Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/rnFzoUCJxTwue_zaU4uC5fnGdmE.roa
File: rnFzoUCJxTwue_zaU4uC5fnGdmE.roa (raw, json)
Hash identifier: mUz/fanJj6GiF2dXkRhC0NZQeJJOG/gLwC58OY8SIlw=
Subject key identifier: AE:71:73:A1:40:89:C5:3C:2E:7B:FC:DA:53:8B:82:E5:F9:C6:76:61
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0FDA
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/rnFzoUCJxTwue_zaU4uC5fnGdmE.roa
Signing time: Tue 02 Apr 2024 05:52:43 +0000
ROA not before: Tue 02 Apr 2024 05:52:43 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4058 (0xfda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 2 05:52:43 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=AE7173A14089C53C2E7BFCDA538B82E5F9C67661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:03:b7:3d:53:ed:c3:c8:04:01:83:d1:32:e5:
46:52:94:85:05:f4:8c:72:c0:0a:f0:f7:a7:e9:58:
d7:b6:b8:6e:84:8c:54:7a:7f:ef:33:58:f0:8a:83:
20:ff:0b:bc:20:b8:72:5f:af:e8:ae:a9:c6:78:ac:
9c:d5:4b:9c:a7:86:89:02:9f:a8:e9:ca:5d:79:b6:
60:84:51:0d:ab:85:1c:7e:e4:e4:b3:a4:22:12:55:
74:84:ab:c9:68:06:1c:d7:75:ef:04:6b:af:82:0d:
e1:17:af:d7:ec:db:fd:7d:51:16:35:ed:23:2c:7f:
0e:e8:64:74:ba:20:1e:a6:4d:cf:06:dc:b7:e3:bc:
74:ca:06:48:61:26:3d:28:6b:54:83:d6:6a:f3:35:
7f:a2:e2:ba:70:39:05:25:27:05:4c:83:b5:15:cb:
59:a2:be:8c:4b:e4:5f:63:4f:64:3e:b3:0a:f8:a7:
9c:cf:3d:8b:a5:65:82:b1:8d:40:d6:71:36:c9:65:
74:98:47:e6:5a:7b:dd:2e:29:8c:1c:45:ae:fd:79:
51:49:db:44:2f:d5:88:e3:3e:a3:8d:0a:bd:7b:a5:
b9:18:af:d6:49:1c:e9:4a:97:63:0b:0c:54:32:75:
98:47:1d:7e:a1:25:aa:1f:01:5f:88:8b:73:59:40:
d1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:71:73:A1:40:89:C5:3C:2E:7B:FC:DA:53:8B:82:E5:F9:C6:76:61
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/rnFzoUCJxTwue_zaU4uC5fnGdmE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
90:a2:01:f0:86:c1:e2:d6:cd:5b:da:a9:0b:8d:2d:96:92:0c:
ba:4d:cc:81:4f:cf:83:e0:98:a7:48:c3:70:fe:c8:24:ee:d3:
4d:8f:4e:5e:15:b6:a0:55:e0:ea:dd:6a:9c:d2:2a:91:7e:e7:
dc:a5:57:37:ff:e8:fe:15:ee:51:43:ad:03:9a:c3:57:1c:a3:
fe:e4:fe:c7:f7:5a:a7:ab:60:56:97:74:02:be:dc:cc:c8:8b:
df:f4:e4:27:61:83:3e:f8:e8:d7:11:30:e1:8f:20:ea:cc:b9:
b8:18:6d:e7:be:11:28:f8:3d:73:08:d5:69:69:c3:30:00:0f:
76:cd:37:56:b2:c7:53:5a:a6:3f:fd:4b:a7:ee:7d:03:1f:ec:
6b:ca:0d:23:a1:c4:b7:b7:e9:fb:6a:60:cd:11:85:c4:c5:e6:
03:e9:bd:b5:18:21:14:08:16:76:90:1d:5a:39:24:56:b4:42:
46:2c:09:51:1f:a4:28:b1:23:f0:ec:c0:30:cb:86:ca:89:ec:
2e:48:bc:e9:6b:91:9c:75:aa:6d:e1:2a:6c:0f:a7:bf:6e:3c:
99:9c:ba:0d:2b:09:54:81:0c:4e:ed:83:06:d7:94:2e:72:8f:
66:eb:98:43:3b:4d:62:73:9b:93:42:8b:63:74:cc:d6:ab:b0:
5d:10:87:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 2 09:14:10 2024 by rpki-client on console-ams.rpki-client.org