Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/vvNOOM2djl6iEhAVJy_DaoBXhUc.roa
File: vvNOOM2djl6iEhAVJy_DaoBXhUc.roa (raw, json)
Hash identifier: 9CMw+AMQs/UXhIFlIOW9miEijWVX4qAybBncKelMLlY=
Subject key identifier: BE:F3:4E:38:CD:9D:8E:5E:A2:12:10:15:27:2F:C3:6A:80:57:85:47
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1862
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/vvNOOM2djl6iEhAVJy_DaoBXhUc.roa
Signing time: Wed 24 Apr 2024 23:53:40 +0000
ROA not before: Wed 24 Apr 2024 23:53:40 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6242 (0x1862)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 24 23:53:40 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BEF34E38CD9D8E5EA2121015272FC36A80578547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:96:61:c2:68:d0:c6:ab:ce:75:ab:d8:cd:80:
60:6a:25:ed:5f:fe:29:41:72:57:7c:a1:ba:fa:0b:
48:1b:39:c6:f0:a8:02:5d:51:05:21:a2:6f:86:d1:
66:85:6e:d1:61:c6:e4:87:52:b0:2d:83:cd:69:44:
a0:d4:d5:ef:7d:45:a5:f2:98:0e:72:89:48:e6:5b:
9d:af:96:01:15:a3:71:c1:b0:f6:2d:bf:8a:38:23:
fe:b9:8b:ed:e7:23:eb:16:93:9a:bd:0c:9c:b4:18:
99:01:ae:90:a1:d1:cd:06:55:77:f5:b9:6f:47:2d:
d6:7d:3d:95:ca:59:23:cc:a7:a5:a7:0f:68:32:3b:
f8:1b:dc:5f:6d:a6:cd:ba:66:0f:bb:3d:ce:c3:21:
3e:34:0e:6d:9e:d7:52:03:12:75:a3:4d:62:d6:54:
0c:fb:ae:00:9b:b0:4b:6f:80:60:e1:da:87:bb:f8:
6c:1c:79:b1:48:f8:73:ee:d1:09:43:69:a8:b8:56:
4c:79:27:96:01:95:10:7c:b6:b0:03:b5:ef:04:53:
f1:ee:65:98:65:3f:2d:36:6d:bf:f8:1e:23:b0:e5:
b0:7e:91:ee:be:c3:52:89:58:5c:cc:78:14:f6:fb:
b1:1d:83:20:a4:61:27:fa:0b:83:52:76:61:d2:23:
ef:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F3:4E:38:CD:9D:8E:5E:A2:12:10:15:27:2F:C3:6A:80:57:85:47
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/vvNOOM2djl6iEhAVJy_DaoBXhUc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
28:42:91:f6:96:6d:5d:53:5b:99:d1:2c:48:fa:73:03:ba:1e:
fc:87:44:d2:97:dc:63:25:4d:48:22:9f:45:fc:d2:45:9f:44:
aa:cf:aa:03:bc:09:ab:63:fd:67:c0:e3:bb:e2:c0:80:bc:6b:
17:38:90:53:8d:8c:b1:eb:c5:b1:cc:07:e9:d3:6b:ee:2f:87:
51:1c:05:82:ad:34:73:be:c4:5d:ea:9a:6b:79:f2:38:18:d5:
a6:e9:08:27:ac:f7:31:06:fa:62:2c:07:08:92:b6:ab:4f:5e:
39:23:d0:c6:6e:a8:c7:d4:47:25:2d:24:a4:71:44:65:ac:37:
05:7a:7f:27:0a:34:bf:58:1d:53:bd:af:92:2c:f2:f8:bc:69:
7a:56:da:62:88:8d:b7:64:5e:81:54:f9:04:fe:ac:47:46:39:
82:1d:2e:d5:d9:7c:87:0b:27:aa:2c:43:85:59:17:7d:1e:73:
10:2a:3e:88:38:67:69:4a:22:69:1a:4a:1b:91:81:9a:81:84:
85:b2:7a:50:f4:7b:37:05:11:e2:8e:ed:2b:5d:7b:36:f7:13:
26:25:0d:c1:f3:eb:67:06:ea:b9:15:4f:a7:ae:06:20:65:4c:
34:69:ef:07:63:8f:78:d3:ae:bb:47:e3:4c:fc:e8:e8:4f:f1:
3e:e6:fb:dd
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICGGIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MjQy
MzUzNDBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEJFRjM0RTM4Q0Q5RDhF
NUVBMjEyMTAxNTI3MkZDMzZBODA1Nzg1NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCnlmHCaNDGq851q9jNgGBqJe1f/ilBcld8obr6C0gbOcbwqAJd
UQUhom+G0WaFbtFhxuSHUrAtg81pRKDU1e99RaXymA5yiUjmW52vlgEVo3HBsPYt
v4o4I/65i+3nI+sWk5q9DJy0GJkBrpCh0c0GVXf1uW9HLdZ9PZXKWSPMp6WnD2gy
O/gb3F9tps26Zg+7Pc7DIT40Dm2e11IDEnWjTWLWVAz7rgCbsEtvgGDh2oe7+Gwc
ebFI+HPu0QlDaai4Vkx5J5YBlRB8trADte8EU/HuZZhlPy02bb/4HiOw5bB+ke6+
w1KJWFzMeBT2+7EdgyCkYSf6C4NSdmHSI+9zAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUvvNOOM2djl6iEhAVJy/DaoBXhUcwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL3Z2Tk9PTTJkamw2aUVo
QVZKeV9EYW9CWGhVYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAKEKR9pZtXVNbmdEsSPpzA7oe/IdE0pfc
YyVNSCKfRfzSRZ9Eqs+qA7wJq2P9Z8Dju+LAgLxrFziQU42MsevFscwH6dNr7i+H
URwFgq00c77EXeqaa3nyOBjVpukIJ6z3MQb6YiwHCJK2q09eOSPQxm6ox9RHJS0k
pHFEZaw3BXp/Jwo0v1gdU72vkizy+LxpelbaYoiNt2RegVT5BP6sR0Y5gh0u1dl8
hwsnqixDhVkXfR5zECo+iDhnaUoiaRpKG5GBmoGEhbJ6UPR7NwUR4o7tK117NvcT
JiUNwfPrZwbquRVPp64GIGVMNGnvB2OPeNOuu0fjTPzo6E/xPub73Q==
-----END CERTIFICATE-----
Generated at Thu Apr 25 01:32:26 2024 by rpki-client on console-fra.rpki-client.org