Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/Od8i6MPrdMcR1wNSJAMgo6abPDw.roa
File: Od8i6MPrdMcR1wNSJAMgo6abPDw.roa (raw, json)
Hash identifier: 7CdhGme0imuvyh6qhyFZYSczFlQtQYzv5uohBmnYS2Y=
Subject key identifier: 39:DF:22:E8:C3:EB:74:C7:11:D7:03:52:24:03:20:A3:A6:9B:3C:3C
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1A9E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Od8i6MPrdMcR1wNSJAMgo6abPDw.roa
Signing time: Tue 30 Apr 2024 22:54:00 +0000
ROA not before: Tue 30 Apr 2024 22:54:00 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6814 (0x1a9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 30 22:54:00 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=39DF22E8C3EB74C711D70352240320A3A69B3C3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1a:79:37:68:cc:47:c1:33:1c:3f:d1:c0:94:
47:a7:a4:01:42:62:69:04:e6:2e:6a:f7:4d:b1:b0:
02:ce:bc:cb:97:ba:be:ed:0b:d9:fe:b1:72:34:ae:
dd:27:d5:f3:91:c2:be:b2:54:cc:3c:68:36:3e:4c:
ce:71:2d:29:00:04:69:f3:95:21:06:a0:1a:ea:9c:
11:3e:96:47:0b:0b:46:4e:83:1b:1d:94:7c:3b:17:
d6:c4:22:de:93:61:0c:7e:3f:a4:be:7d:18:3b:fe:
42:a6:89:31:12:59:b6:ed:43:2b:34:5a:4a:5d:df:
91:cd:bd:b5:fe:f1:6e:8e:76:8a:a0:d7:53:d8:2f:
1a:32:12:ec:a3:f2:84:0e:ec:53:f4:51:ef:60:47:
46:53:e3:93:48:72:3f:ba:0a:28:3e:00:38:a7:7b:
80:a2:9a:3b:5a:f6:e5:7d:4c:e2:4a:4c:44:cb:b8:
1d:4a:7e:03:40:9d:20:27:c0:6d:44:ce:df:d3:7d:
0d:40:77:3d:d6:2f:65:7d:3d:65:12:a6:32:76:88:
cb:ee:9d:2f:14:dc:b3:33:47:4e:0b:a1:77:9a:b6:
da:4e:55:ca:fc:07:b7:18:26:08:13:0b:4d:dc:4b:
f9:d2:d8:e7:9b:3f:4e:51:aa:af:6c:0b:08:51:63:
f8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DF:22:E8:C3:EB:74:C7:11:D7:03:52:24:03:20:A3:A6:9B:3C:3C
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Od8i6MPrdMcR1wNSJAMgo6abPDw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a8:d4:62:92:41:25:a4:e4:db:df:19:20:44:3a:43:41:5b:84:
72:41:6f:2e:18:12:1c:e0:cc:4a:64:49:95:30:9f:2c:a1:53:
26:e4:e4:79:36:fd:84:42:4a:6e:c0:0c:80:bf:d2:2d:70:4c:
2d:1d:42:f9:15:ec:2e:cf:79:b2:93:8b:9d:b1:fd:79:61:f3:
a1:2c:55:7d:82:84:e3:68:cd:49:4a:a3:01:b4:c4:cc:d9:c2:
61:e3:09:f8:ca:27:e0:19:b8:69:15:7f:08:a4:4a:19:7b:e4:
82:bf:b2:6c:9e:08:9a:a0:8c:93:a4:60:ce:d3:d7:39:b1:4a:
e3:a7:88:40:13:84:65:f0:68:61:ce:91:6a:37:7d:65:92:c3:
cb:68:ef:03:18:58:10:62:a9:74:9e:5b:d9:46:21:1b:22:61:
3c:51:73:8c:76:28:23:53:be:3a:69:c4:76:94:db:d2:4a:65:
83:91:be:90:af:ce:09:ad:19:57:98:18:ea:4a:73:55:b6:43:
f7:50:9d:df:41:6b:14:3a:e0:98:c4:5c:00:ad:ad:d0:8f:8e:
e8:49:51:b9:5b:f1:4d:1c:a6:1e:1c:67:01:62:ec:7e:d4:ed:
8e:33:02:e6:f2:7e:64:96:79:39:e4:b8:01:0e:69:90:01:dc:
9d:ec:98:36
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICGp4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MzAy
MjU0MDBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDM5REYyMkU4QzNFQjc0
QzcxMUQ3MDM1MjI0MDMyMEEzQTY5QjNDM0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDtGnk3aMxHwTMcP9HAlEenpAFCYmkE5i5q902xsALOvMuXur7t
C9n+sXI0rt0n1fORwr6yVMw8aDY+TM5xLSkABGnzlSEGoBrqnBE+lkcLC0ZOgxsd
lHw7F9bEIt6TYQx+P6S+fRg7/kKmiTESWbbtQys0Wkpd35HNvbX+8W6Odoqg11PY
LxoyEuyj8oQO7FP0Ue9gR0ZT45NIcj+6Cig+ADine4Cimjta9uV9TOJKTETLuB1K
fgNAnSAnwG1Ezt/TfQ1Adz3WL2V9PWUSpjJ2iMvunS8U3LMzR04LoXeattpOVcr8
B7cYJggTC03cS/nS2OebP05Rqq9sCwhRY/jZAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUOd8i6MPrdMcR1wNSJAMgo6abPDwwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL09kOGk2TVByZE1jUjF3
TlNKQU1nbzZhYlBEdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAqNRikkElpOTb3xkgRDpDQVuEckFvLhgS
HODMSmRJlTCfLKFTJuTkeTb9hEJKbsAMgL/SLXBMLR1C+RXsLs95spOLnbH9eWHz
oSxVfYKE42jNSUqjAbTEzNnCYeMJ+Mon4Bm4aRV/CKRKGXvkgr+ybJ4ImqCMk6Rg
ztPXObFK46eIQBOEZfBoYc6Rajd9ZZLDy2jvAxhYEGKpdJ5b2UYhGyJhPFFzjHYo
I1O+OmnEdpTb0kplg5G+kK/OCa0ZV5gY6kpzVbZD91Cd30FrFDrgmMRcAK2t0I+O
6ElRuVvxTRymHhxnAWLsftTtjjMC5vJ+ZJZ5OeS4AQ5pkAHcneyYNg==
-----END CERTIFICATE-----
Generated at Wed May 1 00:25:07 2024 by rpki-client on console-fra.rpki-client.org