Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/dJqKm31HGPkjiSZnnk7D2PxJ29o.roa
File: dJqKm31HGPkjiSZnnk7D2PxJ29o.roa (raw, json)
Hash identifier: OJiHrTEhula1sVvYVq8oNlPdgF6pbhL1VhqWsl6HQ84=
Subject key identifier: 74:9A:8A:9B:7D:47:18:F9:23:89:26:67:9E:4E:C3:D8:FC:49:DB:DA
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0F9A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/dJqKm31HGPkjiSZnnk7D2PxJ29o.roa
Signing time: Mon 01 Apr 2024 13:52:42 +0000
ROA not before: Mon 01 Apr 2024 13:52:42 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3994 (0xf9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 1 13:52:42 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=749A8A9B7D4718F9238926679E4EC3D8FC49DBDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:02:94:ce:06:57:ee:91:5f:80:2a:8b:1f:27:
50:e7:8d:8b:84:7a:29:22:0b:52:cc:be:7d:6e:e2:
86:b3:30:b0:11:88:68:82:46:fe:d6:0a:ee:36:33:
3e:ed:09:8a:c6:e0:92:01:fc:b1:2f:97:c2:b7:ee:
82:a2:5b:ea:33:4f:99:b0:b8:4d:98:71:16:df:7f:
2c:05:49:17:2c:96:94:b2:c7:86:3a:68:c9:e4:15:
3f:9d:fb:52:d5:d4:ca:9c:13:ba:f1:ff:f0:47:60:
14:0a:b3:7b:25:b8:db:70:10:49:7b:d9:b5:1f:c7:
33:20:ec:34:60:72:82:2a:92:2b:b5:7f:76:1d:5f:
91:a4:dc:ea:0b:22:d6:d3:ec:40:26:7c:9a:5f:3e:
e5:a0:22:e0:1b:7c:79:d2:3f:b3:00:e5:68:16:88:
d8:8d:02:ed:20:a5:7e:37:1e:3e:c2:cf:af:37:f7:
15:bb:e7:f4:3d:19:e3:6b:85:ea:17:60:93:bb:fe:
36:10:7b:c6:5f:bd:53:26:87:d4:55:1b:2f:2a:77:
71:f0:8d:19:d0:69:47:cb:b7:ff:64:94:ed:6c:9d:
a0:b0:00:ab:2c:22:e1:2d:1d:9c:6e:23:77:33:7d:
36:e0:95:a2:c8:e8:3b:ce:ce:d3:f6:77:66:06:4e:
a7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9A:8A:9B:7D:47:18:F9:23:89:26:67:9E:4E:C3:D8:FC:49:DB:DA
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/dJqKm31HGPkjiSZnnk7D2PxJ29o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
06:46:0a:d3:75:f8:eb:13:c8:d7:e8:6a:27:0a:c1:31:ef:e5:
93:2a:e3:6d:b9:b6:48:d3:df:b7:74:1f:60:30:52:0f:11:7a:
df:74:d4:67:57:09:ce:76:fc:bb:7b:a4:50:7b:b4:e0:f7:66:
6b:de:86:6d:d3:39:67:40:b8:57:63:70:19:de:54:02:81:3c:
2e:bb:08:0a:6d:4e:b1:ce:ad:52:a9:3f:85:82:0a:cd:bf:65:
0c:ea:18:76:bd:a2:89:e2:74:f1:9a:fe:35:b3:ae:20:3a:a9:
b1:6b:8b:4f:04:85:6e:aa:80:d8:44:4c:00:0c:da:96:d1:46:
4e:ef:05:cf:f3:33:a8:29:0a:1b:b8:2b:0b:90:1c:31:84:32:
3d:2e:cd:c6:49:e5:94:89:97:68:2e:e0:85:57:b5:fa:d8:fe:
4d:ee:63:a4:90:17:a6:e4:b7:da:aa:a5:2a:a6:b9:5a:2b:88:
8b:71:e7:3e:68:b0:16:2f:71:e7:d4:f6:b8:fd:50:c8:66:bc:
8e:e4:46:bf:0e:85:bd:66:ce:7a:61:27:e4:72:06:4b:50:77:
cd:9e:73:c3:6a:b8:74:ec:7c:2b:dc:12:b1:ff:dc:3d:b0:c1:
66:be:ed:3d:f1:3d:0a:6f:a0:96:74:dd:13:aa:a9:98:b8:9c:
16:92:22:24
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICD5owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MDEx
MzUyNDJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDc0OUE4QTlCN0Q0NzE4
RjkyMzg5MjY2NzlFNEVDM0Q4RkM0OURCREEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCuApTOBlfukV+AKosfJ1DnjYuEeikiC1LMvn1u4oazMLARiGiC
Rv7WCu42Mz7tCYrG4JIB/LEvl8K37oKiW+ozT5mwuE2YcRbffywFSRcslpSyx4Y6
aMnkFT+d+1LV1MqcE7rx//BHYBQKs3sluNtwEEl72bUfxzMg7DRgcoIqkiu1f3Yd
X5Gk3OoLItbT7EAmfJpfPuWgIuAbfHnSP7MA5WgWiNiNAu0gpX43Hj7Cz6839xW7
5/Q9GeNrheoXYJO7/jYQe8ZfvVMmh9RVGy8qd3HwjRnQaUfLt/9klO1snaCwAKss
IuEtHZxuI3czfTbglaLI6DvOztP2d2YGTqc/AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUdJqKm31HGPkjiSZnnk7D2PxJ29owHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL2RKcUttMzFIR1BramlT
Wm5uazdEMlB4SjI5by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEABkYK03X46xPI1+hqJwrBMe/lkyrjbbm2
SNPft3QfYDBSDxF633TUZ1cJznb8u3ukUHu04Pdma96GbdM5Z0C4V2NwGd5UAoE8
LrsICm1Osc6tUqk/hYIKzb9lDOoYdr2iieJ08Zr+NbOuIDqpsWuLTwSFbqqA2ERM
AAzaltFGTu8Fz/MzqCkKG7grC5AcMYQyPS7NxknllImXaC7ghVe1+tj+Te5jpJAX
puS32qqlKqa5WiuIi3HnPmiwFi9x59T2uP1QyGa8juRGvw6FvWbOemEn5HIGS1B3
zZ5zw2q4dOx8K9wSsf/cPbDBZr7tPfE9Cm+glnTdE6qpmLicFpIiJA==
-----END CERTIFICATE-----
Generated at Mon Apr 1 17:49:35 2024 by rpki-client on console-fra.rpki-client.org