Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/K8uOR_6OEpIVXHgKRoJgA0LXApM.roa
File: K8uOR_6OEpIVXHgKRoJgA0LXApM.roa (raw, json)
Hash identifier: Q70ESIVcDaFGLzIiRpK399YmhDYbFvFSnRKFBpkFWuo=
Subject key identifier: 2B:CB:8E:47:FE:8E:12:92:15:5C:78:0A:46:82:60:03:42:D7:02:93
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0F70
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/K8uOR_6OEpIVXHgKRoJgA0LXApM.roa
Signing time: Mon 01 Apr 2024 03:22:38 +0000
ROA not before: Mon 01 Apr 2024 03:22:38 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3952 (0xf70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 1 03:22:38 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2BCB8E47FE8E1292155C780A4682600342D70293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:90:25:65:0b:48:ac:22:11:81:7c:db:2f:5e:
c6:ee:5e:6f:54:1a:79:6e:0b:b4:ca:03:c7:a9:e1:
f4:aa:47:66:9f:f2:c4:bd:a3:54:7a:d1:7f:8f:96:
4f:80:30:0a:8c:e1:93:06:74:ab:ff:48:ee:20:94:
ca:45:0e:a5:be:df:25:05:7b:ce:d3:a2:c4:96:f3:
52:d9:9a:a0:1f:47:cf:4c:7f:03:18:f4:e8:c6:84:
24:31:b1:3d:a1:d4:3a:8a:ed:8f:cc:1d:15:d9:16:
31:f4:fb:c1:40:06:53:d3:80:67:54:cf:09:e4:46:
6d:98:cc:3d:26:07:1d:d9:61:74:30:c8:89:d7:bf:
a1:34:3e:e9:5e:f8:bf:5b:e1:76:f8:ad:d9:96:3b:
c8:78:8a:8f:c6:7d:9a:96:f8:a3:41:f3:79:6d:21:
81:db:c7:9c:34:bc:3f:92:f6:95:47:d4:65:bc:f4:
11:10:2d:e1:13:93:89:32:b9:41:20:0d:c3:ca:4e:
fd:37:cb:d3:50:11:26:e6:00:31:0c:38:52:3a:5c:
30:8e:2e:62:a0:31:32:3c:9c:c5:0c:86:3d:cc:ec:
94:89:11:ae:8b:19:7a:b4:de:c8:86:ac:e6:be:2b:
8f:75:49:0b:5b:ff:dc:5e:22:fd:f7:de:e1:f6:c4:
e0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CB:8E:47:FE:8E:12:92:15:5C:78:0A:46:82:60:03:42:D7:02:93
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/K8uOR_6OEpIVXHgKRoJgA0LXApM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7d:96:a3:b6:f0:0d:53:87:05:e6:66:c9:18:19:6e:d2:ad:6a:
33:8f:13:99:c4:b7:76:57:c8:f1:18:63:1f:0d:96:be:8f:3b:
76:66:fb:20:ea:9a:4e:2d:1b:49:9b:4e:2e:63:ec:f3:59:63:
78:6a:86:ae:92:8b:5e:94:b3:44:e1:8c:49:fb:c5:c5:89:11:
17:34:3e:4b:0f:6a:b0:d8:d5:e9:a0:76:91:1b:ac:9c:48:45:
4f:b3:d5:26:39:27:82:cf:ca:d6:20:e0:2c:5b:2b:a4:b9:a3:
eb:d7:c2:a6:b9:be:6d:b0:29:0f:42:d1:4d:89:07:dc:62:ba:
ba:10:6f:f0:d3:56:2d:38:6c:d2:f2:f0:8c:58:b5:c2:dc:f1:
6e:a9:63:85:00:d8:0b:29:9a:fb:2d:5f:a9:1d:34:d2:3b:e6:
3e:a1:b7:11:bb:45:6f:ed:92:6d:cd:b9:b6:51:bb:4a:76:b7:
48:f0:a8:ad:d7:68:d3:b6:f1:51:60:71:25:de:5a:a4:2d:85:
35:13:c5:95:c4:1e:4d:bc:00:33:05:a5:e5:f8:b1:8e:e1:b7:
35:4c:de:47:6b:8c:14:df:cd:65:c5:63:ce:68:f7:c1:87:d9:
71:4b:68:00:5f:dd:ee:94:cd:09:34:82:4c:55:e6:c1:3e:67:
93:8b:a3:5a
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICD3AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MDEw
MzIyMzhaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDJCQ0I4RTQ3RkU4RTEy
OTIxNTVDNzgwQTQ2ODI2MDAzNDJENzAyOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDbkCVlC0isIhGBfNsvXsbuXm9UGnluC7TKA8ep4fSqR2af8sS9
o1R60X+Plk+AMAqM4ZMGdKv/SO4glMpFDqW+3yUFe87TosSW81LZmqAfR89MfwMY
9OjGhCQxsT2h1DqK7Y/MHRXZFjH0+8FABlPTgGdUzwnkRm2YzD0mBx3ZYXQwyInX
v6E0Pule+L9b4Xb4rdmWO8h4io/GfZqW+KNB83ltIYHbx5w0vD+S9pVH1GW89BEQ
LeETk4kyuUEgDcPKTv03y9NQESbmADEMOFI6XDCOLmKgMTI8nMUMhj3M7JSJEa6L
GXq03siGrOa+K491SQtb/9xeIv333uH2xOBVAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUK8uOR/6OEpIVXHgKRoJgA0LXApMwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL0s4dU9SXzZPRXBJVlhI
Z0tSb0pnQTBMWEFwTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAfZajtvANU4cF5mbJGBlu0q1qM48TmcS3
dlfI8RhjHw2Wvo87dmb7IOqaTi0bSZtOLmPs81ljeGqGrpKLXpSzROGMSfvFxYkR
FzQ+Sw9qsNjV6aB2kRusnEhFT7PVJjkngs/K1iDgLFsrpLmj69fCprm+bbApD0LR
TYkH3GK6uhBv8NNWLThs0vLwjFi1wtzxbqljhQDYCyma+y1fqR000jvmPqG3EbtF
b+2Sbc25tlG7Sna3SPCorddo07bxUWBxJd5apC2FNRPFlcQeTbwAMwWl5fixjuG3
NUzeR2uMFN/NZcVjzmj3wYfZcUtoAF/d7pTNCTSCTFXmwT5nk4ujWg==
-----END CERTIFICATE-----
Generated at Mon Apr 1 06:35:43 2024 by rpki-client on console-ams.rpki-client.org