Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/_A_YqB2BMG_joQyXOwuuQhdeWW8.roa
File: _A_YqB2BMG_joQyXOwuuQhdeWW8.roa (raw, json)
Hash identifier: u7k2ykc5Zy/nhSlxUcOL7GIQ9xXhRlfRER9o1WKn8RE=
Subject key identifier: FC:0F:D8:A8:1D:81:30:6F:E3:A1:0C:97:3B:0B:AE:42:17:5E:59:6F
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1310
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/_A_YqB2BMG_joQyXOwuuQhdeWW8.roa
Signing time: Wed 10 Apr 2024 19:23:08 +0000
ROA not before: Wed 10 Apr 2024 19:23:08 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4880 (0x1310)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 10 19:23:08 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FC0FD8A81D81306FE3A10C973B0BAE42175E596F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d3:c2:17:c3:fc:75:0e:8a:72:ee:48:9f:e8:
1e:0f:fc:7c:69:f4:a3:72:36:29:a9:6b:29:83:37:
e6:20:12:56:43:cd:ef:4b:3e:a1:62:90:7d:d3:13:
e4:57:bb:7c:d7:03:0e:16:15:c4:cd:d3:67:94:8c:
68:60:e4:3f:28:4f:ab:d1:ad:e1:4b:36:de:4d:e8:
2d:1e:03:38:3a:84:04:ec:4e:99:c8:7c:fb:5a:b2:
35:5a:3c:bb:d9:ab:f4:12:a6:03:95:ac:26:10:fb:
81:4d:b8:0f:07:9c:5c:b6:da:20:ac:a4:39:48:7a:
6c:1b:30:c3:33:75:d2:41:87:29:2a:b8:db:93:cf:
8c:d2:65:28:aa:41:10:1e:7c:1b:d4:3c:4f:75:d2:
6c:6b:ba:d9:8a:1c:b3:2e:83:fe:b3:22:71:51:aa:
86:18:21:a1:7a:e5:5b:45:97:38:cf:b5:54:39:6e:
f5:f8:ca:0b:ad:68:5e:b6:d2:61:85:57:54:cf:8c:
ba:60:18:dc:01:b3:9e:e9:9a:02:be:de:ad:cc:11:
af:bf:c2:33:74:87:66:d1:21:ee:71:99:d8:4a:7d:
04:fe:15:07:38:21:bc:f9:60:db:e0:a5:0c:2d:6b:
b9:78:1c:eb:2e:51:da:b6:ac:81:d9:0a:6d:0e:6a:
33:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0F:D8:A8:1D:81:30:6F:E3:A1:0C:97:3B:0B:AE:42:17:5E:59:6F
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/_A_YqB2BMG_joQyXOwuuQhdeWW8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c0:67:94:e5:9a:dc:8a:2a:6e:18:61:00:ed:70:36:ad:36:aa:
e9:27:1f:c7:ca:29:eb:86:8d:d3:8b:97:1e:ce:31:6f:83:cc:
75:ec:75:07:d5:e2:a3:b6:e2:64:22:07:a3:8b:c7:23:a7:87:
f7:17:0c:d9:28:cb:f0:f5:a1:06:28:f3:13:8c:af:89:31:c7:
f9:a2:c9:bd:d8:38:05:30:9c:45:3c:e5:1c:12:a8:ae:56:71:
5a:8e:49:65:bd:d9:78:bf:11:37:28:45:44:7d:38:7f:c1:e1:
c0:89:c8:6b:80:4b:c7:1b:a9:23:f1:15:bc:a7:20:e7:95:84:
97:96:06:62:da:e4:20:9f:75:7e:ce:a8:1b:4f:50:fc:10:f3:
a5:cb:d4:41:2c:a3:a8:4e:5e:af:37:00:ef:42:d9:40:d0:c9:
35:96:b5:d5:45:71:7c:24:4a:37:62:1e:57:8e:43:27:18:2c:
9f:33:86:1b:66:a1:77:0a:0e:43:2b:fb:94:2b:b3:ea:d5:df:
6e:9f:71:73:80:92:68:a6:55:6f:fb:a9:b1:d5:38:a2:4a:60:
9b:f3:d6:8e:c3:37:d6:98:87:d5:91:d4:71:69:63:f2:9a:80:
d8:20:6a:38:02:c7:14:1a:d6:9f:5d:90:24:df:2e:f3:0b:e3:
f0:df:41:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 21:12:51 2024 by rpki-client on console-fra.rpki-client.org