Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/PXqFQOYONo-AenUvmmKS7fcHUw4.roa
File: PXqFQOYONo-AenUvmmKS7fcHUw4.roa (raw, json)
Hash identifier: aVmjRr6Tip7tvbzVtzlB7ocxZO6SJVAcxjjV2Xus6Ho=
Subject key identifier: 3D:7A:85:40:E6:0E:36:8F:80:7A:75:2F:9A:62:92:ED:F7:07:53:0E
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1DA2
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/PXqFQOYONo-AenUvmmKS7fcHUw4.roa
Signing time: Wed 08 May 2024 23:54:21 +0000
ROA not before: Wed 08 May 2024 23:54:21 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7586 (0x1da2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 8 23:54:21 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3D7A8540E60E368F807A752F9A6292EDF707530E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8b:e2:e9:c4:54:3f:b7:80:70:ce:eb:fe:60:
f4:da:64:b1:79:fd:4b:90:b7:12:44:73:a6:79:39:
8d:8a:10:65:77:cb:7f:e0:3f:b9:27:c0:1d:a4:10:
01:7c:f8:fb:ab:a2:89:ee:73:e7:b9:fa:0f:6a:1a:
20:55:86:11:a8:a3:88:e6:86:67:17:d4:88:46:94:
38:95:e1:f4:12:08:4a:52:2c:65:22:e0:9c:0d:25:
7c:77:f7:7b:79:a6:be:07:6d:01:01:37:b4:0a:2f:
b3:9e:78:9d:88:b8:a1:65:c0:74:a7:7f:fa:24:49:
77:87:b0:ee:27:3d:38:a5:2f:2d:41:cb:77:d6:0e:
b2:b2:2c:9a:7d:8f:e1:5c:77:b1:b7:ea:7f:b5:3a:
ef:2f:f5:00:dd:86:ed:b8:b7:14:97:59:16:47:6f:
30:1c:ec:d4:80:f5:ad:d0:82:58:fd:cc:26:5d:81:
91:9b:da:ec:1c:4f:2f:19:ff:70:2a:d0:b4:71:51:
a2:28:0a:07:99:b0:a0:61:ed:34:62:b3:f7:6a:43:
99:9d:a5:4b:a1:7b:36:eb:13:c7:e5:d3:dc:77:0b:
c7:ef:d6:04:5c:76:ba:5c:10:71:3f:24:c5:b1:5e:
d2:f2:ba:f4:fa:39:7e:f9:74:d6:20:fb:23:fb:dd:
6c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7A:85:40:E6:0E:36:8F:80:7A:75:2F:9A:62:92:ED:F7:07:53:0E
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/PXqFQOYONo-AenUvmmKS7fcHUw4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c2:77:d7:8e:2a:dc:81:5d:d5:15:ac:10:7f:07:d7:91:3e:64:
4c:80:ab:6a:b3:fb:ac:77:33:28:06:cb:b8:a7:31:6b:55:89:
1b:94:bd:17:d0:d0:50:c0:41:64:cc:b2:59:c6:67:b2:cc:98:
95:ba:06:47:b6:78:0f:d9:6a:88:c1:49:8e:69:b9:7a:d5:81:
3a:b1:8a:cd:36:04:48:fe:45:bd:76:a5:24:fc:66:61:4b:47:
7b:9a:cb:60:a4:dc:3c:e8:6a:30:76:cc:c6:70:c1:ca:b9:f9:
01:de:ce:ac:e5:5d:a3:f8:61:ed:33:84:c6:50:63:63:0f:45:
96:bd:4b:3d:12:5d:55:13:bf:10:22:c7:84:e9:8e:96:9a:47:
45:a7:a2:62:09:a0:59:25:3c:58:91:6e:f2:91:19:f4:fd:40:
fd:a8:6c:9f:ab:5d:78:f8:d0:7b:fc:9e:af:ab:9d:b3:27:8e:
27:31:20:d3:0e:10:62:14:ae:b6:98:2e:5a:37:b4:59:cb:e3:
e6:b4:76:39:7a:4c:e5:3d:69:cd:cd:bb:63:87:17:1c:53:32:
da:43:b0:5c:ac:2c:95:36:56:41:8a:2a:6a:77:30:92:82:40:
5c:51:5f:b0:e4:ef:fc:f3:ae:5e:4f:81:94:25:95:91:df:c4:
4c:5d:e9:92
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICHaIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA1MDgy
MzU0MjFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDNEN0E4NTQwRTYwRTM2
OEY4MDdBNzUyRjlBNjI5MkVERjcwNzUzMEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/i+LpxFQ/t4Bwzuv+YPTaZLF5/UuQtxJEc6Z5OY2KEGV3y3/g
P7knwB2kEAF8+Puroonuc+e5+g9qGiBVhhGoo4jmhmcX1IhGlDiV4fQSCEpSLGUi
4JwNJXx393t5pr4HbQEBN7QKL7OeeJ2IuKFlwHSnf/okSXeHsO4nPTilLy1By3fW
DrKyLJp9j+Fcd7G36n+1Ou8v9QDdhu24txSXWRZHbzAc7NSA9a3Qglj9zCZdgZGb
2uwcTy8Z/3Aq0LRxUaIoCgeZsKBh7TRis/dqQ5mdpUuhezbrE8fl09x3C8fv1gRc
drpcEHE/JMWxXtLyuvT6OX75dNYg+yP73WyfAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUPXqFQOYONo+AenUvmmKS7fcHUw4wHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL1BYcUZRT1lPTm8tQWVu
VXZtbUtTN2ZjSFV3NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAwnfXjircgV3VFawQfwfXkT5kTICrarP7
rHczKAbLuKcxa1WJG5S9F9DQUMBBZMyyWcZnssyYlboGR7Z4D9lqiMFJjmm5etWB
OrGKzTYESP5FvXalJPxmYUtHe5rLYKTcPOhqMHbMxnDByrn5Ad7OrOVdo/hh7TOE
xlBjYw9Flr1LPRJdVRO/ECLHhOmOlppHRaeiYgmgWSU8WJFu8pEZ9P1A/ahsn6td
ePjQe/yer6udsyeOJzEg0w4QYhSutpguWje0Wcvj5rR2OXpM5T1pzc27Y4cXHFMy
2kOwXKwslTZWQYoqancwkoJAXFFfsOTv/POuXk+BlCWVkd/ETF3pkg==
-----END CERTIFICATE-----
Generated at Thu May 9 01:34:37 2024 by rpki-client on console-fra.rpki-client.org