Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/jiRugWp-10FQHXLfNeQeVkU9akI.roa
File: jiRugWp-10FQHXLfNeQeVkU9akI.roa (raw, json)
Hash identifier: YqxR7GaQcvhrlQNoiHDUQ+FLwcypNoXW8A3cA4IKkOE=
Subject key identifier: 8E:24:6E:81:6A:7E:D7:41:50:1D:72:DF:35:E4:1E:56:45:3D:6A:42
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 120A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/jiRugWp-10FQHXLfNeQeVkU9akI.roa
Signing time: Mon 08 Apr 2024 01:53:01 +0000
ROA not before: Mon 08 Apr 2024 01:53:01 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4618 (0x120a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 8 01:53:01 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8E246E816A7ED741501D72DF35E41E56453D6A42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:89:7c:cd:14:1d:50:13:73:26:ab:80:0e:59:
34:49:28:5a:4a:b8:c4:0b:3f:79:41:c1:94:60:c5:
38:db:5d:f2:bf:f0:75:bc:a3:c6:b9:1c:e0:52:bc:
b3:a4:fe:7b:ae:43:bd:b9:1f:25:39:53:22:dc:5f:
4b:5a:c9:30:e9:1e:95:6c:3e:26:a9:df:53:37:be:
07:70:64:a7:93:d9:91:7c:0f:3c:df:0b:bb:a4:7d:
33:c7:e4:30:2c:43:27:68:95:9e:ce:74:80:50:ec:
0f:e9:c4:f5:7d:75:c8:8a:2c:90:1a:06:4f:1a:ff:
86:42:56:40:fe:fd:63:61:1d:c7:63:54:9d:70:98:
c0:9d:3c:1f:33:e3:b6:02:12:b2:97:d7:54:a3:a3:
e6:1f:d3:73:eb:04:5e:f6:93:e7:a3:b6:88:8b:17:
08:f7:32:0b:0b:d7:4c:8a:3d:bb:a7:16:bb:68:0a:
21:cf:f0:e6:1c:d4:d1:b2:46:7e:29:b6:3a:9b:73:
33:f5:16:ec:4e:75:e0:b5:2d:f1:6d:b0:3a:e3:9c:
3b:1b:23:51:ac:5c:9a:5f:de:54:b6:be:19:c8:62:
75:33:6a:00:de:4d:8a:07:da:37:89:fe:ca:75:b5:
c1:0b:c4:fe:0b:58:68:af:f6:9e:75:7a:88:b1:7c:
86:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:24:6E:81:6A:7E:D7:41:50:1D:72:DF:35:E4:1E:56:45:3D:6A:42
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/jiRugWp-10FQHXLfNeQeVkU9akI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c9:6d:44:3e:78:ff:64:bb:f6:c3:6b:b2:d5:c8:c5:84:28:f5:
4d:8f:f1:5b:b3:8a:41:10:03:9d:6d:8a:99:47:90:03:6f:6f:
df:40:ae:49:af:a9:cd:c3:41:fd:e0:b3:2c:8f:41:d8:11:11:
44:e9:a8:c7:37:79:82:0b:da:eb:b3:37:78:93:95:e9:41:08:
cd:c7:e1:df:7a:39:d3:42:73:96:23:04:35:85:9f:4b:e3:b2:
c0:d8:67:db:a3:40:79:a1:8f:33:e2:63:40:28:b5:0e:5a:d3:
af:2f:50:7f:f2:d8:31:b2:62:89:a9:d0:7c:08:e5:00:76:c9:
2e:d0:e9:6d:af:c7:3d:e3:9d:09:bc:54:6e:f2:aa:20:68:f9:
5a:0a:3e:1f:2a:c8:ca:fe:53:83:cc:d8:6d:fc:df:22:e6:0b:
6b:45:85:43:00:3b:cd:dc:71:af:19:5e:35:11:33:ed:27:c1:
8e:74:e4:44:10:14:f5:ed:75:06:5e:6d:e4:9b:4e:5b:a3:cb:
35:5c:d6:1e:84:a5:f6:a8:ad:83:a0:c6:2e:b4:8c:dc:47:88:
49:11:fb:f1:7a:73:58:1d:b5:7e:0e:4e:f8:d6:60:02:16:11:
ce:7e:5a:60:69:27:2d:e4:27:52:11:43:8e:79:00:62:fe:fa:
19:34:33:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 8 03:19:52 2024 by rpki-client on console-fra.rpki-client.org