Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/pz2sMCpjziSumxlb5jM_JOhqVW8.roa
File: pz2sMCpjziSumxlb5jM_JOhqVW8.roa (raw, json)
Hash identifier: vCptgpApOcEFJ0zNwLAjC2Nqikzdgy6aQZJlC2GaiGk=
Subject key identifier: A7:3D:AC:30:2A:63:CE:24:AE:9B:19:5B:E6:33:3F:24:E8:6A:55:6F
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1BD0
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/pz2sMCpjziSumxlb5jM_JOhqVW8.roa
Signing time: Sat 04 May 2024 03:24:22 +0000
ROA not before: Sat 04 May 2024 03:24:22 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7120 (0x1bd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 4 03:24:22 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A73DAC302A63CE24AE9B195BE6333F24E86A556F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:35:e4:1c:f4:5e:1f:42:7f:3d:5f:52:6c:c5:
43:df:1a:73:43:be:17:a9:06:7a:60:20:0e:25:98:
b9:39:44:53:f7:88:32:6b:79:f0:71:c0:00:9d:70:
a6:4c:6f:cd:34:84:51:0e:ad:f5:73:4d:34:9f:bc:
54:8a:cd:38:1b:eb:ea:91:0a:1c:05:68:a6:d5:9e:
78:a0:31:67:12:d5:a8:bd:6f:16:3e:fc:f8:79:1d:
e8:fa:49:54:93:0c:90:ff:79:7f:f6:92:65:f5:4b:
a9:a9:53:a4:b7:e6:6f:71:35:1c:fe:60:22:8e:69:
94:d0:d7:6d:07:7d:87:19:87:93:3d:82:2d:13:47:
69:98:c1:6a:a8:eb:c9:b2:30:f0:3d:1d:13:77:8b:
f2:c9:e2:21:62:a5:49:17:c3:70:bc:cb:e6:6c:30:
41:0b:ff:01:e8:94:e6:ff:4c:7e:bf:55:7f:0a:50:
90:18:23:ad:11:7a:c6:5c:e8:fa:11:17:d7:0c:54:
25:d7:cf:50:0b:f7:ed:6a:22:d0:08:71:9f:15:35:
42:b0:49:65:15:97:e3:de:78:4d:5e:c5:a0:e8:44:
67:f0:89:4b:11:e9:1e:aa:7f:65:48:3f:03:7e:f4:
f7:11:c6:f9:e0:b8:d3:7b:8a:36:58:c7:b6:16:43:
6c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3D:AC:30:2A:63:CE:24:AE:9B:19:5B:E6:33:3F:24:E8:6A:55:6F
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/pz2sMCpjziSumxlb5jM_JOhqVW8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
49:08:9d:79:6d:15:cf:6d:ef:98:d2:1d:04:6a:ec:0e:b3:b4:
b2:ca:c2:dc:a4:f0:88:76:09:30:f9:d3:70:9e:f5:c2:66:a1:
06:e8:e4:f8:10:0f:25:46:ce:76:ed:d2:05:10:b7:93:29:93:
c1:11:58:3d:d5:23:e0:d8:fe:50:c2:1e:aa:af:a2:5b:4b:39:
f0:d0:66:ad:c9:e7:e4:5b:28:d3:79:d9:70:ba:11:8d:92:e8:
17:00:5e:8e:36:34:f4:df:4c:4f:90:12:cd:37:3d:4d:69:9b:
4c:98:92:93:30:a9:69:67:29:5c:41:47:71:49:a2:32:70:63:
fb:71:b6:54:4f:5f:da:5b:84:84:77:70:fe:6f:23:02:fe:f1:
14:40:c0:32:3f:30:e4:ea:ec:2d:9d:64:82:19:08:65:0d:8c:
a5:9f:a5:28:63:fd:6a:3d:b5:23:9a:41:24:1b:2f:9b:d6:ce:
8a:1b:cc:62:13:30:f9:1a:b7:cd:65:28:a2:a4:70:10:0d:34:
e9:27:ad:09:8d:21:f9:92:df:44:7a:79:8b:ef:ce:f2:32:1d:
17:7f:c4:16:f5:7c:64:f4:aa:05:4b:5c:cf:47:c3:2b:db:bf:
fb:a7:34:e0:63:b9:88:98:b4:29:ce:60:e7:ba:84:51:f6:f5:
53:cb:35:d4
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICG9AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA1MDQw
MzI0MjJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEE3M0RBQzMwMkE2M0NF
MjRBRTlCMTk1QkU2MzMzRjI0RTg2QTU1NkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGNeQc9F4fQn89X1JsxUPfGnNDvhepBnpgIA4lmLk5RFP3iDJr
efBxwACdcKZMb800hFEOrfVzTTSfvFSKzTgb6+qRChwFaKbVnnigMWcS1ai9bxY+
/Ph5Hej6SVSTDJD/eX/2kmX1S6mpU6S35m9xNRz+YCKOaZTQ120HfYcZh5M9gi0T
R2mYwWqo68myMPA9HRN3i/LJ4iFipUkXw3C8y+ZsMEEL/wHolOb/TH6/VX8KUJAY
I60ResZc6PoRF9cMVCXXz1AL9+1qItAIcZ8VNUKwSWUVl+PeeE1exaDoRGfwiUsR
6R6qf2VIPwN+9PcRxvnguNN7ijZYx7YWQ2xzAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUpz2sMCpjziSumxlb5jM/JOhqVW8wHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL3B6MnNNQ3BqemlTdW14
bGI1ak1fSk9ocVZXOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEASQideW0Vz23vmNIdBGrsDrO0ssrC3KTw
iHYJMPnTcJ71wmahBujk+BAPJUbOdu3SBRC3kymTwRFYPdUj4Nj+UMIeqq+iW0s5
8NBmrcnn5Fso03nZcLoRjZLoFwBejjY09N9MT5ASzTc9TWmbTJiSkzCpaWcpXEFH
cUmiMnBj+3G2VE9f2luEhHdw/m8jAv7xFEDAMj8w5OrsLZ1kghkIZQ2MpZ+lKGP9
aj21I5pBJBsvm9bOihvMYhMw+Rq3zWUooqRwEA006SetCY0h+ZLfRHp5i+/O8jId
F3/EFvV8ZPSqBUtcz0fDK9u/+6c04GO5iJi0Kc5g57qEUfb1U8s11A==
-----END CERTIFICATE-----
Generated at Sat May 4 05:02:32 2024 by rpki-client on console-fra.rpki-client.org