Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/SzQcvtuD9SO8Freamnv22QD7HPI.roa
File: SzQcvtuD9SO8Freamnv22QD7HPI.roa (raw, json)
Hash identifier: D9Y3wQtYI3UyTyPSHqGm4eIDlIHklGpK6J8kPyythKs=
Subject key identifier: 4B:34:1C:BE:DB:83:F5:23:BC:16:B7:9A:9A:7B:F6:D9:00:FB:1C:F2
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1D9E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/SzQcvtuD9SO8Freamnv22QD7HPI.roa
Signing time: Wed 08 May 2024 22:54:26 +0000
ROA not before: Wed 08 May 2024 22:54:26 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7582 (0x1d9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 8 22:54:26 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4B341CBEDB83F523BC16B79A9A7BF6D900FB1CF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:77:52:24:e5:47:31:92:a6:bc:22:ca:24:00:
e5:ba:0a:ab:00:ed:ae:a1:57:77:c7:c0:ef:cd:da:
bd:eb:39:84:1a:1c:8a:77:09:a6:8d:db:2d:96:9f:
33:53:10:70:1f:99:eb:a8:d7:bd:4f:ed:d5:eb:c8:
23:77:6d:24:5a:17:12:24:18:49:08:39:e4:ce:f5:
d4:57:fe:e8:64:3f:09:9f:58:24:2b:44:21:dd:a0:
a5:de:00:a7:69:35:d0:6e:e5:6f:35:01:72:b4:35:
ea:b1:b1:f2:46:b7:75:58:db:34:16:f6:e4:eb:4f:
ec:1d:43:a5:79:5e:80:73:3b:a2:e6:b1:0b:59:63:
25:6d:89:61:ea:a5:d7:09:3f:63:fe:81:41:5f:a8:
5b:c1:fa:9d:29:c0:0f:79:df:cb:07:ca:38:a7:69:
72:ee:b5:42:57:22:b1:17:82:eb:86:05:5e:d4:c3:
0f:45:46:be:13:a9:45:59:c6:76:36:bf:39:90:bc:
90:d0:1b:79:9c:2a:e6:07:42:9f:d8:62:03:b5:53:
55:df:59:44:bf:9b:e2:4f:f5:52:c4:f8:a6:17:a2:
77:a2:26:49:ce:53:46:2d:19:6b:de:5b:3c:6c:83:
28:9a:f1:79:24:49:d1:ee:f2:b1:53:d1:bd:02:5b:
79:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:34:1C:BE:DB:83:F5:23:BC:16:B7:9A:9A:7B:F6:D9:00:FB:1C:F2
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/SzQcvtuD9SO8Freamnv22QD7HPI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
18:7e:2e:f0:22:c6:e5:37:f4:d0:fe:a6:37:1b:de:83:71:d7:
44:00:77:d1:8a:68:39:9b:01:c5:a3:7b:e2:e5:63:5e:33:9d:
e1:41:0f:5f:20:d3:76:12:23:61:1b:5f:a6:b4:23:6c:ff:87:
dc:18:ae:2a:b1:ff:a3:04:d5:b7:7c:6c:d1:18:00:56:59:86:
a5:13:2e:69:18:86:fc:fa:bd:50:75:e8:d7:4e:58:4c:f4:5e:
6e:17:84:1d:70:9a:79:1d:b6:0b:bd:5f:f5:12:b5:5e:0e:2f:
4e:60:e2:5b:06:46:9b:ba:39:5f:5f:c2:de:63:1c:5b:a0:18:
27:cf:1d:5c:c4:a8:a3:60:f7:f9:ea:0c:c0:77:46:16:9b:8f:
ca:73:e7:e7:a7:95:d5:fa:23:d9:34:ef:4a:eb:2d:bb:8b:7b:
2e:b0:3d:70:e5:9b:34:ba:bc:e7:70:78:37:4d:aa:ae:9f:f3:
ad:b4:88:ea:c1:47:8d:d7:36:6f:23:7c:e6:c7:a8:01:83:27:
bd:7c:4e:7a:1b:31:d8:46:fe:c4:b9:e8:f3:12:09:82:9e:96:
ba:4c:c7:bb:96:59:7d:56:23:52:8f:00:1e:1a:b8:83:09:1b:
bc:bc:88:e4:78:e5:1a:0f:11:85:cf:57:a6:fd:a5:0d:70:be:
68:0b:63:08
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICHZ4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA1MDgy
MjU0MjZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDRCMzQxQ0JFREI4M0Y1
MjNCQzE2Qjc5QTlBN0JGNkQ5MDBGQjFDRjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwd1Ik5Ucxkqa8IsokAOW6CqsA7a6hV3fHwO/N2r3rOYQaHIp3
CaaN2y2WnzNTEHAfmeuo171P7dXryCN3bSRaFxIkGEkIOeTO9dRX/uhkPwmfWCQr
RCHdoKXeAKdpNdBu5W81AXK0NeqxsfJGt3VY2zQW9uTrT+wdQ6V5XoBzO6LmsQtZ
YyVtiWHqpdcJP2P+gUFfqFvB+p0pwA9538sHyjinaXLutUJXIrEXguuGBV7Uww9F
Rr4TqUVZxnY2vzmQvJDQG3mcKuYHQp/YYgO1U1XfWUS/m+JP9VLE+KYXoneiJknO
U0YtGWveWzxsgyia8XkkSdHu8rFT0b0CW3k/AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUSzQcvtuD9SO8Freamnv22QD7HPIwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL1N6UWN2dHVEOVNPOEZy
ZWFtbnYyMlFEN0hQSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAGH4u8CLG5Tf00P6mNxveg3HXRAB30Ypo
OZsBxaN74uVjXjOd4UEPXyDTdhIjYRtfprQjbP+H3BiuKrH/owTVt3xs0RgAVlmG
pRMuaRiG/Pq9UHXo105YTPRebheEHXCaeR22C71f9RK1Xg4vTmDiWwZGm7o5X1/C
3mMcW6AYJ88dXMSoo2D3+eoMwHdGFpuPynPn56eV1foj2TTvSustu4t7LrA9cOWb
NLq853B4N02qrp/zrbSI6sFHjdc2byN85seoAYMnvXxOehsx2Eb+xLno8xIJgp6W
ukzHu5ZZfVYjUo8AHhq4gwkbvLyI5HjlGg8Rhc9Xpv2lDXC+aAtjCA==
-----END CERTIFICATE-----
Generated at Thu May 9 00:39:13 2024 by rpki-client on console-ams.rpki-client.org