Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/ZNWwHTaYPYfoj231bWSN4FD2E7s.roa
File: ZNWwHTaYPYfoj231bWSN4FD2E7s.roa (raw, json)
Hash identifier: Of0NabhgpQFdtQFze+glELRC70QLhkw0gLWgdrpBPZg=
Subject key identifier: 64:D5:B0:1D:36:98:3D:87:E8:8F:6D:F5:6D:64:8D:E0:50:F6:13:BB
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 11CA
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/ZNWwHTaYPYfoj231bWSN4FD2E7s.roa
Signing time: Sun 07 Apr 2024 09:52:56 +0000
ROA not before: Sun 07 Apr 2024 09:52:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4554 (0x11ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 7 09:52:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=64D5B01D36983D87E88F6DF56D648DE050F613BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:93:fe:ce:7e:6e:89:f7:85:bb:fa:44:44:5e:
c9:f7:46:3a:bc:f1:0f:65:13:d4:6e:9a:9c:33:f5:
25:36:8b:c0:16:75:5b:ee:f4:5f:af:6c:d0:ab:5c:
28:ea:8b:4a:b6:1e:b0:1b:20:f5:4e:40:4b:75:c3:
b4:7d:a9:82:17:27:54:70:80:9d:d0:9d:9e:65:71:
aa:7a:20:3f:84:b0:1d:1a:5b:0e:8b:b5:bc:32:5a:
a5:a3:b8:56:da:a2:7e:51:ec:bb:b3:34:4b:65:51:
1f:9e:18:e6:be:2a:e3:cf:b4:78:fa:9e:27:8f:14:
53:7f:51:1c:25:dc:b1:36:dc:be:c3:1d:af:ef:ec:
6e:9e:b0:fd:5b:88:39:28:5f:53:8c:05:f8:41:40:
c9:f3:aa:18:4a:73:5e:bf:0a:51:d3:d8:74:de:78:
87:1f:5f:9e:16:ab:6c:5c:47:bf:eb:23:46:00:54:
fe:19:38:43:80:de:a8:11:95:4e:d0:9c:f2:20:9f:
51:c2:47:01:16:ba:e3:b4:d2:f9:c4:f7:a0:9d:04:
80:4c:aa:91:e3:fc:a6:79:f1:7f:da:fc:d3:d9:19:
de:ed:6a:fd:2c:24:f1:11:cb:e3:48:3a:89:b8:f2:
a0:a5:a7:a6:5b:ea:84:ee:c8:c6:fd:39:9c:10:bd:
6b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D5:B0:1D:36:98:3D:87:E8:8F:6D:F5:6D:64:8D:E0:50:F6:13:BB
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/ZNWwHTaYPYfoj231bWSN4FD2E7s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0a:a8:00:52:b8:54:34:4c:8b:04:05:e0:f0:5c:b0:8a:74:95:
f6:e0:0c:40:ce:63:99:f3:71:32:da:e7:43:4f:a6:e8:10:7c:
15:bc:29:22:a3:6f:74:bd:47:8a:e2:c2:9d:2d:52:73:ed:50:
ca:66:67:2a:95:1f:fd:69:08:a7:dd:b6:aa:04:e2:9c:19:48:
55:aa:a4:fd:f4:ed:1b:8b:b0:06:49:ad:fb:5d:85:1f:cc:02:
1c:80:3c:ad:95:f3:9c:16:9a:d0:f0:97:3a:ef:c8:68:d2:77:
8f:2e:42:7f:cb:da:90:7b:e9:f3:aa:47:55:ea:eb:2d:02:e0:
ce:3a:fe:0d:5e:e4:6f:e1:dc:5e:9d:5c:1b:cb:af:68:cf:01:
b8:7d:7b:f1:fb:8c:35:05:ed:fc:6e:11:5b:3e:95:46:d6:e9:
56:31:b1:a0:97:f9:4d:cb:f4:99:04:d9:ce:7a:da:9b:2e:40:
f3:06:38:6d:0e:af:b6:73:d7:0b:ae:04:c6:0a:73:01:b7:39:
62:9e:46:b4:9a:81:db:43:e2:e2:cd:92:c0:44:70:0d:3a:bf:
32:8d:85:74:3e:cb:46:ba:71:de:51:f4:39:61:c6:83:4b:a3:
a5:98:01:a8:b8:7c:e5:a2:8e:a1:ca:0a:9a:ca:92:6e:01:89:
6e:db:ae:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 7 13:25:17 2024 by rpki-client on console-fra.rpki-client.org