Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/FycS7aiQGCgsiT0zUSl2ZG63c1k.roa
File: FycS7aiQGCgsiT0zUSl2ZG63c1k.roa (raw, json)
Hash identifier: K/B7S697QlYJHUPNTsb4aC6Ck+PaMl5+kn1SYGazeK8=
Subject key identifier: 17:27:12:ED:A8:90:18:28:2C:89:3D:33:51:29:76:64:6E:B7:73:59
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0E9C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/FycS7aiQGCgsiT0zUSl2ZG63c1k.roa
Signing time: Fri 29 Mar 2024 22:22:41 +0000
ROA not before: Fri 29 Mar 2024 22:22:41 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3740 (0xe9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 29 22:22:41 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=172712EDA89018282C893D33512976646EB77359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:21:6c:9c:0d:85:9d:fd:57:c5:6c:93:7c:81:
e7:db:45:87:88:4a:b0:5f:f8:2f:a7:5f:8f:49:34:
a8:4d:48:79:59:e0:13:59:b8:e1:f2:61:ee:2d:40:
da:66:23:5f:57:70:72:01:84:73:81:e3:5f:10:2a:
bb:61:00:6b:52:9e:14:3e:e7:c5:b4:bc:0b:f5:d2:
17:57:aa:4b:de:30:ce:e2:87:d1:b4:df:9a:ae:6d:
9d:69:70:2b:07:ba:e7:1b:83:09:87:27:6c:2f:28:
c0:45:12:40:02:89:a0:43:9e:ce:e0:e5:44:fb:43:
15:04:b1:77:cb:bc:1d:32:e8:af:98:6e:6a:97:18:
42:33:dc:8b:ee:57:da:89:f6:2f:38:61:28:97:32:
7d:fd:09:9f:65:3b:a4:5a:b5:cf:1d:06:ba:2f:89:
4e:36:54:95:c4:9a:e0:9e:55:ba:72:70:a7:05:f2:
9e:f8:f6:5e:16:84:e7:1b:68:cb:05:b3:ae:b2:db:
64:34:6e:98:99:b6:7f:d5:f0:5f:b3:f6:36:e2:fc:
42:a9:c5:a4:9d:46:45:22:db:f7:50:6d:97:9f:bf:
39:65:b7:e8:ca:27:a9:b8:e2:42:e6:b9:d3:a9:55:
33:2b:ca:33:91:4b:f8:24:ed:2d:31:95:09:9a:52:
e9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:27:12:ED:A8:90:18:28:2C:89:3D:33:51:29:76:64:6E:B7:73:59
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/FycS7aiQGCgsiT0zUSl2ZG63c1k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a0:28:40:26:f4:49:18:bf:95:43:6f:ac:bd:4e:39:92:9c:15:
69:32:c1:12:73:d9:70:24:0f:97:02:54:c0:5f:a2:ea:97:35:
16:15:7a:9c:56:b9:b4:bd:a0:89:26:db:a4:df:be:93:31:79:
39:48:6b:f5:3e:86:18:42:e1:91:2f:58:c6:f9:d6:21:21:2d:
fa:9c:6d:92:98:c5:a1:aa:34:4f:33:5f:f4:43:41:ae:62:61:
93:47:7c:ce:51:6c:a2:08:0e:04:4a:3e:22:f4:3e:3e:b8:8e:
7c:ad:3f:0a:a2:b4:8d:91:9a:0b:1a:27:ef:20:10:df:7a:6e:
66:77:0e:6d:aa:8b:cf:f2:c4:b8:73:2b:25:af:6d:85:a3:88:
31:05:32:65:e3:5c:e1:49:be:2d:ec:74:1a:fd:3a:d9:3c:7c:
71:9a:e6:78:b0:2d:e7:cc:47:22:24:63:f6:99:a0:1a:af:ca:
14:83:6d:a2:df:48:50:d6:aa:9a:a1:e3:8f:20:83:b4:82:f6:
2f:df:27:20:89:37:ad:f0:10:a6:bc:eb:6d:ce:41:16:03:f9:
8f:5f:a6:d3:65:a7:4c:ad:00:47:4a:f4:5d:91:4f:8c:08:5d:
8f:2d:a6:6c:01:60:50:e4:c7:36:7b:5b:52:70:6d:45:e6:07:
d9:36:3b:de
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDpwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDAzMjky
MjIyNDFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDE3MjcxMkVEQTg5MDE4
MjgyQzg5M0QzMzUxMjk3NjY0NkVCNzczNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDIWycDYWd/VfFbJN8gefbRYeISrBf+C+nX49JNKhNSHlZ4BNZ
uOHyYe4tQNpmI19XcHIBhHOB418QKrthAGtSnhQ+58W0vAv10hdXqkveMM7ih9G0
35qubZ1pcCsHuucbgwmHJ2wvKMBFEkACiaBDns7g5UT7QxUEsXfLvB0y6K+YbmqX
GEIz3IvuV9qJ9i84YSiXMn39CZ9lO6Ratc8dBroviU42VJXEmuCeVbpycKcF8p74
9l4WhOcbaMsFs66y22Q0bpiZtn/V8F+z9jbi/EKpxaSdRkUi2/dQbZefvzllt+jK
J6m44kLmudOpVTMryjORS/gk7S0xlQmaUulPAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUFycS7aiQGCgsiT0zUSl2ZG63c1kwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL0Z5Y1M3YWlRR0Nnc2lU
MHpVU2wyWkc2M2Mxay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAoChAJvRJGL+VQ2+svU45kpwVaTLBEnPZ
cCQPlwJUwF+i6pc1FhV6nFa5tL2giSbbpN++kzF5OUhr9T6GGELhkS9YxvnWISEt
+pxtkpjFoao0TzNf9ENBrmJhk0d8zlFsoggOBEo+IvQ+PriOfK0/CqK0jZGaCxon
7yAQ33puZncObaqLz/LEuHMrJa9thaOIMQUyZeNc4Um+Lex0Gv062Tx8cZrmeLAt
58xHIiRj9pmgGq/KFINtot9IUNaqmqHjjyCDtIL2L98nIIk3rfAQprzrbc5BFgP5
j1+m02WnTK0AR0r0XZFPjAhdjy2mbAFgUOTHNntbUnBtReYH2TY73g==
-----END CERTIFICATE-----
Generated at Fri Mar 29 23:54:45 2024 by rpki-client on console-fra.rpki-client.org