Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/IKoQ_J7XwGXI2UTXf4wyJXxG0Qc.roa
File: IKoQ_J7XwGXI2UTXf4wyJXxG0Qc.roa (raw, json)
Hash identifier: 012NwlevbDlFbXBfPPIX20Z8inoA/e5nM7x8WH9vQek=
Subject key identifier: 20:AA:10:FC:9E:D7:C0:65:C8:D9:44:D7:7F:8C:32:25:7C:46:D1:07
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 187A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/IKoQ_J7XwGXI2UTXf4wyJXxG0Qc.roa
Signing time: Thu 25 Apr 2024 05:53:40 +0000
ROA not before: Thu 25 Apr 2024 05:53:40 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6266 (0x187a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 25 05:53:40 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=20AA10FC9ED7C065C8D944D77F8C32257C46D107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:fe:55:d5:07:01:11:7a:15:66:6e:7d:fc:f9:
87:7e:25:43:97:e8:53:30:39:4a:7a:a0:0b:9f:6b:
cb:25:42:1e:d9:df:5e:7d:e1:fd:de:1e:77:8a:24:
21:e3:59:5b:cc:0c:dd:d9:ae:bb:08:72:db:ca:87:
cd:02:c3:69:35:c2:9d:dd:67:1f:88:93:c3:52:c6:
0f:0a:40:f7:c4:cb:60:ec:75:37:8b:1f:8a:92:e4:
c0:83:82:38:7b:b2:d5:06:34:79:f5:a0:5b:eb:0e:
55:63:92:89:4c:a6:c7:6a:7c:b6:18:2d:7d:bb:eb:
80:38:c1:87:c9:e4:ce:af:bb:73:b5:ae:1c:68:58:
7f:51:46:1c:cd:af:de:e1:5a:c0:ab:0c:06:9f:ba:
5f:9b:ab:66:2a:d9:5f:6d:4d:75:ac:4d:1a:6e:be:
23:6e:2f:40:38:84:c1:7f:46:ab:e5:fc:75:9b:68:
1d:97:7a:6b:db:36:c5:bc:b7:5e:66:e0:07:12:92:
3c:c5:49:44:9b:1e:e1:8b:d7:c8:c9:0e:77:7e:b6:
1a:5d:b5:33:81:5c:d3:cb:3a:84:77:e4:f5:4b:17:
5c:36:cc:d2:51:3f:f8:47:bd:6d:92:1d:f9:e6:cb:
c7:83:fd:da:b1:19:7b:04:2e:73:1a:05:ef:db:f9:
7a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AA:10:FC:9E:D7:C0:65:C8:D9:44:D7:7F:8C:32:25:7C:46:D1:07
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/IKoQ_J7XwGXI2UTXf4wyJXxG0Qc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
75:27:70:a5:1e:eb:f2:6f:5c:4b:a1:d1:2d:44:6e:1c:19:01:
38:7b:90:4d:37:1b:b7:af:0b:e1:0a:27:02:6f:09:84:7e:c7:
c1:84:03:0b:40:95:77:8f:02:62:64:1b:9b:28:8d:94:9c:e5:
3f:7e:2e:a0:36:e8:7a:a0:cb:c4:98:94:5f:df:a2:18:ee:81:
b1:7f:5f:8b:1d:0c:07:ae:28:8c:37:9e:b5:72:64:2d:64:e5:
9c:b0:6c:3c:d7:8f:d5:82:64:aa:df:8d:3d:8c:17:5f:2c:46:
b4:47:2c:a9:c5:d3:65:69:40:5c:5c:2b:64:ef:bd:86:cc:db:
aa:8e:ff:c6:a4:a0:46:60:e0:62:a1:d4:91:db:28:60:0e:3e:
9a:3c:52:0d:e0:09:f3:5c:b0:6e:0d:a9:40:2b:c4:41:0b:a3:
57:b6:09:c2:d1:a0:91:b5:36:2f:ae:ce:e3:7d:49:20:ae:52:
5a:a0:26:c5:e7:77:ae:7e:4a:25:f5:37:7d:83:1e:d2:ae:50:
f5:31:02:3d:48:bb:52:d6:00:75:1f:50:b5:3d:b3:1e:3a:f1:
ae:d0:22:b2:90:41:89:a0:d4:8d:a1:20:22:e9:11:72:fe:63:
c5:e8:d1:d7:f5:28:11:bc:27:5a:93:1c:0a:52:55:1a:35:10:
d1:f5:fc:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 07:28:34 2024 by rpki-client on console-ams.rpki-client.org