Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/J6qMnj1a1p6R5RItZ2YFa1H0Wco.roa
File: J6qMnj1a1p6R5RItZ2YFa1H0Wco.roa (raw, json)
Hash identifier: YC2tqQcTJey7ANcwr+izn/o+AZGSVaXroHs7FjNd+as=
Subject key identifier: 27:AA:8C:9E:3D:5A:D6:9E:91:E5:12:2D:67:66:05:6B:51:F4:59:CA
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1B74
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/J6qMnj1a1p6R5RItZ2YFa1H0Wco.roa
Signing time: Fri 03 May 2024 04:24:14 +0000
ROA not before: Fri 03 May 2024 04:24:14 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7028 (0x1b74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 3 04:24:14 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=27AA8C9E3D5AD69E91E5122D6766056B51F459CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c5:cc:91:6f:96:cc:d5:87:69:86:9b:fb:c7:
0b:13:15:5d:8d:84:1d:29:85:88:5a:6d:55:89:0d:
03:29:67:07:ad:96:3b:54:ba:08:48:53:4c:d6:f3:
8d:5e:85:cf:e7:2f:c6:36:8e:85:0f:db:7e:16:33:
1b:9f:c6:2e:37:84:14:9c:00:ee:54:b9:c2:3b:1a:
f4:d5:87:33:bd:45:8b:21:50:b3:85:6b:c9:ad:5f:
b9:6f:36:e4:64:de:cd:ed:bc:f3:92:b3:e8:8c:db:
6a:27:a9:e3:2f:47:b0:da:97:77:1a:6e:a1:19:7d:
6b:85:19:f4:fe:ac:b1:11:bd:5e:65:87:46:ff:cd:
c5:e9:a2:a3:57:26:f2:52:02:8e:85:26:43:16:c7:
1d:84:9c:6b:6a:f7:01:d3:ba:eb:62:f8:14:09:21:
3a:a5:df:e0:0d:70:39:fa:92:06:ca:11:7d:a3:9c:
af:d0:b1:72:e8:f3:a2:df:26:4a:08:c6:d2:85:01:
80:d5:42:ef:57:9f:30:ed:23:c6:4a:e6:54:78:b8:
b6:4d:80:cb:71:26:a6:77:81:e8:1b:5a:03:ac:d1:
ee:8f:78:b2:95:ab:24:54:34:dd:e3:58:86:5c:e0:
a5:5c:ed:ef:75:ab:52:b7:67:30:65:ae:08:21:c8:
a8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AA:8C:9E:3D:5A:D6:9E:91:E5:12:2D:67:66:05:6B:51:F4:59:CA
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/J6qMnj1a1p6R5RItZ2YFa1H0Wco.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
65:b4:ae:a2:40:e1:a2:d5:0f:f5:c8:8f:db:e2:39:1c:3d:ec:
de:e2:c7:7e:a3:bc:e3:18:fe:24:c8:19:b6:4a:ac:ed:dc:b9:
3a:b0:22:7f:6c:6c:87:b4:49:fc:9f:33:13:bc:62:00:23:d6:
c4:38:a9:0e:50:a5:aa:1f:c2:61:91:27:14:82:c6:d4:10:6d:
b7:58:d9:ad:95:2e:9d:b4:01:07:45:98:31:48:bd:f0:ca:8f:
c7:2f:7d:32:f5:68:73:21:1f:4b:bb:b4:80:04:d7:6c:5f:a0:
1f:2f:12:14:10:6b:8a:fe:61:b9:1d:11:c0:4b:d8:5c:fe:f1:
18:6f:03:3e:85:13:f6:21:97:03:5d:77:8c:19:28:a0:0b:ae:
e5:1f:34:ee:f2:26:77:37:5c:a3:83:33:85:68:3d:72:a0:21:
45:d2:ae:a4:df:1d:29:15:ef:eb:e3:a9:52:f8:03:61:10:25:
4b:42:41:c4:34:4d:4a:04:00:73:15:1e:6c:9d:41:77:df:97:
62:c8:88:ff:61:a9:2a:c8:9a:ea:fc:97:ed:aa:b2:d5:72:b9:
ca:cd:d2:11:fa:05:94:79:ca:a5:71:ad:af:ab:aa:98:34:0c:
d4:6d:f7:df:8d:db:7c:98:db:76:87:31:97:5c:9a:1d:72:a5:
2c:80:8f:7f
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICG3QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA1MDMw
NDI0MTRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDI3QUE4QzlFM0Q1QUQ2
OUU5MUU1MTIyRDY3NjYwNTZCNTFGNDU5Q0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDcxcyRb5bM1Ydphpv7xwsTFV2NhB0phYhabVWJDQMpZwetljtU
ughIU0zW841ehc/nL8Y2joUP234WMxufxi43hBScAO5UucI7GvTVhzO9RYshULOF
a8mtX7lvNuRk3s3tvPOSs+iM22onqeMvR7Dal3cabqEZfWuFGfT+rLERvV5lh0b/
zcXpoqNXJvJSAo6FJkMWxx2EnGtq9wHTuuti+BQJITql3+ANcDn6kgbKEX2jnK/Q
sXLo86LfJkoIxtKFAYDVQu9XnzDtI8ZK5lR4uLZNgMtxJqZ3gegbWgOs0e6PeLKV
qyRUNN3jWIZc4KVc7e91q1K3ZzBlrgghyKhxAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUJ6qMnj1a1p6R5RItZ2YFa1H0WcowHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL0o2cU1uajFhMXA2UjVS
SXRaMllGYTFIMFdjby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAZbSuokDhotUP9ciP2+I5HD3s3uLHfqO8
4xj+JMgZtkqs7dy5OrAif2xsh7RJ/J8zE7xiACPWxDipDlClqh/CYZEnFILG1BBt
t1jZrZUunbQBB0WYMUi98MqPxy99MvVocyEfS7u0gATXbF+gHy8SFBBriv5huR0R
wEvYXP7xGG8DPoUT9iGXA113jBkooAuu5R807vImdzdco4MzhWg9cqAhRdKupN8d
KRXv6+OpUvgDYRAlS0JBxDRNSgQAcxUebJ1Bd9+XYsiI/2GpKsia6vyX7aqy1XK5
ys3SEfoFlHnKpXGtr6uqmDQM1G33343bfJjbdocxl1yaHXKlLICPfw==
-----END CERTIFICATE-----
Generated at Fri May 3 08:28:09 2024 by rpki-client on console-fra.rpki-client.org