Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/tmDfrM_gzpomGr9ktwutF3wrjEc.roa
File: tmDfrM_gzpomGr9ktwutF3wrjEc.roa (raw, json)
Hash identifier: sLywlXhthoV3ey4Pn/Fo9lL4x8Zbo7jyNtzIMZ+vfD4=
Subject key identifier: B6:60:DF:AC:CF:E0:CE:9A:26:1A:BF:64:B7:0B:AD:17:7C:2B:8C:47
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 12D4
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/tmDfrM_gzpomGr9ktwutF3wrjEc.roa
Signing time: Wed 10 Apr 2024 04:23:04 +0000
ROA not before: Wed 10 Apr 2024 04:23:04 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4820 (0x12d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 10 04:23:04 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B660DFACCFE0CE9A261ABF64B70BAD177C2B8C47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:66:df:26:90:ec:b2:c9:14:e1:68:e0:a5:bd:
44:e3:fe:e8:1f:1b:96:18:ca:93:22:7e:10:05:82:
61:9b:af:44:0e:0b:52:53:e4:42:a9:4b:36:ac:85:
3a:ab:33:02:3b:43:5e:1c:30:9f:6e:6a:c9:e3:57:
46:b3:d2:35:a5:99:c0:81:9a:0a:7b:86:91:d9:6e:
43:5b:1b:55:2a:44:f8:45:3e:22:9e:fd:a2:6e:0b:
9c:ab:b5:37:49:ee:d7:b7:04:d0:e5:e9:23:b1:65:
f7:1c:7d:38:3e:31:34:ed:b2:7f:3b:05:93:ae:70:
6a:7d:c3:d2:d1:c5:58:83:0a:fb:7c:60:9e:36:8c:
01:5b:9a:c1:1f:f6:04:21:3a:77:7f:a6:9b:d1:d4:
97:ea:67:b1:e3:4d:7d:8b:32:03:a7:98:45:d2:ff:
e9:69:7c:5f:5f:a2:bb:cb:ec:f3:88:d7:ad:76:d3:
9c:d4:75:d9:fd:29:ed:3a:81:75:4c:cc:85:00:6f:
e5:da:c2:fc:f2:bc:50:3f:76:7c:cb:68:2b:d6:3c:
e5:48:92:1d:4e:6d:96:3d:15:cd:0a:c8:e2:85:7a:
9f:1c:3d:60:45:d4:ac:b9:42:33:06:ae:61:d7:59:
fb:ff:dc:41:e3:b2:3a:4c:7a:ef:50:5d:a2:40:ee:
4d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:60:DF:AC:CF:E0:CE:9A:26:1A:BF:64:B7:0B:AD:17:7C:2B:8C:47
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/tmDfrM_gzpomGr9ktwutF3wrjEc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
27:d0:4e:91:a3:e7:75:ff:8e:f9:8f:6e:60:ac:69:44:dc:00:
42:56:02:2c:90:f3:3d:15:79:3c:92:16:e8:09:bb:e0:88:65:
a0:af:3e:3f:90:eb:f9:76:fc:38:c5:09:31:7b:50:ca:fc:d9:
d4:1b:b3:1b:e2:76:8b:07:e1:e9:0e:34:12:24:ef:d3:7f:49:
82:31:41:e0:c5:19:12:58:42:25:c0:c7:16:58:ed:5f:14:06:
f9:b2:10:86:d9:80:07:2c:10:1b:1f:b6:83:e0:69:57:e6:6c:
d5:9b:e3:5b:df:1d:64:a1:a4:11:c3:d4:2e:78:9b:89:c4:5c:
cc:46:d7:d5:ad:e3:74:a0:d0:2d:d5:9d:fd:8b:bf:b7:1a:fa:
fc:a3:b8:b2:f4:9d:bd:4d:42:54:00:c2:7c:00:47:5f:83:3e:
c0:86:a1:1f:6a:49:71:7b:c7:3e:4e:82:05:f9:99:c6:bd:f5:
3d:e8:06:06:dd:89:51:28:8d:3a:df:d1:ec:da:40:93:ae:0d:
e9:61:1d:63:46:c6:84:90:32:c2:cd:9b:92:d7:9b:a0:cf:6e:
6f:ba:2e:76:2b:3a:18:b5:ad:12:97:db:62:e6:c8:25:88:af:
9e:25:03:46:8f:a2:a6:03:ef:2a:6f:41:80:da:ad:73:81:11:
de:65:ec:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 06:10:10 2024 by rpki-client on console-ams.rpki-client.org