Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/Uql4KNwZ0-d9DI1EKXlvcFCmRz4.roa
File: Uql4KNwZ0-d9DI1EKXlvcFCmRz4.roa (raw, json)
Hash identifier: TH522lb41cWnZublOgerX/A9PwpZineARdpeXE4YoqY=
Subject key identifier: 52:A9:78:28:DC:19:D3:E7:7D:0C:8D:44:29:79:6F:70:50:A6:47:3E
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1CDC
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Uql4KNwZ0-d9DI1EKXlvcFCmRz4.roa
Signing time: Mon 06 May 2024 22:24:57 +0000
ROA not before: Mon 06 May 2024 22:24:57 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7388 (0x1cdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 6 22:24:57 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=52A97828DC19D3E77D0C8D4429796F7050A6473E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:27:34:5d:07:36:84:3f:5a:c1:bc:24:c0:bf:
f3:cd:97:d6:ed:6a:7c:91:63:f5:2d:e9:7b:57:37:
c0:87:0b:d5:5c:f1:61:4e:b4:c2:2d:89:f6:bc:01:
64:9c:4d:95:55:07:6b:e4:25:4f:20:49:00:d8:93:
39:03:7a:a9:15:ca:56:3b:1d:f4:48:2e:73:94:2d:
f3:54:2c:bf:e5:88:e6:8c:9c:b7:a6:c8:bf:0c:b3:
17:30:b8:9e:ab:9c:cb:ed:b8:66:b4:24:3c:b3:af:
91:fa:d4:9e:1b:a2:22:8e:52:2e:02:e2:41:69:e4:
c3:d2:2f:9d:34:e6:fe:06:e2:37:83:67:81:7c:5f:
90:b5:bb:2b:0e:72:9c:d4:16:c1:4d:ea:ac:ad:44:
a1:43:c7:c6:8a:32:b6:7f:e9:90:04:b1:a0:d1:92:
fd:42:74:36:fc:a0:39:1c:cc:5d:00:8c:c7:56:35:
a3:83:26:1b:d0:55:fd:d8:68:6d:aa:05:85:67:65:
4c:ef:fe:87:8d:76:1d:91:d7:2f:77:80:5c:34:7c:
f3:32:f4:71:8a:6e:3f:9b:9c:9f:32:0b:fe:ea:9d:
2e:3b:cd:6f:7c:f9:7c:d6:05:2c:06:7e:e6:e8:02:
6a:77:05:15:19:99:53:6e:1a:a0:8a:b8:f4:e1:b0:
8b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A9:78:28:DC:19:D3:E7:7D:0C:8D:44:29:79:6F:70:50:A6:47:3E
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Uql4KNwZ0-d9DI1EKXlvcFCmRz4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0b:7e:83:38:30:33:d2:79:e4:d0:82:1c:13:9e:04:8c:8b:4d:
01:3d:d2:11:75:6c:9d:16:1d:9d:a2:f4:68:8f:49:03:c0:b3:
78:dc:b8:26:e1:ba:12:e9:69:7e:4e:38:ad:5f:d8:7e:5a:dd:
c3:13:75:83:ac:45:48:c9:0f:5a:01:de:e4:ca:8c:bc:da:fb:
4c:89:b7:b4:1b:6c:ee:bc:94:76:ca:57:70:54:78:e3:82:c5:
dd:52:da:d5:ba:7e:f5:6a:37:1b:62:2d:e9:3d:c4:cd:a6:9a:
49:0e:69:01:84:c8:4d:37:c9:32:c1:24:6e:ca:ce:3a:ff:54:
d1:82:a1:dd:d7:88:26:a3:11:05:82:30:d2:c0:83:f9:76:69:
7c:8b:24:6a:ee:e1:fb:10:9c:cf:24:ba:b4:95:da:c4:7f:1e:
df:8c:3d:59:79:89:0b:5a:97:3e:2a:43:c2:9a:8b:8a:e6:ba:
af:5c:ff:a4:e3:d5:35:83:c4:0e:fc:bf:a5:c8:26:0f:b1:f8:
9d:89:c2:b2:bc:14:01:74:11:18:b5:4c:63:a5:34:4f:90:a4:
40:7e:0d:0d:9b:af:83:5c:81:25:d7:c0:2e:e6:b3:b0:e5:94:
7b:19:78:13:97:90:e8:d0:a6:1b:17:bd:db:20:7f:23:a1:77:
e0:38:49:b9
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICHNwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA1MDYy
MjI0NTdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDUyQTk3ODI4REMxOUQz
RTc3RDBDOEQ0NDI5Nzk2RjcwNTBBNjQ3M0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMJzRdBzaEP1rBvCTAv/PNl9btanyRY/Ut6XtXN8CHC9Vc8WFO
tMItifa8AWScTZVVB2vkJU8gSQDYkzkDeqkVylY7HfRILnOULfNULL/liOaMnLem
yL8MsxcwuJ6rnMvtuGa0JDyzr5H61J4boiKOUi4C4kFp5MPSL5005v4G4jeDZ4F8
X5C1uysOcpzUFsFN6qytRKFDx8aKMrZ/6ZAEsaDRkv1CdDb8oDkczF0AjMdWNaOD
JhvQVf3YaG2qBYVnZUzv/oeNdh2R1y93gFw0fPMy9HGKbj+bnJ8yC/7qnS47zW98
+XzWBSwGfuboAmp3BRUZmVNuGqCKuPThsIs/AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUUql4KNwZ0+d9DI1EKXlvcFCmRz4wHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL1VxbDRLTndaMC1kOURJ
MUVLWGx2Y0ZDbVJ6NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAC36DODAz0nnk0IIcE54EjItNAT3SEXVs
nRYdnaL0aI9JA8CzeNy4JuG6Eulpfk44rV/YflrdwxN1g6xFSMkPWgHe5MqMvNr7
TIm3tBts7ryUdspXcFR444LF3VLa1bp+9Wo3G2It6T3EzaaaSQ5pAYTITTfJMsEk
bsrOOv9U0YKh3deIJqMRBYIw0sCD+XZpfIskau7h+xCczyS6tJXaxH8e34w9WXmJ
C1qXPipDwpqLiua6r1z/pOPVNYPEDvy/pcgmD7H4nYnCsrwUAXQRGLVMY6U0T5Ck
QH4NDZuvg1yBJdfALuazsOWUexl4E5eQ6NCmGxe92yB/I6F34DhJuQ==
-----END CERTIFICATE-----
Generated at Tue May 7 02:32:51 2024 by rpki-client on console-fra.rpki-client.org