Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/U2BacI7YYp2Lf-3H-9AP4V0rP_Q.roa
File: U2BacI7YYp2Lf-3H-9AP4V0rP_Q.roa (raw, json)
Hash identifier: 35wcMtl/SbuAVP2o93CRTdlgx2iZ1D3m4P/S8qq7oeM=
Subject key identifier: 53:60:5A:70:8E:D8:62:9D:8B:7F:ED:C7:FB:D0:0F:E1:5D:2B:3F:F4
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0EC4
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/U2BacI7YYp2Lf-3H-9AP4V0rP_Q.roa
Signing time: Sat 30 Mar 2024 08:22:41 +0000
ROA not before: Sat 30 Mar 2024 08:22:41 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3780 (0xec4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 30 08:22:41 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=53605A708ED8629D8B7FEDC7FBD00FE15D2B3FF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fc:7f:1c:ba:38:69:90:e1:45:e4:c4:53:b0:
79:e9:ab:db:b8:11:a6:b5:fc:26:42:11:af:d7:ca:
4d:21:76:31:d6:1f:15:19:1d:56:04:96:03:71:da:
4f:c1:79:13:66:6a:34:0b:1e:f2:e5:96:d3:95:14:
b2:17:36:22:31:ee:7f:61:ad:dc:38:cf:d4:86:65:
11:1e:fe:18:c1:62:c7:7d:d7:ff:5d:af:b0:ec:51:
b3:89:74:2c:e2:ad:37:75:e6:38:52:4a:88:20:23:
9f:2f:a1:5d:e2:ef:2b:38:f1:2a:3b:85:3b:1c:1f:
b2:b0:ba:3a:d7:77:6f:69:80:9f:81:ca:44:5a:88:
43:53:3c:ef:84:ad:0a:81:a2:c4:ec:03:f6:78:b2:
18:45:f4:3e:5d:b5:f3:b2:0f:c5:d3:26:85:e2:b8:
af:06:bb:b3:08:3e:54:21:14:7e:e8:0f:b9:16:23:
21:cf:66:1b:eb:cd:87:40:9e:f8:f6:bf:1b:af:8b:
30:98:37:03:41:48:17:50:e4:91:61:99:27:d7:60:
d1:5c:31:a9:16:66:68:d1:ff:20:5f:2e:27:48:67:
9a:44:fc:a8:e5:b8:3a:aa:4f:0d:c0:dc:e1:d0:35:
12:cd:48:75:32:94:5d:b3:26:3a:a0:db:1e:e4:40:
b7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:60:5A:70:8E:D8:62:9D:8B:7F:ED:C7:FB:D0:0F:E1:5D:2B:3F:F4
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/U2BacI7YYp2Lf-3H-9AP4V0rP_Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
cb:df:7c:65:a3:f4:bb:4b:4f:d7:79:36:3c:74:e1:e4:00:04:
e3:65:a5:e9:bf:ef:e0:e6:b9:3b:44:68:92:6f:92:6f:e6:6e:
c8:84:cb:af:35:ac:4d:7a:d0:2a:b6:43:c4:f6:79:62:3d:1e:
f8:4f:58:d2:c8:fa:f1:e0:8c:1c:76:5b:57:15:bf:ad:89:c0:
54:7b:f8:6f:c3:53:76:b6:10:35:af:ce:7f:44:d7:f9:2e:c2:
b1:e3:00:ac:0d:1d:0e:65:5f:05:68:3d:f9:d7:37:46:b3:c1:
ed:16:d7:2a:a8:ae:3d:b3:65:2f:8e:4b:dd:73:a5:be:9f:2c:
9a:4c:07:d0:8a:c1:98:91:40:32:23:5b:be:60:44:ee:a6:cc:
85:1e:70:24:7d:d5:bb:52:36:66:1c:43:2c:79:4c:f9:d2:36:
fe:04:6c:f4:33:96:d9:ba:ee:6e:a4:5f:ef:13:31:eb:80:54:
a8:07:b8:af:48:08:83:98:7c:38:bb:91:1f:e4:92:ac:ae:c5:
0f:ae:42:49:1a:83:1c:dd:29:35:75:b2:81:7a:42:c8:e5:26:
79:d5:f9:03:f5:67:4f:03:e3:3c:38:93:7a:ab:cd:f2:43:71:
7b:0d:39:36:55:10:6f:c9:06:e1:25:8e:bf:0b:76:11:65:a1:
b6:8b:63:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 30 09:41:29 2024 by rpki-client on console-ams.rpki-client.org