Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/Llz8fetaiUGWh3gfGFvGxUgfxM8.roa
File: Llz8fetaiUGWh3gfGFvGxUgfxM8.roa (raw, json)
Hash identifier: PXm8rwGR/XS0Y+1LUraCAR5znrMQU4JuEdC2NfXFPuQ=
Subject key identifier: 2E:5C:FC:7D:EB:5A:89:41:96:87:78:1F:18:5B:C6:C5:48:1F:C4:CF
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1510
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Llz8fetaiUGWh3gfGFvGxUgfxM8.roa
Signing time: Tue 16 Apr 2024 03:23:22 +0000
ROA not before: Tue 16 Apr 2024 03:23:22 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5392 (0x1510)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 16 03:23:22 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2E5CFC7DEB5A89419687781F185BC6C5481FC4CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f3:7c:3d:dc:75:4a:01:48:cc:24:00:c5:09:
d9:e1:a1:05:5b:31:27:33:96:f9:75:df:78:14:ad:
de:e4:2f:85:13:29:5d:0e:64:90:bb:76:38:ae:3e:
fe:29:e9:85:2a:d1:5a:4d:8e:2c:7a:75:95:5e:4b:
9f:4f:dd:90:77:fe:5b:df:4f:77:f7:a3:66:86:fc:
92:c1:03:cc:36:3e:4a:56:a6:69:89:cb:87:c8:36:
36:65:d4:ef:d1:43:47:df:cd:ce:ec:a0:44:0e:9c:
60:d5:88:c0:7e:d6:88:83:4e:79:89:1d:5e:84:15:
dc:c7:bf:ce:26:6b:5c:25:2e:1d:d1:6e:4b:b5:e1:
2f:15:57:af:54:c5:aa:d0:da:16:f2:b0:e1:16:bb:
51:c0:07:5a:9e:ec:68:d9:b2:21:b0:41:e4:8f:94:
eb:6b:6b:32:64:82:3a:e8:76:a7:68:8a:0f:d9:04:
6b:d1:5a:76:1e:c6:0a:f2:7b:de:e2:c3:c3:1c:99:
a7:47:04:5f:76:57:d5:41:6b:15:f7:b4:e7:46:fd:
05:be:db:50:e6:39:e2:4c:2b:4c:d2:00:19:f9:e7:
d2:da:0f:d6:cc:62:a4:e5:2c:43:2c:51:e3:98:a5:
88:43:43:aa:f3:92:43:e0:39:ec:96:a9:e1:d3:cd:
22:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5C:FC:7D:EB:5A:89:41:96:87:78:1F:18:5B:C6:C5:48:1F:C4:CF
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Llz8fetaiUGWh3gfGFvGxUgfxM8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
15:b7:65:52:4d:3c:1c:09:9d:68:24:cf:91:97:27:a4:de:1c:
cd:70:b1:eb:da:5c:e7:1d:ec:c8:c4:66:23:50:02:c4:f0:68:
86:dc:79:ed:23:a5:23:c1:23:a9:3f:bb:ed:a1:2e:49:a6:d5:
2c:cb:66:66:a3:b0:9f:c2:61:08:e4:63:8a:13:80:a1:26:f3:
d4:04:fa:7c:4d:44:2f:92:94:91:4d:a3:97:38:08:49:f0:51:
25:ce:89:95:e5:5b:49:25:bc:45:d7:c1:38:16:1f:db:31:4d:
58:e8:d7:e8:ea:e2:16:4b:7f:e1:89:1d:89:d8:c8:fc:91:e4:
7e:49:07:c3:a9:54:1e:2d:7d:a9:a5:33:ae:a8:81:0a:14:75:
bc:eb:38:d5:82:7d:f3:d0:eb:e8:53:c3:1f:21:bb:ce:1d:46:
d9:91:e0:02:c3:4e:99:a6:3a:00:6f:2b:61:81:46:66:12:f1:
1b:d6:e8:19:7a:99:6f:8e:e2:2d:7c:09:0c:15:9a:60:e8:0a:
7e:42:b5:80:67:39:39:f3:52:d8:87:2b:c2:d6:d5:51:cf:f3:
0b:85:06:65:e9:77:76:52:66:ff:26:6b:61:f1:e0:25:73:72:
84:61:35:d7:5b:c3:7b:21:b8:23:b8:4a:77:e8:32:fe:ad:69:
b8:90:0e:ff
-----BEGIN CERTIFICATE-----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Generated at Tue Apr 16 04:25:27 2024 by rpki-client on console-fra.rpki-client.org