Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/QBtA36LLirKgz3D7uveQin4RjH4.roa
File: QBtA36LLirKgz3D7uveQin4RjH4.roa (raw, json)
Hash identifier: lr2SnPNB1CsdOL7FNv6r+8F7/DQ36Ineucw6w0rXB70=
Subject key identifier: 40:1B:40:DF:A2:CB:8A:B2:A0:CF:70:FB:BA:F7:90:8A:7E:11:8C:7E
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1816
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/QBtA36LLirKgz3D7uveQin4RjH4.roa
Signing time: Wed 24 Apr 2024 04:53:41 +0000
ROA not before: Wed 24 Apr 2024 04:53:41 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6166 (0x1816)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 24 04:53:41 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=401B40DFA2CB8AB2A0CF70FBBAF7908A7E118C7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:3b:26:ba:3a:6a:9e:0c:20:a9:d0:bc:df:
9f:27:b3:29:8c:bd:18:18:16:3d:f6:5f:34:54:6c:
8c:89:a7:f3:3d:c9:b4:e5:7f:57:e7:ed:47:c2:f4:
56:97:a8:37:26:c3:1b:a0:c9:49:d6:b7:1f:65:d1:
76:8b:e4:08:17:69:99:38:fb:a4:86:da:41:7b:19:
0d:3f:9f:7d:51:ea:00:b2:4e:07:7b:14:81:01:ec:
cc:73:f6:5e:75:e0:1a:d4:6d:d4:61:57:81:0a:23:
76:11:f1:bb:5e:9c:1e:8f:63:5e:55:bf:38:e3:07:
98:b5:12:24:c8:c4:42:da:6a:b4:1e:33:40:b0:92:
8a:42:df:90:66:ff:d0:a1:78:09:c8:bc:9b:64:4f:
05:48:f4:72:39:33:90:fa:a8:a3:63:d6:27:41:ad:
4b:fd:67:3e:0c:75:21:6b:28:a9:ff:c8:40:5f:06:
b3:fb:e8:a0:dd:a0:15:06:a9:5b:ce:20:9b:8e:c3:
cf:6a:e5:80:83:1b:37:f5:45:cc:a5:76:c9:41:13:
84:4d:a9:0a:08:ba:24:e2:df:7c:1a:f6:1f:4c:0c:
a6:bb:5d:30:cc:56:52:fa:f5:a5:0e:55:1d:9b:d1:
d1:75:24:14:15:94:4a:45:2f:7c:58:dc:a7:03:e1:
7d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1B:40:DF:A2:CB:8A:B2:A0:CF:70:FB:BA:F7:90:8A:7E:11:8C:7E
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/QBtA36LLirKgz3D7uveQin4RjH4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
58:1f:b8:51:09:28:eb:1a:b9:3b:a4:7b:55:b5:b7:51:59:a0:
9e:22:2b:ea:a3:52:30:16:50:6c:01:89:fa:3f:f0:59:57:16:
2a:82:d9:9f:a8:de:07:68:a9:7e:42:cb:d5:c0:41:f4:d6:59:
fc:bc:9b:ed:55:31:cf:45:5d:01:fb:eb:52:b0:83:a5:c6:f2:
23:89:58:42:d8:4e:67:15:84:60:bd:15:1f:d5:4c:0b:23:9c:
96:35:21:5a:92:b0:65:6f:53:64:75:5e:f2:a6:0c:c2:9b:30:
0d:72:a7:49:69:9b:c0:98:e5:9a:23:19:88:1b:25:31:67:37:
0f:52:1b:66:52:86:0c:cf:fc:9d:42:37:37:f2:67:ef:e8:2d:
68:03:5b:71:af:77:d0:e4:d9:7e:8e:f7:09:0a:5b:96:48:0f:
ed:65:d4:a2:ec:89:4d:86:98:e4:8f:d1:c0:93:10:bd:29:2b:
be:05:68:62:f1:24:d9:a3:a5:78:30:99:2f:33:27:8e:31:db:
78:54:1f:66:09:46:0e:e4:8b:dd:5a:b4:c9:61:d4:13:eb:24:
2b:ac:dc:dd:39:e6:ce:c6:0f:4d:5a:31:99:19:cc:14:2b:37:
68:68:7c:5f:39:2e:b7:dc:0d:68:33:50:6a:d3:46:d9:85:e4:
cd:a2:18:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 06:08:54 2024 by rpki-client on console-fra.rpki-client.org