Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/nDt24wyA2BellUh1wjNTzRklEqk.roa
File: nDt24wyA2BellUh1wjNTzRklEqk.roa (raw, json)
Hash identifier: EV8rQJTju/QyT8eQfp05V0y2HTuWxM9NVhoJ/OA56F8=
Subject key identifier: 9C:3B:76:E3:0C:80:D8:17:A5:95:48:75:C2:33:53:CD:19:25:12:A9
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1868
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/nDt24wyA2BellUh1wjNTzRklEqk.roa
Signing time: Thu 25 Apr 2024 01:23:41 +0000
ROA not before: Thu 25 Apr 2024 01:23:41 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6248 (0x1868)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 25 01:23:41 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9C3B76E30C80D817A5954875C23353CD192512A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:49:54:33:b8:e5:2a:0f:14:db:dd:32:44:41:
87:6d:15:99:b6:e6:bc:a8:41:4b:41:a1:31:83:18:
f5:13:12:2e:08:a5:36:33:7f:d6:7e:a8:01:c5:5f:
c5:ba:ef:a2:42:19:92:b4:f2:35:c3:6b:f5:78:06:
30:dc:a9:f6:dd:45:b3:9a:4d:ad:be:9d:ce:31:ac:
da:0f:c5:26:0a:45:2f:2a:7e:4c:93:be:1e:bb:0c:
10:cc:15:6b:76:c8:b9:21:d7:01:9e:4e:b8:a9:35:
77:8c:b1:d2:ea:2d:df:03:2e:cf:e5:f6:99:80:ff:
8c:47:e1:f8:cb:4f:82:74:53:bb:40:ac:d5:22:c1:
50:bd:2b:77:85:79:14:7d:cd:be:75:d0:f9:42:cb:
83:25:13:d4:b9:cb:d0:bc:b3:3d:bb:78:0b:7e:62:
f4:83:15:c6:f9:a5:20:99:ac:9e:b4:f8:d7:ad:69:
82:02:dd:f5:e1:58:8b:af:8a:0b:78:99:d9:bb:d4:
e7:b4:9d:f0:23:79:c7:b2:4f:d0:90:d2:05:86:a1:
9e:71:66:8a:da:fd:60:43:19:c2:f5:e7:35:d9:fc:
9c:02:15:1b:04:eb:74:9e:eb:86:d0:18:8a:a6:71:
d2:a2:ba:d0:37:08:cd:1b:30:2d:58:8a:8e:fb:f9:
97:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3B:76:E3:0C:80:D8:17:A5:95:48:75:C2:33:53:CD:19:25:12:A9
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/nDt24wyA2BellUh1wjNTzRklEqk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
67:35:05:cd:21:86:fc:98:46:36:ae:f3:dc:44:1e:86:39:78:
45:71:3f:ca:9a:f4:e4:3c:5c:d1:4b:73:ce:1b:64:30:07:bf:
d2:85:23:ec:f8:12:d3:11:17:7b:19:d5:fe:cf:bc:ca:57:33:
93:32:dc:66:f3:94:8c:d4:24:d9:68:ca:e2:f9:7c:71:1a:bb:
e3:6c:b3:89:61:fe:2d:2f:65:ae:f8:5c:4c:1b:5d:8c:27:51:
c5:df:22:ea:09:62:f9:aa:65:06:b6:7d:c7:91:ff:cc:22:d2:
cf:7e:bc:07:1f:8d:4e:0b:9c:ec:70:89:fb:07:79:53:05:b2:
53:3b:41:64:bc:0f:1b:ba:8a:82:38:22:58:3c:4c:61:5d:dc:
f6:0e:62:1d:49:8f:dd:e9:b0:48:9b:cc:b7:3e:a9:69:cd:1f:
08:4a:9f:a2:33:3f:33:6d:f5:69:ce:35:01:c3:02:a9:f8:af:
f9:5f:ab:5b:ef:9b:8e:30:f3:63:71:62:18:13:78:51:3c:29:
af:c2:bd:d5:ea:a3:ae:43:70:fa:81:e8:54:be:d7:11:bb:8e:
2d:8e:cc:16:ed:be:7a:42:6f:14:d0:d1:7f:7f:dd:c4:ae:8d:
6d:05:86:1d:3d:74:e8:71:5c:bf:b0:a3:d4:cd:40:ee:70:3f:
6a:6d:25:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 03:24:42 2024 by rpki-client on console-ams.rpki-client.org