Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/I0VZMPAhFJof0qnMieEl9hvLneo.roa
File: I0VZMPAhFJof0qnMieEl9hvLneo.roa (raw, json)
Hash identifier: GiR257Iww0Tnjv+ZnR+hpABYYGf2NHteDT7/34fweLQ=
Subject key identifier: 23:45:59:30:F0:21:14:9A:1F:D2:A9:CC:89:E1:25:F6:1B:CB:9D:EA
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0E4A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/I0VZMPAhFJof0qnMieEl9hvLneo.roa
Signing time: Fri 29 Mar 2024 01:52:28 +0000
ROA not before: Fri 29 Mar 2024 01:52:28 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3658 (0xe4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 29 01:52:28 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=23455930F021149A1FD2A9CC89E125F61BCB9DEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9f:43:2b:18:46:0d:4a:49:17:f4:a5:f7:9e:
57:b8:01:68:a6:76:dc:4d:cb:9d:3f:29:0a:83:67:
a4:bd:3d:ca:f8:5c:c1:9b:e1:68:f0:94:4a:d0:f8:
86:dc:15:9d:39:9e:50:0f:ad:72:7d:0a:b7:bd:cf:
cd:9c:36:05:fd:8b:75:de:e7:04:cf:e0:34:d4:a9:
06:db:11:c8:90:88:29:ea:9d:ee:92:e7:7c:e3:09:
27:92:36:7e:cb:4b:05:ca:fa:d1:a2:04:4d:ef:16:
0c:da:56:1e:eb:a1:62:af:80:98:ed:ee:3a:ea:b0:
72:1f:e3:24:be:cd:94:bb:00:64:53:62:e7:bd:e7:
19:cd:8d:6e:a3:63:7f:3b:56:82:a7:ec:d7:b1:8a:
13:95:1e:5f:fd:1f:3c:8f:9e:5b:ee:55:a8:38:96:
74:71:6d:f3:85:6f:4b:bd:c1:ef:7a:b3:97:e1:0f:
c4:4d:ed:6f:84:8d:f3:38:92:45:d7:69:0a:70:3d:
ca:cb:39:dc:b9:ef:a0:fe:ea:03:6b:1b:14:13:07:
22:52:b5:c4:56:ec:ec:15:46:77:f4:9e:40:45:f0:
58:91:d7:44:45:85:14:e5:61:a2:45:a0:37:d3:46:
f6:4d:51:70:fa:55:d3:3f:4d:fb:87:b5:02:55:c2:
fe:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:45:59:30:F0:21:14:9A:1F:D2:A9:CC:89:E1:25:F6:1B:CB:9D:EA
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/I0VZMPAhFJof0qnMieEl9hvLneo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7d:48:4b:91:47:7f:9e:24:f6:9b:7b:39:24:5f:8c:53:a9:02:
34:13:17:fa:b6:76:35:41:47:95:b8:34:22:db:19:91:cc:c3:
2a:a5:20:ec:6e:a5:f5:7b:bb:6c:65:d6:30:21:bc:58:de:3c:
8f:05:2f:58:78:20:cd:83:bb:62:f4:51:95:69:42:41:03:e6:
95:c5:22:a1:2f:3a:45:18:73:d5:64:96:f0:1e:bb:e4:27:7c:
da:16:a7:8b:45:55:25:ec:79:ae:56:80:c0:e1:f7:96:05:5a:
68:fa:f3:f8:09:f7:35:b0:b0:fd:f9:70:b1:ae:5e:e0:22:24:
aa:47:84:9c:12:59:18:1d:65:40:00:cd:84:14:95:c0:e8:03:
90:b2:c6:9c:0b:48:08:e0:ee:e5:1f:00:8e:77:02:27:ba:4d:
c7:6e:8c:79:66:1e:0b:e2:7c:45:bb:ba:2a:75:42:71:ed:4f:
33:25:36:ef:b9:53:0f:7c:81:ab:52:2e:26:cf:57:b4:d4:2d:
f2:52:7f:d6:8e:3e:fa:7e:81:bf:1f:27:a8:a6:3e:5a:b1:eb:
4a:d5:af:a0:f7:21:f1:31:89:90:c0:dd:09:9c:bc:a8:3c:aa:
ee:f3:b4:e9:0d:10:37:3f:2e:c6:4f:25:32:dd:2e:49:c6:7a:
a4:98:eb:c6
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDkowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDAzMjkw
MTUyMjhaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDIzNDU1OTMwRjAyMTE0
OUExRkQyQTlDQzg5RTEyNUY2MUJDQjlERUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZn0MrGEYNSkkX9KX3nle4AWimdtxNy50/KQqDZ6S9Pcr4XMGb
4WjwlErQ+IbcFZ05nlAPrXJ9Cre9z82cNgX9i3Xe5wTP4DTUqQbbEciQiCnqne6S
53zjCSeSNn7LSwXK+tGiBE3vFgzaVh7roWKvgJjt7jrqsHIf4yS+zZS7AGRTYue9
5xnNjW6jY387VoKn7NexihOVHl/9HzyPnlvuVag4lnRxbfOFb0u9we96s5fhD8RN
7W+EjfM4kkXXaQpwPcrLOdy576D+6gNrGxQTByJStcRW7OwVRnf0nkBF8FiR10RF
hRTlYaJFoDfTRvZNUXD6VdM/TfuHtQJVwv7bAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUI0VZMPAhFJof0qnMieEl9hvLneowHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL0kwVlpNUEFoRkpvZjBx
bk1pZUVsOWh2TG5lby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAfUhLkUd/niT2m3s5JF+MU6kCNBMX+rZ2
NUFHlbg0ItsZkczDKqUg7G6l9Xu7bGXWMCG8WN48jwUvWHggzYO7YvRRlWlCQQPm
lcUioS86RRhz1WSW8B675Cd82hani0VVJex5rlaAwOH3lgVaaPrz+An3NbCw/flw
sa5e4CIkqkeEnBJZGB1lQADNhBSVwOgDkLLGnAtICODu5R8AjncCJ7pNx26MeWYe
C+J8Rbu6KnVCce1PMyU277lTD3yBq1IuJs9XtNQt8lJ/1o4++n6Bvx8nqKY+WrHr
StWvoPch8TGJkMDdCZy8qDyq7vO06Q0QNz8uxk8lMt0uScZ6pJjrxg==
-----END CERTIFICATE-----
Generated at Fri Mar 29 03:45:35 2024 by rpki-client on console-fra.rpki-client.org