Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/zpywhhXziYWU7wwMX8zJo4ugrIE.roa
File: zpywhhXziYWU7wwMX8zJo4ugrIE.roa (raw, json)
Hash identifier: 2W35mIHXnExr7pbq4TIsKNSsAtiZFBZ1N1K2Tk3QnA0=
Subject key identifier: CE:9C:B0:86:15:F3:89:85:94:EF:0C:0C:5F:CC:C9:A3:8B:A0:AC:81
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1326
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/zpywhhXziYWU7wwMX8zJo4ugrIE.roa
Signing time: Thu 11 Apr 2024 00:53:12 +0000
ROA not before: Thu 11 Apr 2024 00:53:12 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4902 (0x1326)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 11 00:53:12 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CE9CB08615F3898594EF0C0C5FCCC9A38BA0AC81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b1:b5:7d:15:75:8f:1b:8f:cd:91:a1:a4:43:
ca:40:db:5d:5b:e1:0a:c8:84:0f:ad:a5:ec:09:dc:
07:d6:e3:03:9f:56:a2:9e:f4:f9:90:2e:de:46:3f:
53:a8:f9:86:e5:0b:8c:a4:c7:47:d6:97:3e:83:86:
be:5d:1b:31:f1:22:5d:70:7d:5d:e9:c8:fd:d8:d3:
a8:86:c0:f8:e4:7b:48:ad:a6:40:25:32:66:c9:2c:
b4:0f:5d:d9:fa:f9:6a:51:e3:af:75:14:38:2b:06:
ea:b0:1d:f8:b8:e7:f9:a6:a5:fc:92:ef:80:c0:80:
24:c4:dd:ae:e0:2a:e7:ef:40:94:e0:5e:ef:e5:a4:
cf:54:b5:6a:db:f1:bf:c2:15:6f:28:c3:10:d0:3f:
e8:53:0b:2d:3d:42:93:e2:f7:77:9c:26:0f:a3:14:
98:44:2c:ef:ac:1b:be:e3:f0:2b:a3:89:d2:14:5e:
c3:79:d0:38:7b:01:fd:32:35:ab:16:f6:2c:5f:27:
f1:97:87:37:3d:6a:b1:cc:f4:06:3d:b6:40:9c:86:
fa:7b:92:fe:92:ae:7e:24:a4:25:f5:4c:7f:4c:42:
55:22:a8:c0:12:c9:0f:bc:4e:93:ef:fc:a5:6c:e0:
86:e4:c4:35:08:62:f9:c8:b5:7d:ac:d2:90:41:db:
14:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9C:B0:86:15:F3:89:85:94:EF:0C:0C:5F:CC:C9:A3:8B:A0:AC:81
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/zpywhhXziYWU7wwMX8zJo4ugrIE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
64:72:6a:40:55:18:84:c8:d8:ee:c3:86:1b:ab:18:77:4f:3d:
47:2a:98:1a:e0:b1:e6:37:7c:eb:9a:31:fe:ac:1d:30:65:34:
e1:bf:ad:65:43:3b:6e:3c:49:47:41:ac:30:a1:57:75:62:54:
7d:6f:0a:ad:90:20:e6:0b:b5:40:6a:88:92:2e:9f:77:97:fd:
fd:37:ee:74:a6:ab:20:a7:59:8f:cd:fe:d2:8c:d8:65:62:a3:
99:78:18:29:3b:8a:60:02:8c:20:d6:20:2d:93:b3:b8:0e:56:
0b:5a:8e:d1:bb:a8:70:59:10:b1:d2:c4:57:b2:0e:41:eb:e3:
1a:43:38:56:29:e6:cf:b1:3e:80:6f:48:a5:05:7f:78:e9:35:
30:50:ec:be:2e:f7:a0:a4:8f:29:58:60:b1:58:93:19:5e:f1:
09:c3:c8:76:cd:c3:5b:84:aa:b6:e0:a5:61:b2:79:5a:73:f0:
8b:34:89:9e:51:61:6d:99:b8:1b:49:c7:5c:87:5b:24:02:a1:
6b:cc:d5:4c:44:72:be:48:33:e5:c3:02:10:71:51:bc:b2:83:
64:a9:3e:f3:17:27:85:9c:76:e6:36:9b:22:63:55:ac:32:0a:
00:dd:99:6d:8c:4b:11:d9:c2:5f:a8:5e:96:7e:1b:4d:93:70:
a6:09:30:2d
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICEyYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MTEw
MDUzMTJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKENFOUNCMDg2MTVGMzg5
ODU5NEVGMEMwQzVGQ0NDOUEzOEJBMEFDODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJsbV9FXWPG4/NkaGkQ8pA211b4QrIhA+tpewJ3AfW4wOfVqKe
9PmQLt5GP1Oo+YblC4ykx0fWlz6Dhr5dGzHxIl1wfV3pyP3Y06iGwPjke0itpkAl
MmbJLLQPXdn6+WpR4691FDgrBuqwHfi45/mmpfyS74DAgCTE3a7gKufvQJTgXu/l
pM9UtWrb8b/CFW8owxDQP+hTCy09QpPi93ecJg+jFJhELO+sG77j8CujidIUXsN5
0Dh7Af0yNasW9ixfJ/GXhzc9arHM9AY9tkCchvp7kv6Srn4kpCX1TH9MQlUiqMAS
yQ+8TpPv/KVs4IbkxDUIYvnItX2s0pBB2xRvAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUzpywhhXziYWU7wwMX8zJo4ugrIEwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL3pweXdoaFh6aVlXVTd3
d01YOHpKbzR1Z3JJRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAZHJqQFUYhMjY7sOGG6sYd089RyqYGuCx
5jd865ox/qwdMGU04b+tZUM7bjxJR0GsMKFXdWJUfW8KrZAg5gu1QGqIki6fd5f9
/TfudKarIKdZj83+0ozYZWKjmXgYKTuKYAKMINYgLZOzuA5WC1qO0buocFkQsdLE
V7IOQevjGkM4Vinmz7E+gG9IpQV/eOk1MFDsvi73oKSPKVhgsViTGV7xCcPIds3D
W4SqtuClYbJ5WnPwizSJnlFhbZm4G0nHXIdbJAKha8zVTERyvkgz5cMCEHFRvLKD
ZKk+8xcnhZx25jabImNVrDIKAN2ZbYxLEdnCX6heln4bTZNwpgkwLQ==
-----END CERTIFICATE-----
Generated at Thu Apr 11 04:51:28 2024 by rpki-client on console-fra.rpki-client.org