Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/mRdes-RFME6aT2Iwaw5nsY5Lbxg.roa
File: mRdes-RFME6aT2Iwaw5nsY5Lbxg.roa (raw, json)
Hash identifier: dIFMhGICb6pDEZ/uW9BkQ3D80RM+TTQyMdA/3zftRKM=
Subject key identifier: 99:17:5E:B3:E4:45:30:4E:9A:4F:62:30:6B:0E:67:B1:8E:4B:6F:18
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 14E8
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/mRdes-RFME6aT2Iwaw5nsY5Lbxg.roa
Signing time: Mon 15 Apr 2024 17:23:18 +0000
ROA not before: Mon 15 Apr 2024 17:23:18 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5352 (0x14e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 15 17:23:18 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=99175EB3E445304E9A4F62306B0E67B18E4B6F18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9b:ce:23:9a:e1:63:ab:9b:58:d4:98:9f:1b:
f0:be:d7:1c:ba:f4:f2:6c:18:85:44:5c:b6:59:2a:
83:4a:ac:07:86:e5:12:fb:97:c1:f8:d1:fd:d1:cb:
b2:2b:c3:de:20:04:d6:1a:78:98:5f:22:38:98:95:
c1:7f:59:2e:bb:d8:4b:b9:d6:54:d1:00:41:24:49:
59:ba:04:05:6f:52:8d:ec:44:e1:a3:d2:f0:4a:19:
a7:dd:30:0e:71:b3:88:61:be:2c:47:4d:89:97:16:
bc:08:a2:56:76:bd:15:22:3c:56:26:ae:ec:65:93:
c7:01:97:29:90:a7:15:e5:e1:bb:65:02:48:d5:87:
35:51:6b:d1:0a:d6:05:2d:ba:9d:22:98:3f:16:c7:
9f:5c:f7:57:29:d0:8d:65:68:61:d0:3b:a5:d1:3d:
cd:75:92:68:c7:1e:5e:f5:4f:1b:5c:42:56:80:cb:
90:1c:ee:53:1d:48:26:08:0d:84:f0:5e:1a:87:ba:
69:41:11:36:c5:87:9a:0c:18:58:7a:e2:84:ac:dc:
6c:14:e2:16:9c:fe:ae:9b:8d:07:65:0e:7f:f0:a3:
a7:16:c1:35:ba:b5:0b:a6:39:6f:04:12:5c:c5:5a:
23:22:9f:7d:0b:e0:b2:e2:b1:a6:f3:43:70:b1:4a:
30:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:17:5E:B3:E4:45:30:4E:9A:4F:62:30:6B:0E:67:B1:8E:4B:6F:18
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/mRdes-RFME6aT2Iwaw5nsY5Lbxg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4c:2b:d7:74:c7:d3:b2:c7:51:44:36:15:ed:27:78:17:2b:be:
d6:3c:7e:b8:44:72:4f:a4:2e:94:bc:88:95:e0:a5:57:83:36:
24:b1:6d:c4:0e:61:4f:9f:4b:a2:11:11:b9:f4:30:0a:cc:1e:
b2:b2:f0:a4:41:10:26:99:11:9f:d9:dd:62:9c:ce:e6:24:40:
f3:24:22:0d:8c:12:ba:8b:19:74:3a:ff:b9:a6:fc:66:2f:01:
d8:b7:44:2a:a6:d9:7c:23:db:90:1a:af:ab:24:d0:e6:28:ba:
69:2d:ac:84:db:8a:ae:60:e6:3f:f1:d8:57:38:4a:c8:de:9a:
e6:84:9b:c8:6f:aa:4e:f8:1a:09:23:30:cd:f9:97:84:db:c8:
21:3d:a3:49:5b:f4:ea:ea:b5:62:c4:fb:74:c1:f5:29:96:52:
c2:39:53:88:46:2d:47:44:ae:86:bf:b3:86:73:c4:49:d0:97:
31:75:8a:cc:09:86:89:be:2f:6f:72:9f:c7:aa:26:f6:c6:0d:
e6:ff:4f:ad:62:72:43:d4:c0:6b:31:ec:14:f9:b4:83:75:63:
27:61:a5:7e:08:3b:c3:70:72:6e:65:ef:21:48:f7:bc:6c:a6:
c9:66:13:bc:c0:b2:ba:c5:e7:b8:ba:83:5d:94:d7:c7:0b:e4:
eb:06:42:e1
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICFOgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MTUx
NzIzMThaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDk5MTc1RUIzRTQ0NTMw
NEU5QTRGNjIzMDZCMEU2N0IxOEU0QjZGMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNm84jmuFjq5tY1JifG/C+1xy69PJsGIVEXLZZKoNKrAeG5RL7
l8H40f3Ry7Irw94gBNYaeJhfIjiYlcF/WS672Eu51lTRAEEkSVm6BAVvUo3sROGj
0vBKGafdMA5xs4hhvixHTYmXFrwIolZ2vRUiPFYmruxlk8cBlymQpxXl4btlAkjV
hzVRa9EK1gUtup0imD8Wx59c91cp0I1laGHQO6XRPc11kmjHHl71TxtcQlaAy5Ac
7lMdSCYIDYTwXhqHumlBETbFh5oMGFh64oSs3GwU4hac/q6bjQdlDn/wo6cWwTW6
tQumOW8EElzFWiMin30L4LLisabzQ3CxSjCdAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUmRdes+RFME6aT2Iwaw5nsY5LbxgwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL21SZGVzLVJGTUU2YVQy
SXdhdzVuc1k1TGJ4Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEATCvXdMfTssdRRDYV7Sd4Fyu+1jx+uERy
T6QulLyIleClV4M2JLFtxA5hT59LohERufQwCswesrLwpEEQJpkRn9ndYpzO5iRA
8yQiDYwSuosZdDr/uab8Zi8B2LdEKqbZfCPbkBqvqyTQ5ii6aS2shNuKrmDmP/HY
VzhKyN6a5oSbyG+qTvgaCSMwzfmXhNvIIT2jSVv06uq1YsT7dMH1KZZSwjlTiEYt
R0Suhr+zhnPESdCXMXWKzAmGib4vb3Kfx6om9sYN5v9PrWJyQ9TAazHsFPm0g3Vj
J2Glfgg7w3BybmXvIUj3vGymyWYTvMCyusXnuLqDXZTXxwvk6wZC4Q==
-----END CERTIFICATE-----
Generated at Mon Apr 15 18:47:48 2024 by rpki-client on console-fra.rpki-client.org