Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/pLTA8ceum0n-PVeKtHIzqlcqjU4.roa
File: pLTA8ceum0n-PVeKtHIzqlcqjU4.roa (raw, json)
Hash identifier: lq5/CBTEbA/pdvYJ6vCuSjT+XLlID6r9C7U+jB3jbFc=
Subject key identifier: A4:B4:C0:F1:C7:AE:9B:49:FE:3D:57:8A:B4:72:33:AA:57:2A:8D:4E
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0EDC
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/pLTA8ceum0n-PVeKtHIzqlcqjU4.roa
Signing time: Sat 30 Mar 2024 14:22:31 +0000
ROA not before: Sat 30 Mar 2024 14:22:31 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3804 (0xedc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 30 14:22:31 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A4B4C0F1C7AE9B49FE3D578AB47233AA572A8D4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:50:cf:d2:4b:6f:66:99:b5:b8:0d:bd:c7:9d:
2c:97:66:ad:2f:fd:25:1d:67:1b:e7:e1:42:af:76:
84:fa:7b:83:ec:b5:7d:d4:d2:b9:c3:67:b8:f4:c4:
bc:f0:85:6e:8a:05:ab:6b:6b:24:d1:5a:87:9b:7c:
2f:8d:da:69:ea:a3:3f:cb:92:14:ca:aa:28:7c:d2:
c8:42:9d:0c:1d:60:6f:a4:0c:8d:8f:69:ae:12:d2:
ed:14:d2:78:59:c6:7f:af:84:4d:c9:f8:2b:6e:e0:
fe:a9:9d:f8:2c:00:58:93:1e:65:dd:55:aa:f4:24:
cf:62:e3:27:b5:2e:83:ca:28:74:81:61:c4:1d:8b:
bc:8a:9e:39:e4:fe:2f:b4:4c:57:c8:97:d5:da:78:
2d:4f:c5:43:2e:5a:54:2e:9c:eb:a7:8b:19:24:63:
fa:c8:b3:41:0c:39:b4:96:30:0d:87:9e:4e:a8:08:
55:d4:0f:8c:e5:0c:13:a4:b4:05:53:77:a6:77:2e:
0e:d5:92:8d:ee:85:e5:e0:cb:ae:41:ef:09:f9:79:
04:c6:8a:b7:3a:12:41:ab:c1:1a:9f:7c:9a:e7:6d:
b2:14:be:20:57:13:9f:d6:a3:17:8b:c2:cb:2b:5d:
28:45:46:6f:19:5d:f0:1f:24:80:7a:6b:da:c6:6c:
63:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B4:C0:F1:C7:AE:9B:49:FE:3D:57:8A:B4:72:33:AA:57:2A:8D:4E
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/pLTA8ceum0n-PVeKtHIzqlcqjU4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a7:3e:44:dd:df:af:b1:22:b9:8c:67:a7:91:bd:52:5a:dc:b7:
f1:77:9d:92:a7:a7:66:b2:a4:85:dc:37:99:37:c7:2c:5e:95:
ff:bc:f3:17:7c:8e:76:66:30:7c:97:41:08:4a:c2:50:b4:f9:
37:bc:e7:33:38:9a:09:f2:f4:61:c8:06:0e:cb:a1:95:f0:27:
d2:53:d7:34:bc:03:bc:59:8e:e3:a2:84:d3:1b:4c:30:f6:25:
e3:3c:81:e7:d5:69:2e:2a:56:0d:8a:c0:c5:48:d0:8b:e7:15:
a3:5a:46:20:4a:86:c1:1d:22:a5:37:39:48:74:53:be:99:fe:
d5:17:7f:bf:56:3e:c8:6f:7c:ea:99:a0:5b:dc:56:7b:b2:a2:
d7:8f:55:3b:da:40:80:b5:69:af:31:cb:de:26:9c:e8:b7:d8:
47:76:6a:9b:1e:a9:16:80:1b:1b:5b:80:76:d8:6c:41:76:a7:
02:70:ba:50:2f:0f:b1:59:2a:4c:c1:7a:73:f5:40:24:e0:4c:
22:75:a5:a8:ca:c7:a8:d3:83:50:ed:38:04:eb:03:89:a4:1b:
ef:56:21:1b:bc:a2:4b:94:f3:d3:76:a3:74:c3:b9:55:5a:26:
ca:f9:8b:e2:bd:ef:38:a6:af:96:e4:50:a1:66:9b:0c:71:59:
3d:84:bb:eb
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDtwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDAzMzAx
NDIyMzFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEE0QjRDMEYxQzdBRTlC
NDlGRTNENTc4QUI0NzIzM0FBNTcyQThENEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJUM/SS29mmbW4Db3HnSyXZq0v/SUdZxvn4UKvdoT6e4PstX3U
0rnDZ7j0xLzwhW6KBatrayTRWoebfC+N2mnqoz/LkhTKqih80shCnQwdYG+kDI2P
aa4S0u0U0nhZxn+vhE3J+Ctu4P6pnfgsAFiTHmXdVar0JM9i4ye1LoPKKHSBYcQd
i7yKnjnk/i+0TFfIl9XaeC1PxUMuWlQunOunixkkY/rIs0EMObSWMA2Hnk6oCFXU
D4zlDBOktAVTd6Z3Lg7Vko3uheXgy65B7wn5eQTGirc6EkGrwRqffJrnbbIUviBX
E5/WoxeLwssrXShFRm8ZXfAfJIB6a9rGbGNpAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUpLTA8ceum0n+PVeKtHIzqlcqjU4wHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL3BMVEE4Y2V1bTBuLVBW
ZUt0SEl6cWxjcWpVNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEApz5E3d+vsSK5jGenkb1SWty38Xedkqen
ZrKkhdw3mTfHLF6V/7zzF3yOdmYwfJdBCErCULT5N7znMziaCfL0YcgGDsuhlfAn
0lPXNLwDvFmO46KE0xtMMPYl4zyB59VpLipWDYrAxUjQi+cVo1pGIEqGwR0ipTc5
SHRTvpn+1Rd/v1Y+yG986pmgW9xWe7Ki149VO9pAgLVprzHL3iac6LfYR3Zqmx6p
FoAbG1uAdthsQXanAnC6UC8PsVkqTMF6c/VAJOBMInWlqMrHqNODUO04BOsDiaQb
71YhG7yiS5Tz03ajdMO5VVomyvmL4r3vOKavluRQoWabDHFZPYS76w==
-----END CERTIFICATE-----
Generated at Sat Mar 30 15:46:29 2024 by rpki-client on console-fra.rpki-client.org