:fb:75:63:65:25:eb:5f:4e:8d:9c:80:ca:63:80:17:c3:60:
70:10:fb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 03:16:41 2024 by rpki-client on console-fra.rpki-client.org