Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/nM_Gnx1PlhY5odGoi4Pivmuo2UE.roa
File: nM_Gnx1PlhY5odGoi4Pivmuo2UE.roa (raw, json)
Hash identifier: wQs5JRRe1jXGxFzsKGSDc29Y5OKENhnntnKDQkADhHw=
Subject key identifier: 9C:CF:C6:9F:1D:4F:96:16:39:A1:D1:A8:8B:83:E2:BE:6B:A8:D9:41
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0F6C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/nM_Gnx1PlhY5odGoi4Pivmuo2UE.roa
Signing time: Mon 01 Apr 2024 02:23:31 +0000
ROA not before: Mon 01 Apr 2024 02:23:31 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3948 (0xf6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 1 02:23:31 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9CCFC69F1D4F961639A1D1A88B83E2BE6BA8D941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c0:c6:9b:b9:ca:c3:e5:5c:6d:90:36:91:b1:
44:e0:7a:fc:15:5b:bb:a9:be:15:b2:3c:28:09:a8:
23:3e:c3:98:0e:18:ae:6f:7e:2a:8f:85:b7:db:c9:
99:23:9a:76:18:6c:ab:19:09:cb:79:26:2c:b5:ed:
c2:2f:74:d4:83:ea:3d:af:7e:b7:01:b7:58:84:da:
71:f1:a7:86:0f:56:a7:4a:18:7c:92:01:1e:96:43:
67:d9:67:b3:78:71:c4:3d:56:81:c0:c8:46:5a:0c:
e1:eb:2c:53:b7:cc:c7:34:9e:02:10:d5:89:a4:1d:
de:1a:68:ed:e4:ec:2b:a3:87:1d:5a:e1:49:05:3a:
93:22:e4:c0:af:55:4f:a6:c3:d8:38:0b:1f:0f:0e:
c8:da:4f:2d:e3:10:a7:4b:95:1a:0f:5d:3a:3b:71:
88:6a:27:c3:ea:02:d7:70:5a:65:b0:0c:3c:6f:a2:
ac:c9:c4:a4:5a:fe:74:ca:cb:83:4c:4e:1f:c2:72:
8d:84:13:5d:83:bb:0b:66:d2:d7:1a:4e:80:a7:3d:
95:e0:a4:43:13:b9:75:52:79:fc:ed:63:33:b2:a3:
9c:13:cb:76:8f:04:cc:6e:0b:04:9c:73:6a:2c:08:
8a:5b:3a:be:89:40:ac:a8:a1:e8:01:e6:b9:fd:68:
43:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:CF:C6:9F:1D:4F:96:16:39:A1:D1:A8:8B:83:E2:BE:6B:A8:D9:41
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/nM_Gnx1PlhY5odGoi4Pivmuo2UE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
29:30:7f:44:bc:93:8d:cb:06:41:17:a8:2d:d0:c6:b0:f9:b6:
c1:ee:d3:99:33:13:cd:18:76:a5:07:46:91:e6:02:ab:27:88:
92:d0:76:e4:15:4f:a3:ec:4a:1a:3b:43:38:0b:ae:41:53:7c:
a5:87:d9:34:30:7d:fb:87:f3:5a:be:a6:3c:1b:d3:64:97:89:
cb:12:03:1e:b9:37:a0:10:20:ce:eb:20:73:42:db:0d:fc:bd:
fb:f2:01:5c:16:73:c4:71:9b:4f:16:c2:a0:d2:68:d9:9a:9a:
09:ff:72:b1:fa:c2:5f:6f:de:aa:5d:3f:0c:84:bc:7b:b4:09:
66:e6:1f:57:f2:ee:9d:6e:66:09:22:c0:27:47:69:67:b0:ea:
54:ca:f8:a9:e0:60:9a:2a:70:56:1e:e7:20:05:3b:2a:87:40:
a9:e3:77:e1:94:53:49:e2:16:40:bd:f6:54:52:82:89:c2:7f:
4d:05:3b:8a:05:ad:e2:0a:54:78:8c:88:90:76:e3:a9:93:46:
39:34:70:a4:f7:ab:b8:22:24:f0:c8:5a:65:c5:b3:c6:cc:6d:
5c:93:33:b0:3a:2b:58:d6:e0:a9:50:66:1e:73:ff:6f:a6:89:
0e:09:26:f0:70:c0:b5:56:e5:5d:3d:a6:50:12:a1:63:02:fb:
f3:8a:c1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 1 03:32:35 2024 by rpki-client on console-ams.rpki-client.org