Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/qRXwGS97lUk0kIJ-y-B2MkQ59Es.roa
File: qRXwGS97lUk0kIJ-y-B2MkQ59Es.roa (raw, json)
Hash identifier: kNia/6ynxaPAh1K8zDEpbhh23a9ATuwIm0RpRJyZjSo=
Subject key identifier: A9:15:F0:19:2F:7B:95:49:34:90:82:7E:CB:E0:76:32:44:39:F4:4B
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0FB4
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/qRXwGS97lUk0kIJ-y-B2MkQ59Es.roa
Signing time: Mon 01 Apr 2024 20:22:41 +0000
ROA not before: Mon 01 Apr 2024 20:22:41 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4020 (0xfb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 1 20:22:41 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A915F0192F7B95493490827ECBE076324439F44B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a4:6e:8f:c5:d5:93:75:e4:99:67:fc:3c:d5:
68:79:c8:f3:b7:0f:f2:a9:18:ac:ea:af:3d:bc:49:
4d:55:c1:d9:c9:70:ce:8c:0d:d1:e8:c6:e2:27:fe:
9f:b9:ad:4a:be:fd:57:19:6f:25:0a:c6:e2:31:f3:
cc:3d:0f:b5:38:94:d0:df:2e:c4:db:e8:42:2f:10:
4d:3d:12:55:43:0a:e8:27:6b:86:9b:ea:d6:af:9a:
0a:ed:1d:65:8f:80:43:be:ac:8b:c4:b3:a7:88:58:
46:b1:54:25:d3:b1:03:8c:fd:a3:1b:d2:c1:5c:f8:
09:59:e0:52:3f:f0:88:31:16:17:0d:ee:f0:30:d3:
fd:c1:4a:31:e1:42:8a:e3:52:ea:1a:7f:75:fa:0b:
eb:bf:2a:b6:fa:57:83:d5:cb:a6:25:16:4a:45:ed:
07:d9:9d:1b:aa:06:4c:49:58:4c:e1:64:56:31:64:
3d:21:a9:b6:df:0f:81:5b:74:31:c3:d4:b8:af:b2:
d3:0c:26:6c:1f:0e:4f:62:6d:31:8a:9e:80:27:06:
53:5f:45:be:ee:28:e5:a8:72:40:ee:d2:7b:f5:41:
e4:ff:5f:ed:6e:34:ba:f7:8a:8e:c7:28:1a:5c:8a:
66:24:75:d9:63:52:60:f1:b1:81:b3:ec:a2:47:ee:
28:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:15:F0:19:2F:7B:95:49:34:90:82:7E:CB:E0:76:32:44:39:F4:4B
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/qRXwGS97lUk0kIJ-y-B2MkQ59Es.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
cf:fd:6d:60:55:df:b0:7f:f3:0d:e7:78:06:97:a3:a6:6f:92:
bc:d9:b8:c2:59:6c:47:d7:a9:7c:d5:41:05:cb:cf:22:0a:04:
4e:a6:a2:b2:34:72:49:58:7b:36:d2:e2:34:a1:97:84:a4:aa:
6a:3d:70:29:f2:4e:e8:76:ad:72:c6:b5:18:0b:f3:29:be:aa:
91:9f:76:13:4d:f7:68:d5:bb:ef:98:c9:52:9b:6d:d8:b9:c3:
5e:98:f0:d4:7c:a7:27:46:1c:11:98:45:f5:ca:ad:2c:ab:68:
cf:38:97:a9:ed:c1:40:11:5b:78:f7:5a:c9:55:78:f8:76:3f:
ed:de:26:c3:b6:ae:17:8b:49:ef:75:bc:02:3d:62:a5:a4:19:
c9:5a:d4:0e:9d:15:5c:97:c7:6a:82:0b:fc:5e:a4:c9:5f:4a:
e1:57:51:26:2f:c8:2d:86:4c:47:80:69:4d:73:e3:18:8d:03:
92:14:96:54:9c:6a:a3:0a:3d:58:23:13:b1:87:76:c0:05:1a:
12:e3:5a:7f:b2:09:a6:69:da:48:78:fa:e5:6c:9c:de:25:3c:
18:0d:8e:78:02:b1:32:cc:c6:87:cf:e1:1a:73:b6:86:d6:00:
f5:fd:bf:20:25:c6:4b:63:00:4c:fd:f2:14:b5:84:a5:a3:8c:
1b:64:86:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 1 21:55:01 2024 by rpki-client on console-fra.rpki-client.org