Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/xyGei8ytqdKTzcO7ntzTnpLXV6o.roa
File: xyGei8ytqdKTzcO7ntzTnpLXV6o.roa (raw, json)
Hash identifier: 5yzSXYUbTyVjGvrYbjLn/ubH4lOb7yH1GkjPO2Mvrfc=
Subject key identifier: C7:21:9E:8B:CC:AD:A9:D2:93:CD:C3:BB:9E:DC:D3:9E:92:D7:57:AA
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0FB8
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/xyGei8ytqdKTzcO7ntzTnpLXV6o.roa
Signing time: Mon 01 Apr 2024 21:22:40 +0000
ROA not before: Mon 01 Apr 2024 21:22:40 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4024 (0xfb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 1 21:22:40 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C7219E8BCCADA9D293CDC3BB9EDCD39E92D757AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:4c:63:40:aa:b8:c6:61:e1:5d:ff:84:9c:6c:
c3:a2:17:cf:a9:1a:ed:2f:46:ed:4c:56:e4:76:ff:
12:6a:dc:cd:f7:d5:39:69:1b:33:01:7d:21:37:99:
9f:c1:82:fd:a3:9f:66:f4:a3:43:35:ab:09:d1:98:
3c:cd:80:11:55:8f:f6:30:eb:9f:28:4a:b0:f9:f2:
06:51:33:fa:15:8a:72:dc:2e:6e:fa:ac:e2:bb:f5:
a8:16:67:29:23:72:88:05:62:af:6c:63:2c:49:0c:
a4:36:e6:b3:10:ad:03:a3:2f:4c:9b:d4:9e:a0:70:
a8:4f:f2:08:6b:e3:6d:e6:b1:00:a0:13:94:35:c6:
a5:67:91:0c:82:fb:4e:4f:00:67:d5:fd:82:78:e0:
8d:9b:9a:14:44:19:b7:3b:86:b5:1c:14:fb:38:6a:
89:4e:c9:7d:aa:32:da:cb:99:79:8e:01:5f:38:c8:
13:cc:d2:d2:59:13:ef:04:97:a7:1f:78:0d:b5:1e:
f2:96:b5:cf:14:2f:7d:0b:e5:fe:47:d9:bb:c0:00:
41:a2:2e:22:50:8c:13:3d:fd:2f:ee:5b:fb:56:e5:
dc:a2:ab:1d:c0:9d:f7:96:94:08:46:ef:81:07:cc:
ac:5d:26:65:fd:ca:83:cd:f7:99:94:59:01:79:44:
77:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:21:9E:8B:CC:AD:A9:D2:93:CD:C3:BB:9E:DC:D3:9E:92:D7:57:AA
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/xyGei8ytqdKTzcO7ntzTnpLXV6o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4f:01:92:ed:34:37:0e:77:39:cd:ef:fd:43:f3:60:47:97:ba:
7d:09:70:5e:f8:44:38:6e:c1:cf:43:5c:a6:81:51:fa:79:e6:
df:5e:ad:f3:be:67:bb:3e:1b:06:03:8e:d0:22:5f:b0:9a:b7:
c7:b0:ad:43:85:04:81:49:3e:e5:2d:de:b0:81:b8:c6:7a:17:
94:f6:7b:05:6b:28:57:6f:75:17:27:53:5a:e6:82:60:be:b8:
96:55:fd:bd:95:cf:0f:dc:bb:b4:1a:18:6c:b2:d1:76:1f:18:
52:42:fe:e7:93:a7:37:a5:ad:fa:45:82:f6:87:5a:1e:2d:bc:
4e:bf:e0:1e:4b:b1:31:f6:b2:1e:7f:46:6e:74:6f:e6:61:12:
a1:0b:1f:4a:33:8e:0a:75:4b:49:24:c6:6b:e2:9e:15:7c:9b:
2c:5d:fd:e6:48:5d:f5:3f:66:b0:cd:c8:0d:23:31:25:91:83:
d9:ca:ff:36:7f:23:3c:2d:0b:32:d6:d7:b1:93:fe:e6:24:58:
ab:6f:db:4d:c1:61:11:fc:73:ab:0d:a0:76:7a:8a:ca:a3:d3:
d7:6f:bb:12:43:a4:f3:55:73:5c:f1:3f:a5:68:28:7b:c3:69:
9a:4d:c6:32:eb:05:1a:17:7a:95:bc:52:13:ae:9b:4b:db:b7:
65:36:2c:5e
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICD7gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MDEy
MTIyNDBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEM3MjE5RThCQ0NBREE5
RDI5M0NEQzNCQjlFRENEMzlFOTJENzU3QUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDyTGNAqrjGYeFd/4ScbMOiF8+pGu0vRu1MVuR2/xJq3M331Tlp
GzMBfSE3mZ/Bgv2jn2b0o0M1qwnRmDzNgBFVj/Yw658oSrD58gZRM/oVinLcLm76
rOK79agWZykjcogFYq9sYyxJDKQ25rMQrQOjL0yb1J6gcKhP8ghr423msQCgE5Q1
xqVnkQyC+05PAGfV/YJ44I2bmhREGbc7hrUcFPs4aolOyX2qMtrLmXmOAV84yBPM
0tJZE+8El6cfeA21HvKWtc8UL30L5f5H2bvAAEGiLiJQjBM9/S/uW/tW5dyiqx3A
nfeWlAhG74EHzKxdJmX9yoPN95mUWQF5RHdHAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUxyGei8ytqdKTzcO7ntzTnpLXV6owHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL3h5R2VpOHl0cWRLVHpj
TzdudHpUbnBMWFY2by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEATwGS7TQ3Dnc5ze/9Q/NgR5e6fQlwXvhE
OG7Bz0NcpoFR+nnm316t875nuz4bBgOO0CJfsJq3x7CtQ4UEgUk+5S3esIG4xnoX
lPZ7BWsoV291FydTWuaCYL64llX9vZXPD9y7tBoYbLLRdh8YUkL+55OnN6Wt+kWC
9odaHi28Tr/gHkuxMfayHn9GbnRv5mESoQsfSjOOCnVLSSTGa+KeFXybLF395khd
9T9msM3IDSMxJZGD2cr/Nn8jPC0LMtbXsZP+5iRYq2/bTcFhEfxzqw2gdnqKyqPT
12+7EkOk81VzXPE/pWgoe8Npmk3GMusFGhd6lbxSE66bS9u3ZTYsXg==
-----END CERTIFICATE-----
Generated at Tue Apr 2 00:23:37 2024 by rpki-client on console-fra.rpki-client.org