Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/woYcxBwr_8RlBSS9lCaXZoVwq_o.roa
File: woYcxBwr_8RlBSS9lCaXZoVwq_o.roa (raw, json)
Hash identifier: NXrRKoNGtDhTPcfnSsSe19bDcURuxMj3w3+20AOTg/Q=
Subject key identifier: C2:86:1C:C4:1C:2B:FF:C4:65:05:24:BD:94:26:97:66:85:70:AB:FA
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 16D4
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/woYcxBwr_8RlBSS9lCaXZoVwq_o.roa
Signing time: Sat 20 Apr 2024 20:23:30 +0000
ROA not before: Sat 20 Apr 2024 20:23:30 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5844 (0x16d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 20 20:23:30 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C2861CC41C2BFFC4650524BD942697668570ABFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:35:dc:ff:36:93:c5:4b:d0:df:95:ea:48:79:
d0:c8:3a:fd:dc:85:52:60:cf:ec:93:13:56:4b:d7:
67:f7:39:18:f9:67:8d:89:c6:68:ae:83:33:f8:b6:
b9:99:81:43:5a:1c:8c:2e:bc:16:fd:78:97:c3:a2:
3e:ef:a3:17:19:06:93:cb:38:9c:e9:85:8b:07:a9:
eb:48:e6:c0:60:20:6c:94:fa:d1:79:a6:4e:2c:f5:
71:9e:e1:7f:f1:f0:cd:3a:af:92:da:3b:80:fe:45:
70:0c:15:2f:4b:02:5d:8a:36:3b:4f:50:27:92:ed:
9e:7e:3e:6c:c7:a7:04:66:3d:0f:47:a9:4c:d7:65:
f4:77:a9:a8:51:f1:d4:4c:66:c3:79:25:a6:34:34:
c4:c5:4b:3c:e7:e3:9e:aa:c7:01:11:cc:dc:f9:44:
60:a3:35:8e:a9:99:50:4e:d4:15:24:87:50:d6:1a:
7c:04:5c:0a:d6:fd:86:f9:0d:de:57:1e:6a:31:2e:
0c:30:1d:c0:0a:6c:32:8e:28:68:36:ea:a2:fb:a0:
11:a2:79:75:d7:18:70:01:08:d3:a4:7d:5d:01:2a:
f2:bd:58:2a:24:ba:8b:4d:8c:30:64:f5:12:91:52:
59:c6:a9:86:c6:3a:a9:e4:7a:0d:ab:ab:20:b7:50:
f0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:86:1C:C4:1C:2B:FF:C4:65:05:24:BD:94:26:97:66:85:70:AB:FA
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/woYcxBwr_8RlBSS9lCaXZoVwq_o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
cf:cb:ba:fc:e4:19:4f:9c:6c:8d:ea:4a:e5:7a:57:26:0b:5d:
4d:26:c5:c6:d1:a8:33:23:81:48:6e:f0:a5:c7:f1:3d:e3:f5:
be:4c:fe:49:52:b1:1b:19:82:c5:2f:86:b3:61:9b:db:1d:b5:
3b:21:64:ac:56:08:3f:94:6a:9c:63:79:6c:07:e7:a5:27:52:
a2:48:57:42:3c:f0:8a:54:d0:5a:cf:3a:bb:43:0f:a0:83:eb:
36:4c:1b:17:a5:ae:1b:46:53:3b:40:58:f7:5b:9d:7d:21:51:
00:f1:52:4c:97:bd:13:36:75:fb:5a:e8:36:a6:d4:2e:9b:cc:
a7:ae:06:6d:72:bc:b1:a4:c3:de:cb:57:88:65:5a:c8:25:a0:
8d:ce:cf:9e:2e:1e:e5:00:e1:da:59:f9:b9:21:81:6e:a1:9e:
7c:dc:a0:16:98:ac:e2:1b:4a:f1:45:2b:96:d5:a4:56:d1:e9:
2e:98:85:79:bc:70:cc:a0:62:b3:f6:63:95:62:09:22:53:b6:
7a:e9:dc:85:e3:36:cc:e3:43:1b:1d:29:75:39:d2:9c:9d:ac:
6a:55:99:4c:54:f5:4c:15:5f:4d:36:47:4e:45:88:c4:42:8a:
cf:34:78:85:a7:ca:de:bf:41:b5:ff:64:a5:8b:52:1f:17:1c:
dd:e5:b4:57
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICFtQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MjAy
MDIzMzBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEMyODYxQ0M0MUMyQkZG
QzQ2NTA1MjRCRDk0MjY5NzY2ODU3MEFCRkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDfNdz/NpPFS9DflepIedDIOv3chVJgz+yTE1ZL12f3ORj5Z42J
xmiugzP4trmZgUNaHIwuvBb9eJfDoj7voxcZBpPLOJzphYsHqetI5sBgIGyU+tF5
pk4s9XGe4X/x8M06r5LaO4D+RXAMFS9LAl2KNjtPUCeS7Z5+PmzHpwRmPQ9HqUzX
ZfR3qahR8dRMZsN5JaY0NMTFSzzn456qxwERzNz5RGCjNY6pmVBO1BUkh1DWGnwE
XArW/Yb5Dd5XHmoxLgwwHcAKbDKOKGg26qL7oBGieXXXGHABCNOkfV0BKvK9WCok
uotNjDBk9RKRUlnGqYbGOqnkeg2rqyC3UPDFAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUwoYcxBwr/8RlBSS9lCaXZoVwq/owHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL3dvWWN4QndyXzhSbEJT
UzlsQ2FYWm9Wd3Ffby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAz8u6/OQZT5xsjepK5XpXJgtdTSbFxtGo
MyOBSG7wpcfxPeP1vkz+SVKxGxmCxS+Gs2Gb2x21OyFkrFYIP5RqnGN5bAfnpSdS
okhXQjzwilTQWs86u0MPoIPrNkwbF6WuG0ZTO0BY91udfSFRAPFSTJe9EzZ1+1ro
NqbULpvMp64GbXK8saTD3stXiGVayCWgjc7Pni4e5QDh2ln5uSGBbqGefNygFpis
4htK8UUrltWkVtHpLpiFebxwzKBis/ZjlWIJIlO2euncheM2zONDGx0pdTnSnJ2s
alWZTFT1TBVfTTZHTkWIxEKKzzR4hafK3r9Btf9kpYtSHxcc3eW0Vw==
-----END CERTIFICATE-----
Generated at Sat Apr 20 21:17:09 2024 by rpki-client on console-ams.rpki-client.org