Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/k3pvAfAr4iLWUNkZ8EXAQ_L9U3Y.roa
File: k3pvAfAr4iLWUNkZ8EXAQ_L9U3Y.roa (raw, json)
Hash identifier: g7YYkBgIsrDSD/ZVsEmqFEbfwDZc9ekdDwfPY51blW4=
Subject key identifier: 93:7A:6F:01:F0:2B:E2:22:D6:50:D9:19:F0:45:C0:43:F2:FD:53:76
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1306
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/k3pvAfAr4iLWUNkZ8EXAQ_L9U3Y.roa
Signing time: Wed 10 Apr 2024 16:53:09 +0000
ROA not before: Wed 10 Apr 2024 16:53:09 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4870 (0x1306)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 10 16:53:09 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=937A6F01F02BE222D650D919F045C043F2FD5376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d6:86:dc:bf:74:3b:19:d4:51:31:24:36:a1:
02:66:d4:ac:3f:3f:4f:aa:f2:51:0a:14:5d:01:af:
d8:f1:93:31:e7:7a:ae:5b:4d:21:f3:a5:6f:85:90:
17:e7:ee:f6:21:0e:79:04:0d:b1:7c:db:cd:a8:3d:
f0:43:b2:1e:7c:a7:64:ba:b3:b0:ae:af:a6:1f:6b:
3b:b9:26:9e:b7:1d:56:26:67:30:95:df:3f:84:d3:
4e:69:dc:0e:9b:71:4e:8b:fd:f7:b5:20:6b:81:d5:
a8:3f:f3:ab:e3:0b:73:65:54:8b:3c:93:fb:ac:b9:
d2:1e:16:c8:a8:b1:60:36:c7:25:96:cb:4a:15:e6:
4e:0b:57:f5:8e:91:67:ae:85:78:07:6a:8c:0d:99:
1f:d6:a5:af:72:66:b0:84:31:03:21:61:1e:d7:2b:
b0:c8:6c:05:10:3d:00:47:fb:8d:70:d8:a3:4e:75:
9f:51:a2:3c:47:6f:24:99:10:6a:39:72:ab:71:50:
30:67:de:b4:dd:87:9e:e7:89:1b:03:00:90:7f:24:
f5:1a:ba:19:d7:86:85:79:1c:15:f2:3b:5e:ae:2b:
f6:38:3f:e3:96:87:40:2a:20:26:07:99:7d:55:e8:
31:b3:31:dd:60:80:0d:6b:64:b8:e2:bc:a3:b6:94:
ca:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7A:6F:01:F0:2B:E2:22:D6:50:D9:19:F0:45:C0:43:F2:FD:53:76
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/k3pvAfAr4iLWUNkZ8EXAQ_L9U3Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
30:af:f1:54:ae:3b:0f:9d:c9:13:c0:10:71:9a:f7:0e:b4:d7:
34:55:6f:46:fa:41:a9:2f:af:2d:eb:0a:8b:ed:af:06:c0:00:
60:d9:31:e3:3f:59:a4:0f:f6:78:ae:1d:52:55:a7:ac:1e:3f:
75:fb:31:99:66:40:5c:cc:da:ce:5d:56:e3:e0:51:a3:c8:71:
d4:de:a6:71:f1:1a:49:40:a0:ae:bc:aa:18:9f:55:2f:fd:ef:
88:0f:d9:b1:07:95:75:0a:00:54:19:8a:76:88:0a:2c:bb:20:
59:58:25:4b:43:85:15:76:43:3d:b3:db:4e:90:43:93:6e:73:
89:f0:fe:ce:21:0b:dc:a7:d3:70:2f:c1:4d:f3:c0:6a:ad:fc:
c5:c9:1d:41:05:3b:21:fe:e2:be:6b:74:4f:94:1b:26:b9:f1:
a5:e7:e3:9d:c3:0e:27:e1:81:66:65:76:ef:77:35:56:39:72:
2e:e6:38:63:56:75:a0:1b:53:5c:bb:ed:dc:92:a6:74:0a:84:
0d:5e:03:58:6f:5a:47:1d:bf:7b:ad:b5:2d:df:ee:97:0f:05:
d8:28:01:64:45:c1:92:34:3e:19:57:78:25:94:8c:c8:8d:fd:
74:e5:40:a4:b9:31:53:7f:52:b7:69:21:2b:0a:f7:d2:b1:3c:
04:9d:74:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 20:18:54 2024 by rpki-client on console-ams.rpki-client.org