Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/Q-M55Kcx-c4fXbz1BSuaQnj9Uho.roa
File: Q-M55Kcx-c4fXbz1BSuaQnj9Uho.roa (raw, json)
Hash identifier: 9FuNABTvgnL72XJgsee/vRHp5jM0H+SGfuOD7i8ukI4=
Subject key identifier: 43:E3:39:E4:A7:31:F9:CE:1F:5D:BC:F5:05:2B:9A:42:78:FD:52:1A
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1870
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Q-M55Kcx-c4fXbz1BSuaQnj9Uho.roa
Signing time: Thu 25 Apr 2024 03:23:42 +0000
ROA not before: Thu 25 Apr 2024 03:23:42 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6256 (0x1870)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 25 03:23:42 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=43E339E4A731F9CE1F5DBCF5052B9A4278FD521A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:20:41:4b:98:96:e2:46:e7:e8:f3:86:c9:0a:
85:d2:a4:5f:06:f7:16:b8:74:11:04:60:ff:40:ae:
5f:10:08:18:dd:37:bd:14:04:5d:18:17:6b:4e:40:
5a:ed:03:a5:67:65:16:07:86:10:5c:b0:41:54:f1:
96:3b:e0:90:9b:21:25:4b:aa:4a:07:3d:09:2d:06:
57:c1:fa:d5:ad:0f:a3:d0:ae:09:3e:6e:22:40:30:
81:e3:96:1e:9b:a9:94:64:ff:40:c5:98:c9:5e:ce:
2b:26:f5:b0:00:76:ae:1c:ae:98:a9:6a:88:b2:13:
67:48:23:14:19:96:ca:0f:0d:25:70:cd:65:43:a9:
ac:b8:79:59:f5:9b:2d:4d:4c:6a:38:23:1f:63:74:
6e:c0:87:28:90:39:02:94:6c:32:ce:95:18:e4:62:
d9:05:45:07:95:d8:26:c9:94:0b:3e:de:16:36:a5:
09:ae:72:28:6d:bd:f9:fe:3e:18:e7:3f:07:08:2d:
ca:77:e5:7f:15:c0:78:4b:13:c7:07:ff:86:72:98:
01:9b:1f:03:f5:e1:29:5e:ed:fb:31:e0:7a:04:6a:
7a:48:9f:7c:64:a2:76:1e:7f:ef:3a:48:cb:01:ac:
75:23:36:c5:f7:62:94:0c:ae:86:e7:3c:59:97:d4:
99:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E3:39:E4:A7:31:F9:CE:1F:5D:BC:F5:05:2B:9A:42:78:FD:52:1A
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Q-M55Kcx-c4fXbz1BSuaQnj9Uho.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c3:66:e1:c7:1f:a9:e9:45:e6:89:2f:23:79:67:ac:0d:e4:e7:
db:fe:ff:39:01:9c:95:ec:47:fc:70:31:50:07:1b:f8:83:70:
0f:de:42:d5:5d:bc:e4:c6:a9:b6:cf:43:d0:4b:2c:18:0c:bf:
a7:9d:99:a3:2c:64:1c:b5:c2:8c:c1:a5:ed:6e:55:5b:0d:fc:
fd:ee:02:aa:f3:50:92:81:a5:bd:ae:2c:2c:fe:1d:6e:5b:33:
eb:eb:2a:69:51:6d:e0:94:8a:0e:6c:eb:f2:7c:b1:0d:c0:a6:
6a:4d:ea:54:24:09:4d:3a:ee:1d:da:30:cd:ee:20:95:14:57:
39:55:d1:06:1f:ed:ad:2c:09:d7:a3:1d:2d:6c:ad:92:b0:47:
11:96:50:e0:79:ee:1a:86:63:10:9f:71:a2:dd:d1:08:de:ff:
63:e8:55:5d:1a:59:0a:0f:ef:3a:8d:79:20:f2:c9:e5:dc:19:
8b:f8:6e:a1:86:d4:11:40:c2:18:e2:20:c8:01:ad:5b:4d:5c:
01:b9:da:65:35:1e:01:5f:91:4a:6a:e3:14:98:d7:29:8d:20:
9e:2a:40:70:03:7c:b3:b4:bf:58:4c:00:51:1c:e9:ab:f2:c7:
c0:f8:1d:30:9b:c3:59:cc:ea:77:7e:be:a2:6c:66:3a:75:0f:
23:55:8f:9d
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICGHAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MjUw
MzIzNDJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDQzRTMzOUU0QTczMUY5
Q0UxRjVEQkNGNTA1MkI5QTQyNzhGRDUyMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDpIEFLmJbiRufo84bJCoXSpF8G9xa4dBEEYP9Arl8QCBjdN70U
BF0YF2tOQFrtA6VnZRYHhhBcsEFU8ZY74JCbISVLqkoHPQktBlfB+tWtD6PQrgk+
biJAMIHjlh6bqZRk/0DFmMlezism9bAAdq4crpipaoiyE2dIIxQZlsoPDSVwzWVD
qay4eVn1my1NTGo4Ix9jdG7AhyiQOQKUbDLOlRjkYtkFRQeV2CbJlAs+3hY2pQmu
cihtvfn+PhjnPwcILcp35X8VwHhLE8cH/4ZymAGbHwP14Sle7fsx4HoEanpIn3xk
onYef+86SMsBrHUjNsX3YpQMrobnPFmX1JlHAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUQ+M55Kcx+c4fXbz1BSuaQnj9UhowHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL1EtTTU1S2N4LWM0Zlhi
ejFCU3VhUW5qOVVoby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAw2bhxx+p6UXmiS8jeWesDeTn2/7/OQGc
lexH/HAxUAcb+INwD95C1V285Mapts9D0EssGAy/p52ZoyxkHLXCjMGl7W5VWw38
/e4CqvNQkoGlva4sLP4dblsz6+sqaVFt4JSKDmzr8nyxDcCmak3qVCQJTTruHdow
ze4glRRXOVXRBh/trSwJ16MdLWytkrBHEZZQ4HnuGoZjEJ9xot3RCN7/Y+hVXRpZ
Cg/vOo15IPLJ5dwZi/huoYbUEUDCGOIgyAGtW01cAbnaZTUeAV+RSmrjFJjXKY0g
nipAcAN8s7S/WEwAURzpq/LHwPgdMJvDWczqd36+omxmOnUPI1WPnQ==
-----END CERTIFICATE-----
Generated at Thu Apr 25 06:03:50 2024 by rpki-client on console-fra.rpki-client.org