Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/R5u0Xpj0VEPCKMlqTBd8OUcUA-g.roa
File: R5u0Xpj0VEPCKMlqTBd8OUcUA-g.roa (raw, json)
Hash identifier: li7SWCkOxxSYxy3mm1oMJrl3Aba1lm43OigVKIS6EbM=
Subject key identifier: 47:9B:B4:5E:98:F4:54:43:C2:28:C9:6A:4C:17:7C:39:47:14:03:E8
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 16E6
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/R5u0Xpj0VEPCKMlqTBd8OUcUA-g.roa
Signing time: Sun 21 Apr 2024 00:53:29 +0000
ROA not before: Sun 21 Apr 2024 00:53:29 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5862 (0x16e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 21 00:53:29 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=479BB45E98F45443C228C96A4C177C39471403E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1e:d1:8d:fa:3a:64:ca:fc:0b:9c:af:cc:16:
c8:ea:01:b3:9f:63:72:03:0e:74:6e:df:de:e7:f3:
9f:a7:81:44:4d:db:92:6d:54:08:31:e8:d4:43:46:
60:de:89:fb:8f:3a:9c:5a:1e:66:ac:42:c8:76:e7:
37:54:5b:9d:f6:63:c8:6c:85:ef:67:be:12:00:91:
aa:08:1d:f8:8c:b1:80:9a:f6:f3:7f:56:b3:aa:c5:
d4:4b:75:97:db:4f:fc:b3:9f:0a:b5:09:85:d4:61:
fb:9a:70:8f:4c:24:0c:38:0d:17:01:4f:cf:c6:28:
13:0b:53:3b:fe:fe:07:7f:7d:b0:c0:53:47:09:f8:
8c:a8:1f:f6:09:79:83:dd:8c:42:ba:32:88:1b:ae:
f3:28:50:0d:d6:44:07:46:ed:89:bc:0f:9e:4a:74:
73:28:c4:42:4a:4f:c4:3d:ac:f4:3b:4a:3a:b0:86:
d2:ac:2f:a0:3b:c9:e2:a5:67:4b:86:a4:f5:ee:9b:
b2:9e:84:35:f7:2d:55:51:5b:25:d8:c3:e7:88:0b:
b7:8a:00:2a:cf:b8:31:d5:09:3c:ee:ef:54:1a:e0:
0a:99:94:51:2d:e7:44:25:e4:fd:ba:3c:71:ab:bb:
ee:78:4c:fa:95:a9:71:80:bb:f9:c5:c7:6b:dd:b6:
29:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9B:B4:5E:98:F4:54:43:C2:28:C9:6A:4C:17:7C:39:47:14:03:E8
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/R5u0Xpj0VEPCKMlqTBd8OUcUA-g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c2:57:2a:bd:cc:94:c7:b5:d3:b5:f2:54:4d:87:c9:de:2a:c0:
95:47:bb:49:d6:83:a2:55:c5:28:c1:1e:95:d1:51:3f:a0:fc:
b5:96:3c:48:51:7c:78:59:fd:27:4d:de:61:5f:74:5b:e1:6f:
8d:37:2a:42:cf:72:f1:ff:02:11:27:b1:18:e3:31:7d:50:ed:
30:83:b9:64:6c:ca:4f:24:02:ff:f8:19:25:7d:b3:2d:55:9b:
8f:a8:cc:fb:23:80:73:04:7a:da:ae:0e:cc:5c:d8:f7:05:89:
11:e1:a5:a4:1a:a6:20:a2:87:16:b4:65:8e:7a:c9:af:fa:36:
a8:ee:07:f7:4d:c4:d2:57:4e:3a:61:51:87:79:ce:5d:84:aa:
f4:0b:de:0b:2b:06:f8:31:13:e0:09:13:57:a4:0e:7c:58:66:
66:68:0f:85:d6:0a:92:9f:b7:bd:70:b7:55:b5:c7:9c:ac:fb:
7a:64:9e:f2:f3:ef:ff:0e:6b:d6:63:a0:41:2c:a7:2a:bc:23:
e6:c2:dc:e5:bd:0a:3a:11:52:5e:b5:fe:7d:4a:cb:c4:ac:d6:
b5:de:13:90:4d:ca:c3:93:89:27:be:79:67:57:f9:d8:5f:3c:
c6:7d:5f:26:60:a2:f9:02:35:ae:2a:cb:98:52:2a:77:e3:e0:
7a:24:b8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:42:54 2024 by rpki-client on console-fra.rpki-client.org