Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/O51mpQdwO8vk2ZL6ZFKj4ZMq3YY.roa
File: O51mpQdwO8vk2ZL6ZFKj4ZMq3YY.roa (raw, json)
Hash identifier: sOGta41X360iESSDosN9cI9gAlybU/gS4GeczEhVtFg=
Subject key identifier: 3B:9D:66:A5:07:70:3B:CB:E4:D9:92:FA:64:52:A3:E1:93:2A:DD:86
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0FD0
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/O51mpQdwO8vk2ZL6ZFKj4ZMq3YY.roa
Signing time: Tue 02 Apr 2024 03:23:29 +0000
ROA not before: Tue 02 Apr 2024 03:23:29 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4048 (0xfd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 2 03:23:29 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3B9D66A507703BCBE4D992FA6452A3E1932ADD86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fb:97:64:2e:5a:52:fb:3c:ec:bc:4d:51:d8:
a5:af:f0:94:9a:38:3b:8b:25:78:4e:07:8a:c8:f9:
5a:b0:bf:b5:c4:4d:21:f4:1a:91:f9:21:71:bd:56:
c8:5b:40:2f:82:84:c4:4c:52:c2:7f:85:95:22:cd:
d1:54:b5:78:57:da:b4:f3:ce:7b:7e:62:38:8f:9d:
5c:3d:35:b9:7a:cf:44:5d:03:6e:fd:d8:fd:44:63:
d7:7c:bc:3e:06:06:a1:cd:b1:af:66:b8:43:4f:a6:
28:d5:4d:88:22:3d:20:d8:75:17:bf:ca:b0:0f:67:
ed:51:0a:72:e4:b8:56:6f:6c:dc:a9:77:66:98:21:
51:a5:ac:83:10:cf:6c:df:26:31:cf:4f:32:03:7f:
95:aa:65:5c:a7:87:98:78:97:33:14:7d:f8:41:3e:
9b:e3:db:15:fa:12:6e:36:2e:44:a4:c6:30:40:4e:
da:a3:86:d3:dc:d0:bb:24:b7:02:68:34:62:3e:3c:
a8:33:1d:3f:db:91:52:4b:f4:a9:ba:2d:ec:d7:0d:
bc:e1:c7:f9:ad:19:ce:f6:7c:30:ff:33:58:65:c8:
b3:3f:cc:17:d1:72:9f:b0:65:06:0d:ca:27:59:ae:
12:63:9b:fd:91:80:6d:f2:09:79:d8:69:09:2b:bd:
de:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9D:66:A5:07:70:3B:CB:E4:D9:92:FA:64:52:A3:E1:93:2A:DD:86
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/O51mpQdwO8vk2ZL6ZFKj4ZMq3YY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
28:9e:d3:32:d1:e3:5a:c4:d5:8e:7b:05:b8:e5:77:78:a0:e8:
09:c4:d8:8e:9e:b0:fc:cf:d1:db:53:d4:08:ae:28:1e:7e:be:
a1:62:52:69:23:99:45:45:81:78:26:6e:f4:6f:50:e4:10:f2:
6e:9b:ec:e3:c3:6c:9e:3a:ad:52:70:50:fd:1b:e7:98:53:9d:
13:d1:4e:cf:37:44:98:e8:be:34:7d:ce:11:47:19:11:f6:cc:
14:bd:7f:49:10:13:d7:fb:76:a6:b5:d3:11:ea:c6:d7:8f:17:
75:e9:57:85:de:4c:8a:7f:3d:f4:e2:89:3d:84:86:f3:12:9a:
af:f9:1c:12:8c:22:6a:70:c8:b8:fc:a4:76:81:95:1a:f7:29:
b9:0a:2c:22:7b:6f:3d:3f:9f:9b:a8:00:4d:51:4d:1a:fe:ef:
d6:cd:e5:a8:e1:56:28:e6:3d:8a:88:fd:f8:fc:47:c5:79:09:
ac:ca:2e:51:ad:ae:20:f4:7d:d6:59:45:e1:1c:47:b4:f2:16:
33:48:a8:ad:6a:95:ff:37:b5:81:cd:cf:f1:25:44:d4:52:da:
73:b8:04:8c:5f:66:1f:6c:57:a1:a3:df:af:71:3a:2a:ff:ac:
ea:dd:e1:f1:b9:18:c5:f9:93:7b:00:97:68:4b:ba:58:20:ae:
1c:44:77:21
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICD9AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MDIw
MzIzMjlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDNCOUQ2NkE1MDc3MDNC
Q0JFNEQ5OTJGQTY0NTJBM0UxOTMyQUREODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1+5dkLlpS+zzsvE1R2KWv8JSaODuLJXhOB4rI+Vqwv7XETSH0
GpH5IXG9VshbQC+ChMRMUsJ/hZUizdFUtXhX2rTzznt+YjiPnVw9Nbl6z0RdA279
2P1EY9d8vD4GBqHNsa9muENPpijVTYgiPSDYdRe/yrAPZ+1RCnLkuFZvbNypd2aY
IVGlrIMQz2zfJjHPTzIDf5WqZVynh5h4lzMUffhBPpvj2xX6Em42LkSkxjBATtqj
htPc0LsktwJoNGI+PKgzHT/bkVJL9Km6LezXDbzhx/mtGc72fDD/M1hlyLM/zBfR
cp+wZQYNyidZrhJjm/2RgG3yCXnYaQkrvd7fAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUO51mpQdwO8vk2ZL6ZFKj4ZMq3YYwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL081MW1wUWR3Tzh2azJa
TDZaRktqNFpNcTNZWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAKJ7TMtHjWsTVjnsFuOV3eKDoCcTYjp6w
/M/R21PUCK4oHn6+oWJSaSOZRUWBeCZu9G9Q5BDybpvs48NsnjqtUnBQ/RvnmFOd
E9FOzzdEmOi+NH3OEUcZEfbMFL1/SRAT1/t2prXTEerG148XdelXhd5Min899OKJ
PYSG8xKar/kcEowianDIuPykdoGVGvcpuQosIntvPT+fm6gATVFNGv7v1s3lqOFW
KOY9ioj9+PxHxXkJrMouUa2uIPR91llF4RxHtPIWM0iorWqV/ze1gc3P8SVE1FLa
c7gEjF9mH2xXoaPfr3E6Kv+s6t3h8bkYxfmTewCXaEu6WCCuHER3IQ==
-----END CERTIFICATE-----
Generated at Tue Apr 2 05:11:07 2024 by rpki-client on console-fra.rpki-client.org