Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/pg8eT7CZhBf4OsX3NiSXE6B6NJk.roa
File: pg8eT7CZhBf4OsX3NiSXE6B6NJk.roa (raw, json)
Hash identifier: 6s3icnOJIJBTvnDHoqPEXZgCq46E0onFszGdOtUmc1U=
Subject key identifier: A6:0F:1E:4F:B0:99:84:17:F8:3A:C5:F7:36:24:97:13:A0:7A:34:99
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 11F6
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/pg8eT7CZhBf4OsX3NiSXE6B6NJk.roa
Signing time: Sun 07 Apr 2024 20:52:56 +0000
ROA not before: Sun 07 Apr 2024 20:52:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4598 (0x11f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 7 20:52:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A60F1E4FB0998417F83AC5F736249713A07A3499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f6:2d:9f:38:98:d2:f5:77:0f:5a:85:26:57:
cb:08:7a:82:bd:d4:0e:d7:67:a9:a1:27:01:a7:57:
82:d2:ae:99:73:2d:b8:a5:c1:7d:84:0e:ee:08:07:
ef:e3:ea:a5:c1:f5:6c:46:41:15:b3:7c:33:39:23:
cd:e6:02:b0:0d:44:9b:28:84:b0:a1:03:10:e7:a9:
32:c8:34:2d:90:57:db:ae:e9:91:de:07:34:98:89:
b0:43:a2:d0:cc:1b:cf:9f:08:d0:a6:31:aa:5d:38:
3a:a4:4d:28:97:a0:b5:33:f4:30:96:9f:eb:dd:61:
f8:17:a8:21:d2:87:c7:7e:d7:1c:f0:ca:5b:0d:0d:
a5:b7:f6:c1:3b:39:f2:b1:41:80:a9:f9:8f:bc:d4:
fa:b0:3c:8b:69:16:98:4f:1c:6b:49:71:2c:52:5f:
78:c4:73:d9:0e:f3:71:f0:e4:47:87:4d:97:cb:fb:
03:6a:1b:27:14:2a:bb:51:b6:47:c5:ab:a9:e8:d8:
5a:cf:16:8e:0c:38:a1:ef:c3:b4:a5:ea:42:bf:4c:
6e:1c:76:c8:5a:00:ef:f4:b4:aa:2e:07:45:5d:fc:
9b:48:a0:a9:d3:70:04:85:9c:fa:95:19:c6:05:34:
31:5e:bf:61:dd:12:55:c5:03:dd:b3:d3:3a:5f:1b:
80:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:0F:1E:4F:B0:99:84:17:F8:3A:C5:F7:36:24:97:13:A0:7A:34:99
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/pg8eT7CZhBf4OsX3NiSXE6B6NJk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
65:a0:18:86:e4:61:b3:2a:6c:cf:ad:0b:9e:23:45:4a:72:a8:
2c:48:78:6d:67:7b:f5:1d:f8:26:5c:d2:e6:79:3b:31:c1:47:
b8:a6:65:f8:9a:ce:01:87:a0:82:8e:02:c4:b6:7f:2d:3a:98:
47:7d:97:db:f1:4c:d8:a4:45:80:f0:0b:18:0d:4a:94:6c:01:
fa:76:8a:c2:58:6a:40:3c:80:31:ca:d9:db:e4:9c:2f:49:e7:
be:fe:31:c3:9f:bd:7a:e1:c0:b0:40:38:b2:7d:47:b1:3e:50:
f5:10:c2:92:a3:0e:b1:55:83:f5:d4:2c:dd:47:11:d9:14:89:
77:13:5a:75:d6:e7:fd:d6:bf:98:74:88:d8:6f:17:be:d4:af:
23:3a:b8:46:b2:47:8f:0a:9d:42:b0:af:a7:15:ed:14:e4:70:
bb:a3:1e:cd:86:3e:d2:f9:63:d8:1a:5d:cd:b2:fe:d8:6b:4e:
3a:63:8b:66:03:68:26:c3:31:23:a0:78:b4:70:6a:e8:30:a0:
31:cb:9c:1f:6e:8b:51:32:76:83:e5:c5:42:c1:98:10:2f:1d:
29:a1:10:4e:72:ef:9e:8f:6b:a2:c1:a2:2f:69:b6:96:ea:01:
31:ac:71:f5:d6:bc:57:e7:0b:db:0f:96:73:f6:43:96:6e:29:
1c:3e:ed:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 7 22:58:36 2024 by rpki-client on console-ams.rpki-client.org