Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/YW-F5wtDihyJrDXqB7fy4VIn98M.roa
File: YW-F5wtDihyJrDXqB7fy4VIn98M.roa (raw, json)
Hash identifier: rRCjS1vzKc8qCdJWjpJJ41h7QzUh9pekAvNRPDOEP3E=
Subject key identifier: 61:6F:85:E7:0B:43:8A:1C:89:AC:35:EA:07:B7:F2:E1:52:27:F7:C3
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1564
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/YW-F5wtDihyJrDXqB7fy4VIn98M.roa
Signing time: Wed 17 Apr 2024 00:23:21 +0000
ROA not before: Wed 17 Apr 2024 00:23:21 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5476 (0x1564)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 17 00:23:21 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=616F85E70B438A1C89AC35EA07B7F2E15227F7C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ca:1c:c0:3e:f4:0d:62:bc:7c:83:ce:19:cb:
ed:56:1a:90:39:67:96:c2:8c:df:3e:83:61:74:9a:
65:26:c4:f8:80:a3:00:13:ae:41:6a:e1:af:7a:63:
91:9b:e1:0e:5a:3d:ae:1f:9b:c6:47:f1:d5:77:bf:
36:3d:dc:12:38:3d:95:d8:aa:64:8d:7a:bc:f1:d2:
cc:50:26:21:94:56:96:ff:fe:4d:03:1f:1c:61:a1:
56:2b:35:65:c6:41:1f:9a:47:a7:e8:32:47:a9:96:
2a:68:09:5e:57:0c:3e:92:63:3a:67:c7:27:fb:66:
dc:a0:2d:e2:ac:d4:a7:f6:17:a5:ba:90:ec:1e:9f:
d6:e7:62:11:37:b0:4e:92:87:a6:59:f2:e3:b5:2c:
65:cb:d0:98:2d:fc:d5:22:2b:17:96:a3:bd:31:c6:
16:2a:24:8f:bf:ab:68:76:6c:97:d3:78:79:ca:b7:
e1:0f:63:18:18:4b:e7:33:1b:a4:31:06:09:c3:3f:
e0:53:3a:1a:00:6b:38:12:6c:d3:0a:2b:6c:67:db:
e8:ea:3b:15:ae:7c:69:6c:e4:4a:72:c7:0f:06:75:
fe:3a:80:32:38:2c:a5:d6:13:40:c1:29:b1:d9:98:
75:5b:ba:8e:95:43:ae:40:0f:22:d3:75:77:20:e9:
7a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6F:85:E7:0B:43:8A:1C:89:AC:35:EA:07:B7:F2:E1:52:27:F7:C3
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/YW-F5wtDihyJrDXqB7fy4VIn98M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
db:62:75:f3:69:2f:cc:9a:6e:e0:56:dc:e2:c8:b1:8d:a0:66:
c4:3d:7c:b6:4e:7a:71:ca:72:34:10:67:4e:13:9c:b7:a0:a5:
88:d6:f6:0e:49:e3:60:c4:c2:97:d1:49:be:32:cd:89:11:fb:
cf:1f:c5:5e:f1:bb:1f:04:ba:23:f8:c6:27:b6:55:0f:d2:14:
13:da:af:e0:8c:9d:df:03:e6:6a:1f:d4:53:1b:fe:34:d8:c1:
76:ee:93:f1:01:a4:6a:60:c7:64:ae:be:a1:15:85:cd:0b:79:
c5:8d:13:dc:cf:bc:30:4b:2a:04:d2:0d:71:23:11:54:7c:41:
7f:63:69:27:21:0b:83:4b:35:a6:af:65:ad:2d:8c:bd:3d:2e:
59:74:21:60:61:6e:48:46:03:66:14:08:41:09:6f:3d:dc:40:
8b:ba:34:bc:66:87:9c:94:99:9a:c8:63:26:73:09:fe:1f:80:
a7:27:b7:1c:f1:d4:0e:d9:73:ad:f7:17:78:ac:fe:25:c1:22:
da:11:b1:ca:23:d8:eb:2a:ca:63:da:83:86:65:d1:51:49:ea:
5a:d5:bf:c1:c6:2f:ea:3d:09:67:6b:e1:2f:5e:05:ee:d3:c8:
4a:00:08:d4:14:36:00:63:e9:a3:bd:73:7d:24:25:4a:60:94:
d5:7e:59:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 02:01:43 2024 by rpki-client on console-fra.rpki-client.org