Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/xa_oPG7OkPmMbdXn-GLqSvwDrPA.roa
File: xa_oPG7OkPmMbdXn-GLqSvwDrPA.roa (raw, json)
Hash identifier: yYlYcvP4z73KpJOdUgeXxsr5vUsvmAG/WSTKcO/i3Y0=
Subject key identifier: C5:AF:E8:3C:6E:CE:90:F9:8C:6D:D5:E7:F8:62:EA:4A:FC:03:AC:F0
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 187E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/xa_oPG7OkPmMbdXn-GLqSvwDrPA.roa
Signing time: Thu 25 Apr 2024 06:54:27 +0000
ROA not before: Thu 25 Apr 2024 06:54:27 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6270 (0x187e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 25 06:54:27 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C5AFE83C6ECE90F98C6DD5E7F862EA4AFC03ACF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:08:1a:6f:6a:f9:ac:a7:33:5d:46:22:24:ee:
88:5d:66:87:08:5a:96:e5:58:dd:71:1b:1a:e6:cb:
97:1e:13:fb:a2:1b:46:28:e4:2a:b9:13:be:c9:e4:
3c:e6:8d:5c:e9:24:f5:dc:5d:d9:67:27:aa:84:b0:
a5:cd:ef:25:16:41:4a:11:04:1f:03:92:54:7e:07:
7a:30:16:fc:a7:1f:c2:e2:d8:77:b6:47:e5:73:06:
59:a1:2f:86:de:a5:24:01:80:96:f5:c9:60:3a:6b:
a4:7b:d8:14:4c:fa:dd:05:b9:35:08:74:b5:14:a9:
8f:90:b4:3c:bf:de:50:4b:db:e5:be:07:ab:9c:a1:
31:24:0c:d1:fc:57:51:b1:09:19:32:4e:9f:50:25:
45:46:1a:50:31:06:02:03:a6:4f:7b:5e:2c:e2:03:
7c:17:96:33:e0:19:8e:04:de:2d:bd:12:1f:5b:27:
5c:b2:6c:94:ce:56:41:50:00:47:34:ce:d3:7f:f6:
36:76:5d:18:63:53:b7:0c:ed:d3:70:52:dc:58:a5:
b2:f3:32:02:32:73:35:aa:bc:ef:83:83:ac:d3:2a:
5b:21:f7:53:70:cf:56:18:1c:5b:30:f3:68:8a:46:
76:51:93:e5:de:21:d9:59:0e:5b:98:44:9f:1f:fe:
dc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AF:E8:3C:6E:CE:90:F9:8C:6D:D5:E7:F8:62:EA:4A:FC:03:AC:F0
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/xa_oPG7OkPmMbdXn-GLqSvwDrPA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2d:cc:15:1b:73:1a:86:44:87:aa:df:85:c8:1f:b0:10:18:30:
36:31:ae:41:04:c0:8b:24:ac:70:55:8a:19:bb:62:48:b4:5a:
da:d8:e4:fa:ca:62:fb:52:b5:22:f2:86:10:28:0c:0a:2b:5b:
b2:64:61:74:d9:4e:29:0f:dd:45:8c:d5:aa:6a:42:ec:e2:ad:
b4:e3:cb:8f:7a:8d:bd:6e:a6:8d:15:79:fb:8d:3c:08:80:b1:
9f:04:c2:5e:35:20:4c:1b:15:f1:c6:d3:37:93:e1:5d:fc:bf:
33:28:c9:dc:6b:03:b2:9e:c2:d7:b0:87:1d:f2:b1:81:ec:48:
63:d7:ee:67:e4:22:0d:59:36:93:75:ff:d9:1b:16:cb:3f:b4:
ce:eb:c9:1a:d9:c7:7e:a8:d1:a7:a5:43:19:b0:9e:c0:0f:a5:
70:1e:aa:b0:cc:97:ee:a7:4b:65:3a:13:f5:e6:1c:b9:de:a6:
40:30:4c:53:b6:aa:5a:73:c0:16:b3:d5:c0:96:ad:30:13:a0:
44:77:eb:4a:ab:93:2f:7b:87:ae:28:c5:58:2c:5b:37:f2:d9:
23:4c:0b:c0:b6:a6:9c:80:6d:f1:07:cd:46:50:e9:06:b5:c8:
cb:c6:47:4a:f3:ea:4d:c3:18:46:d9:2f:88:78:90:fe:28:32:
1f:e5:ef:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 07:57:00 2024 by rpki-client on console-fra.rpki-client.org