Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/RzLivdIqhOarc4F918Vf2ax8jKU.roa
File: RzLivdIqhOarc4F918Vf2ax8jKU.roa (raw, json)
Hash identifier: IBWdxT2/zX1T+It+RX4tRHXJbI3gK4MdnOKRr5V6v4g=
Subject key identifier: 47:32:E2:BD:D2:2A:84:E6:AB:73:81:7D:D7:C5:5F:D9:AC:7C:8C:A5
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 13B4
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/RzLivdIqhOarc4F918Vf2ax8jKU.roa
Signing time: Fri 12 Apr 2024 12:23:12 +0000
ROA not before: Fri 12 Apr 2024 12:23:12 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5044 (0x13b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 12 12:23:12 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4732E2BDD22A84E6AB73817DD7C55FD9AC7C8CA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:35:b0:5e:98:ce:9e:65:3b:66:72:ba:9f:f7:
b3:dd:26:65:fb:0a:b7:45:4d:8d:d7:92:cc:0e:18:
99:e9:e8:51:bb:71:59:ff:5e:b1:25:bf:d8:44:e8:
2d:14:56:9b:8b:fa:f6:38:e1:6d:b9:52:39:56:82:
5e:fd:32:02:97:15:56:cd:e2:71:3b:06:6b:c0:73:
64:dc:d2:12:01:27:ed:f7:81:26:9e:5e:ea:97:a7:
57:59:c2:cf:03:c1:1b:dd:e8:e4:88:9e:d9:26:72:
49:8b:77:54:b2:d9:84:f3:94:f0:e9:0f:d0:d3:49:
9b:48:2b:5a:2a:89:3e:fb:21:2d:b8:1e:bb:d2:a9:
6e:7b:e8:20:d7:8f:af:9a:16:6f:86:3f:91:7c:d1:
ca:21:1f:8d:28:34:1e:52:cf:f2:a8:3d:9c:fe:e8:
06:ad:24:45:c6:83:f2:c0:e8:71:a0:18:6b:0e:a6:
4c:0c:39:48:22:4c:e5:e4:ca:92:5c:13:94:c5:2c:
fd:15:ce:7b:e0:0f:63:79:46:45:1c:ae:0f:67:2b:
0d:74:f6:88:84:9d:f7:9c:df:48:df:ba:9d:22:4f:
15:09:86:bb:bc:08:37:da:7a:50:2d:66:05:9d:e3:
de:13:97:ae:bb:57:70:6a:ef:89:31:d1:fb:55:71:
af:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:32:E2:BD:D2:2A:84:E6:AB:73:81:7D:D7:C5:5F:D9:AC:7C:8C:A5
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/RzLivdIqhOarc4F918Vf2ax8jKU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6e:4e:62:1d:d4:df:c4:17:c5:8b:b9:40:5f:db:f3:9f:be:1e:
16:8f:a4:87:da:60:87:30:14:42:d8:ea:a0:9e:b9:06:17:3d:
07:b8:8e:ba:b3:99:ef:f0:ad:57:8e:33:fc:11:ed:08:79:38:
ed:fc:fb:6c:69:02:3e:2d:dc:b3:13:07:48:68:7f:a5:4c:2a:
1c:4c:c7:b9:99:a7:88:23:20:36:ca:5a:5f:28:54:f8:5f:ab:
d3:8a:0b:66:4c:2a:5e:db:a3:56:93:e5:18:07:32:dd:7c:89:
45:03:47:83:b0:a0:98:43:4b:78:fc:bb:f5:a6:24:5f:96:ed:
e8:b6:1e:6f:45:37:d1:49:cb:1a:59:7d:90:48:db:ba:29:b8:
7d:ac:56:20:2c:6c:c1:7d:d9:86:cc:82:ee:fc:45:04:5e:96:
e1:68:53:e7:0b:32:61:50:f7:74:23:45:86:90:8d:20:5a:62:
2f:f8:61:91:dd:b1:64:98:cf:da:52:a3:a8:34:37:31:fd:30:
2a:32:12:13:dd:ee:84:7f:63:f8:35:90:d6:99:21:4b:19:d9:
31:7b:c2:13:46:52:eb:4a:80:a1:c0:b6:9e:3c:af:9e:97:7b:
af:7d:22:0a:4b:2e:04:a9:da:52:80:8c:15:37:6a:01:96:53:
2a:d5:5f:f1
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICE7QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MTIx
MjIzMTJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDQ3MzJFMkJERDIyQTg0
RTZBQjczODE3REQ3QzU1RkQ5QUM3QzhDQTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3NbBemM6eZTtmcrqf97PdJmX7CrdFTY3XkswOGJnp6FG7cVn/
XrElv9hE6C0UVpuL+vY44W25UjlWgl79MgKXFVbN4nE7BmvAc2Tc0hIBJ+33gSae
XuqXp1dZws8DwRvd6OSIntkmckmLd1Sy2YTzlPDpD9DTSZtIK1oqiT77IS24HrvS
qW576CDXj6+aFm+GP5F80cohH40oNB5Sz/KoPZz+6AatJEXGg/LA6HGgGGsOpkwM
OUgiTOXkypJcE5TFLP0VznvgD2N5RkUcrg9nKw109oiEnfec30jfup0iTxUJhru8
CDfaelAtZgWd494Tl667V3Bq74kx0ftVca9bAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQURzLivdIqhOarc4F918Vf2ax8jKUwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL1J6TGl2ZElxaE9hcmM0
RjkxOFZmMmF4OGpLVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAbk5iHdTfxBfFi7lAX9vzn74eFo+kh9pg
hzAUQtjqoJ65Bhc9B7iOurOZ7/CtV44z/BHtCHk47fz7bGkCPi3csxMHSGh/pUwq
HEzHuZmniCMgNspaXyhU+F+r04oLZkwqXtujVpPlGAcy3XyJRQNHg7CgmENLePy7
9aYkX5bt6LYeb0U30UnLGll9kEjbuim4faxWICxswX3ZhsyC7vxFBF6W4WhT5wsy
YVD3dCNFhpCNIFpiL/hhkd2xZJjP2lKjqDQ3Mf0wKjISE93uhH9j+DWQ1pkhSxnZ
MXvCE0ZS60qAocC2njyvnpd7r30iCksuBKnaUoCMFTdqAZZTKtVf8Q==
-----END CERTIFICATE-----
Generated at Fri Apr 12 16:44:40 2024 by rpki-client on console-fra.rpki-client.org