Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/nGpeZLRO4FMRycqOkhPQPz6FeMA.roa
File: nGpeZLRO4FMRycqOkhPQPz6FeMA.roa (raw, json)
Hash identifier: JxcwFvEc2eYBZOdQQxA7VFa9Djrc7ZrtKSw/ZbquUhs=
Subject key identifier: 9C:6A:5E:64:B4:4E:E0:53:11:C9:CA:8E:92:13:D0:3F:3E:85:78:C0
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 16C0
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/nGpeZLRO4FMRycqOkhPQPz6FeMA.roa
Signing time: Sat 20 Apr 2024 15:23:31 +0000
ROA not before: Sat 20 Apr 2024 15:23:31 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5824 (0x16c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 20 15:23:31 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9C6A5E64B44EE05311C9CA8E9213D03F3E8578C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ab:55:12:6a:1c:5c:77:9d:7a:42:f6:c8:16:
48:a4:3c:6e:1e:b6:99:0e:e6:e7:4b:5b:d3:fd:ac:
8b:b7:6e:58:f4:17:19:b2:71:69:b4:8d:c4:e5:c0:
97:b5:6a:82:5f:10:29:b3:e8:78:6a:fd:a0:28:a6:
2b:e1:b3:5c:8e:76:c6:88:f7:22:37:87:ce:ba:aa:
de:0b:3a:c1:61:9c:f0:e4:56:6e:3c:be:ed:d1:ee:
04:4a:df:bc:fb:7c:b1:30:c4:37:c9:34:78:1a:8e:
77:be:14:19:84:15:b4:b3:70:c1:1f:15:65:73:2d:
16:f1:8b:5b:0d:75:59:70:3e:12:46:47:29:9f:ab:
89:21:50:84:53:40:f9:79:45:69:53:46:82:09:ff:
58:5e:4f:c8:76:a3:b0:ad:09:16:be:82:00:82:83:
30:ca:d2:1f:2b:13:74:96:c4:01:13:dc:3b:1f:fe:
64:c6:44:be:26:c3:dc:0a:de:0c:46:3e:2d:0d:29:
91:c2:08:9c:49:3f:af:cc:be:87:75:8e:f5:e3:aa:
47:ef:9b:9e:a7:3f:86:9d:eb:f7:3c:b4:2f:da:5f:
2f:6f:7f:d0:67:7a:bc:1b:b0:4d:9e:ed:00:77:98:
73:30:6d:af:bf:a3:0d:fe:a4:80:aa:61:0b:6a:8b:
64:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6A:5E:64:B4:4E:E0:53:11:C9:CA:8E:92:13:D0:3F:3E:85:78:C0
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/nGpeZLRO4FMRycqOkhPQPz6FeMA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ca:04:1c:41:e4:4f:28:ab:5a:5c:3f:25:2e:2c:31:2f:f7:2c:
a8:94:54:8f:66:a9:bc:2e:7d:7c:b7:f9:f2:2b:84:8e:c0:76:
2a:5f:17:70:09:56:7d:39:fa:87:89:5c:cb:96:c5:2a:50:d7:
49:bc:a6:2e:09:96:6e:ea:b6:60:7f:d7:2f:f7:ed:78:53:03:
fd:1e:59:ba:c3:4d:7f:a3:0a:3f:f5:ed:14:45:81:e0:cb:14:
cd:ed:9c:d0:3d:08:b6:46:a2:a8:cd:13:3e:49:03:9e:fc:de:
58:55:7f:8a:2e:9c:a4:00:a6:29:c9:be:d0:95:a8:b2:a5:d2:
6c:4b:7c:60:9e:b0:38:c5:32:1d:50:9b:ca:f0:89:35:f4:48:
b1:92:99:b8:6c:a8:f8:64:61:a1:f3:b7:4e:09:5e:d0:96:60:
4d:28:55:e6:8a:4f:df:31:32:51:85:53:54:0b:13:98:67:23:
6d:bd:fc:97:cd:b6:70:5c:8a:5a:b6:0e:81:12:07:cb:ed:70:
fc:a2:ef:d8:3e:ea:0f:d0:92:a8:64:b7:ab:72:84:cd:f8:72:
2e:29:06:ab:98:ec:d0:90:ca:40:c6:27:5f:3f:67:62:a8:00:
af:40:35:2a:d0:eb:f6:6d:5c:0b:d4:b6:fa:9c:70:8c:58:a8:
25:56:f5:d7
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICFsAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MjAx
NTIzMzFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDlDNkE1RTY0QjQ0RUUw
NTMxMUM5Q0E4RTkyMTNEMDNGM0U4NTc4QzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD1q1USahxcd516QvbIFkikPG4etpkO5udLW9P9rIu3blj0Fxmy
cWm0jcTlwJe1aoJfECmz6Hhq/aAopivhs1yOdsaI9yI3h866qt4LOsFhnPDkVm48
vu3R7gRK37z7fLEwxDfJNHgajne+FBmEFbSzcMEfFWVzLRbxi1sNdVlwPhJGRymf
q4khUIRTQPl5RWlTRoIJ/1heT8h2o7CtCRa+ggCCgzDK0h8rE3SWxAET3Dsf/mTG
RL4mw9wK3gxGPi0NKZHCCJxJP6/Mvod1jvXjqkfvm56nP4ad6/c8tC/aXy9vf9Bn
erwbsE2e7QB3mHMwba+/ow3+pICqYQtqi2SNAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUnGpeZLRO4FMRycqOkhPQPz6FeMAwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL25HcGVaTFJPNEZNUnlj
cU9raFBRUHo2RmVNQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAygQcQeRPKKtaXD8lLiwxL/csqJRUj2ap
vC59fLf58iuEjsB2Kl8XcAlWfTn6h4lcy5bFKlDXSbymLgmWbuq2YH/XL/fteFMD
/R5ZusNNf6MKP/XtFEWB4MsUze2c0D0ItkaiqM0TPkkDnvzeWFV/ii6cpACmKcm+
0JWosqXSbEt8YJ6wOMUyHVCbyvCJNfRIsZKZuGyo+GRhofO3Tgle0JZgTShV5opP
3zEyUYVTVAsTmGcjbb38l822cFyKWrYOgRIHy+1w/KLv2D7qD9CSqGS3q3KEzfhy
LikGq5js0JDKQMYnXz9nYqgAr0A1KtDr9m1cC9S2+pxwjFioJVb11w==
-----END CERTIFICATE-----
Generated at Sat Apr 20 18:52:50 2024 by rpki-client on console-ams.rpki-client.org