Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/OYGwbDv3yNhNuU4YOajC5h-iuMw.roa
File: OYGwbDv3yNhNuU4YOajC5h-iuMw.roa (raw, json)
Hash identifier: MBdkWFeTjxLaMhIECxJy6PX5d7IbZY3JNdoJRefTTR8=
Subject key identifier: 39:81:B0:6C:3B:F7:C8:D8:4D:B9:4E:18:39:A8:C2:E6:1F:A2:B8:CC
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1618
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/OYGwbDv3yNhNuU4YOajC5h-iuMw.roa
Signing time: Thu 18 Apr 2024 21:23:36 +0000
ROA not before: Thu 18 Apr 2024 21:23:36 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5656 (0x1618)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 18 21:23:36 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3981B06C3BF7C8D84DB94E1839A8C2E61FA2B8CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:77:da:8c:3e:41:9f:11:9c:f3:f9:65:c5:3a:
4e:f0:13:88:f2:6b:b6:f2:75:8d:d8:54:b9:67:66:
94:8f:3a:1e:87:12:03:08:22:eb:f7:07:b6:55:77:
5b:c1:bc:ab:bc:57:71:37:b5:b4:2a:0a:b1:21:df:
bb:b0:85:da:2b:ed:e2:70:b6:f1:a4:fb:17:7d:b3:
c0:c0:45:9c:48:dd:c6:3a:17:33:3a:e7:31:08:03:
d3:d9:04:b4:2f:22:d1:0f:eb:39:1f:ea:71:03:a5:
9e:4c:66:65:9e:5c:42:22:17:42:9f:5d:68:d8:5c:
75:be:25:b5:7b:7e:ac:14:3e:b2:8c:b2:90:b9:1a:
9b:18:01:62:cb:34:0d:a3:e0:54:d4:a3:5f:9b:b0:
5e:f0:24:bd:c6:70:33:cb:23:33:30:02:2a:a1:6d:
d4:b2:e2:61:ca:ab:62:47:1f:aa:d1:60:c3:3e:2a:
2f:72:45:0e:47:32:61:0a:0f:9d:f6:3d:d8:55:76:
4e:70:5f:7f:44:4f:13:2e:8b:9f:34:0d:3a:75:93:
b2:58:2b:87:44:62:58:65:5f:c0:61:04:1d:9f:1b:
82:35:59:8a:44:fe:06:21:87:ca:6c:d9:bd:78:56:
27:e7:e4:f8:61:99:0e:78:4e:5d:f5:c2:bb:12:30:
d2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:81:B0:6C:3B:F7:C8:D8:4D:B9:4E:18:39:A8:C2:E6:1F:A2:B8:CC
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/OYGwbDv3yNhNuU4YOajC5h-iuMw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
18:b7:23:87:ac:0c:84:b0:e9:3b:04:35:7d:0f:17:86:65:c0:
f9:a0:74:4c:72:b7:31:b0:64:c2:5d:34:15:7d:24:be:01:6f:
a3:ab:62:01:3a:83:f7:c2:a6:d9:04:b8:b6:94:a5:5a:e0:7d:
57:af:4b:79:37:e1:dc:e1:ff:74:e3:2f:15:43:78:a0:53:46:
dc:09:b2:6e:b8:d6:25:5a:99:25:6e:af:5f:e2:a8:40:1e:b7:
1f:30:60:00:d1:2c:03:a6:c3:f2:17:ee:00:21:9a:23:9a:79:
9b:3b:70:a0:66:06:12:31:72:60:bb:39:f6:84:61:d8:71:e1:
05:88:68:33:77:fa:5d:52:f1:fb:f1:16:52:28:35:08:57:17:
57:15:af:6c:3d:83:6c:03:9b:8b:bb:ff:84:16:a2:a9:9f:d2:
a2:22:46:54:83:c4:d4:68:da:40:44:54:e1:9c:a6:00:bb:87:
18:74:80:da:28:a3:4b:a1:fa:09:32:59:b5:50:32:92:09:bb:
91:f6:10:13:27:2c:b1:67:41:d0:db:76:81:7f:b6:d0:2c:62:
38:79:83:45:b0:f1:2b:5d:6a:92:eb:bc:fb:7c:4d:c6:fb:31:
26:5d:e9:c7:8e:fa:c6:cf:98:30:25:51:fd:a9:e9:61:5d:ab:
7c:39:1a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 22:49:08 2024 by rpki-client on console-fra.rpki-client.org