Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/pK2KC2iQ0lG4OfwweKfyDS3V6vM.roa
File: pK2KC2iQ0lG4OfwweKfyDS3V6vM.roa (raw, json)
Hash identifier: CQuhGmJxprvtkzgL+dL1sA0ZlCxuhRo5+hxrbAk66KM=
Subject key identifier: A4:AD:8A:0B:68:90:D2:51:B8:39:FC:30:78:A7:F2:0D:2D:D5:EA:F3
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 13F4
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/pK2KC2iQ0lG4OfwweKfyDS3V6vM.roa
Signing time: Sat 13 Apr 2024 04:23:18 +0000
ROA not before: Sat 13 Apr 2024 04:23:18 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5108 (0x13f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 13 04:23:18 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A4AD8A0B6890D251B839FC3078A7F20D2DD5EAF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:29:bb:12:a0:7b:82:04:62:90:43:c6:7f:4d:
40:91:a9:27:85:46:65:aa:a5:a2:c6:9a:47:2f:68:
7e:90:a3:59:53:ea:46:82:12:81:81:db:7b:c0:d0:
b2:e4:05:3d:04:b6:73:8a:66:a6:c0:61:3a:a5:85:
d5:84:25:ab:10:ab:47:97:6e:2f:65:50:0b:ef:41:
3e:e0:8a:5c:04:83:69:08:f8:58:35:89:c8:08:2e:
32:68:b9:05:7e:af:40:7d:e2:78:55:20:3d:3a:49:
a0:c6:9e:52:4b:d5:59:50:a6:8d:fc:aa:c8:29:25:
f5:9c:34:a4:4b:2f:d0:52:8a:8f:e9:cd:e4:c3:5f:
4e:14:5c:24:e1:93:dc:c7:f0:69:03:03:2f:c9:b3:
f3:04:af:08:7f:76:8e:3d:b9:3d:9a:da:4d:ab:1c:
06:6a:ca:f4:b9:8a:a0:bc:56:82:cb:23:2d:4e:c9:
9f:7d:ed:d6:4a:ee:f1:f0:a8:a9:67:6b:fa:04:a8:
68:44:64:7f:15:29:95:1c:00:43:c6:2b:b3:b8:9c:
4e:54:92:05:42:73:62:8e:f9:eb:5b:26:a4:bc:5a:
1e:16:bd:e2:83:35:a0:bf:68:54:d7:08:15:f3:14:
89:ef:84:70:94:0d:03:67:c4:06:f4:74:e1:59:6a:
24:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AD:8A:0B:68:90:D2:51:B8:39:FC:30:78:A7:F2:0D:2D:D5:EA:F3
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/pK2KC2iQ0lG4OfwweKfyDS3V6vM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0e:4f:53:43:9f:25:6e:eb:ee:99:c6:13:8b:6f:af:83:90:10:
aa:94:52:32:ba:19:8d:5e:54:4b:86:b9:84:0a:54:5b:94:ae:
d4:0a:ba:d6:f8:4d:09:a8:74:f7:1f:d3:59:35:f3:67:07:ad:
7b:b4:c4:1b:14:2a:c2:b0:37:7a:6e:8b:a0:ea:6d:4e:c2:31:
df:25:d1:85:b7:ca:3f:fe:84:fb:18:4f:e6:59:32:6b:f1:e8:
dd:23:5a:9a:3d:5c:74:a4:35:f0:be:21:09:52:46:04:66:a4:
28:82:f6:42:2d:b8:d4:b1:e1:df:49:c1:7e:f2:00:4d:0e:ea:
95:d8:2e:8e:7e:ff:71:d5:73:e5:0b:e5:1a:2a:a6:92:08:57:
fa:9b:61:51:5c:f9:6d:1f:13:fa:43:bf:83:d7:3c:34:b4:64:
39:48:e4:39:89:b6:9d:a4:94:5c:37:ee:eb:f6:7b:48:68:01:
6a:3d:64:27:ee:ad:a6:2c:da:58:66:c9:74:2e:d6:3e:fc:6d:
7d:7e:c8:52:8e:3a:cc:e7:5d:0d:83:c0:81:3b:a5:69:b1:eb:
e8:ab:8a:a6:cc:d5:3c:18:0e:63:0b:d8:52:69:25:b7:bc:c6:
72:3b:17:63:b2:43:c5:50:9d:b8:2a:c2:b4:55:12:3c:28:f9:
78:72:e7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 13 06:06:47 2024 by rpki-client on console-ams.rpki-client.org