Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/aTv2w57cWy1jNV5gMfxCI8zj86Q.roa
File: aTv2w57cWy1jNV5gMfxCI8zj86Q.roa (raw, json)
Hash identifier: ly8LbcaJtDqOpiNfaiTQs+1cXrQZ/GQk0rV7RLTumUc=
Subject key identifier: 69:3B:F6:C3:9E:DC:5B:2D:63:35:5E:60:31:FC:42:23:CC:E3:F3:A4
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 14A4
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/aTv2w57cWy1jNV5gMfxCI8zj86Q.roa
Signing time: Mon 15 Apr 2024 00:23:17 +0000
ROA not before: Mon 15 Apr 2024 00:23:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5284 (0x14a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 15 00:23:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=693BF6C39EDC5B2D63355E6031FC4223CCE3F3A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8f:48:56:a6:45:c9:34:a9:72:39:ed:b9:d1:
e8:e3:38:8a:e9:70:41:1c:e3:ac:2c:8a:58:99:f9:
9b:97:35:bb:70:13:24:4a:3b:19:e4:ea:e1:bf:7f:
5d:16:63:89:a8:1c:21:83:84:3e:80:d7:cc:1a:06:
00:b6:00:53:09:7d:97:c0:fc:b2:a9:b2:1b:3e:67:
95:b2:b6:54:e2:88:b0:93:e0:b8:56:f3:63:da:7c:
fc:f1:26:29:75:64:cc:21:c8:ab:ac:e2:ea:ba:42:
08:8c:a0:65:17:90:59:68:d9:76:e1:00:26:5c:c1:
d5:09:56:2d:41:af:fc:87:b0:72:b2:2c:17:a3:13:
9f:24:e2:77:6e:68:1f:5d:da:0d:f2:bc:29:88:fc:
7d:18:ce:f6:84:26:c2:6a:f8:b6:93:f5:59:63:aa:
29:fb:bc:c7:11:2a:cf:02:5b:d3:6e:72:73:79:8f:
c6:52:86:8e:6b:6c:6a:58:e4:6f:50:0f:9c:e1:f7:
5f:ad:ed:9c:c2:58:51:ac:7c:1e:49:ed:65:6d:a1:
10:dd:c9:61:76:54:c7:4b:10:26:fe:27:f8:9a:1a:
50:53:aa:8a:11:24:5a:fc:29:48:78:e8:7e:6c:51:
ad:fc:be:94:8a:e6:76:61:e2:02:52:6d:39:7f:db:
48:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3B:F6:C3:9E:DC:5B:2D:63:35:5E:60:31:FC:42:23:CC:E3:F3:A4
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/aTv2w57cWy1jNV5gMfxCI8zj86Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
bb:c8:15:72:f0:ae:f6:4c:1b:e8:93:94:e7:63:5e:5b:f7:aa:
b7:c7:67:4b:c9:42:b7:34:3d:99:d0:ef:8f:90:ac:5f:ba:7b:
29:bc:89:0c:1a:06:54:1c:21:c0:53:63:1c:51:9a:ee:fa:90:
19:88:52:4f:07:d1:90:08:4c:49:28:5b:5f:04:a7:93:99:cd:
de:cf:1e:30:11:fc:aa:49:63:56:62:6c:0e:03:6e:47:90:9f:
12:8c:5c:8a:97:6b:2c:88:80:ec:87:62:aa:e8:f7:3f:d7:f9:
0a:96:47:08:50:79:05:8d:9d:e8:87:0a:bc:6d:4e:cb:9c:f3:
e2:74:d3:7f:4a:d2:9d:d1:e4:bb:8a:01:fa:a7:d8:3e:6a:3f:
90:84:c0:53:b8:a7:92:3d:9e:e2:bb:31:9b:aa:7c:45:56:de:
3e:a0:6b:93:d3:f2:a3:8c:d4:68:c9:f7:c1:0f:d0:d2:0f:68:
d4:61:4e:e8:54:ae:2c:53:e8:ed:a2:2f:ad:9e:f6:d3:7b:7b:
54:29:6c:9d:7c:d7:e2:e6:bf:25:0f:27:03:28:07:09:03:48:
29:e5:1d:6b:7f:e3:f9:47:0b:65:cf:bd:f1:dd:16:1a:ae:9c:
75:f7:8f:a4:64:dd:a8:a4:df:3c:7d:c0:9d:f4:0b:63:a7:a5:
93:33:dc:84
-----BEGIN CERTIFICATE-----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Generated at Mon Apr 15 02:14:54 2024 by rpki-client on console-fra.rpki-client.org