Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/2ObFFE9BchJyMUk3aw026DCayNA.roa
File: 2ObFFE9BchJyMUk3aw026DCayNA.roa (raw, json)
Hash identifier: RQgJSV90lSGCgWx0OC5gI+9ZAVSrYUDxLlOLsdTIPUw=
Subject key identifier: D8:E6:C5:14:4F:41:72:12:72:31:49:37:6B:0D:36:E8:30:9A:C8:D0
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1058
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/2ObFFE9BchJyMUk3aw026DCayNA.roa
Signing time: Wed 03 Apr 2024 13:22:41 +0000
ROA not before: Wed 03 Apr 2024 13:22:41 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4184 (0x1058)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 3 13:22:41 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D8E6C5144F417212723149376B0D36E8309AC8D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:55:ad:29:b2:0a:d7:65:e8:da:a9:9d:d5:51:
9a:c7:ea:49:6c:e9:ad:32:94:36:11:bd:f5:28:12:
6c:d4:59:39:a3:b2:3f:fc:ed:d0:47:0e:95:fe:4c:
a8:3d:45:5d:cd:e5:57:37:8f:70:a1:59:78:72:ba:
d9:d1:68:67:72:77:92:1d:6e:6c:db:d3:5f:f9:c5:
a8:22:4d:62:cb:f8:f3:e7:ad:70:dc:38:25:49:1d:
2f:fd:7d:ca:82:0e:53:5e:df:5b:d9:ae:48:83:fa:
9d:7e:63:f9:6b:8b:5e:a5:0d:04:6c:2a:87:9f:dd:
f7:2c:96:f6:e4:53:94:60:15:00:49:bc:90:d0:c6:
f3:1a:82:53:0a:2c:18:1d:70:8b:b0:29:27:f0:6d:
5b:cc:83:68:11:06:4d:e7:42:36:2e:f7:4b:b5:0f:
a6:65:63:6d:44:33:ec:f7:8b:31:39:25:aa:fa:ed:
2e:75:85:55:4f:f3:3e:7a:1e:86:bf:f4:36:43:fb:
4d:ac:9b:c4:a0:e6:6d:ec:45:53:fc:22:89:dc:3a:
2e:6f:8e:4e:00:06:c6:f3:63:cc:c6:eb:24:27:6b:
11:35:3a:fe:f2:e8:bc:07:aa:7a:70:4a:71:02:99:
1a:ac:a8:03:6b:f1:e3:80:3a:39:83:40:c9:65:3b:
bc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E6:C5:14:4F:41:72:12:72:31:49:37:6B:0D:36:E8:30:9A:C8:D0
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/2ObFFE9BchJyMUk3aw026DCayNA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
04:9e:a6:5a:c1:66:9a:f7:6a:c4:d2:9f:70:c9:d6:27:50:1b:
71:9b:4f:f0:98:97:08:92:c0:3b:39:82:3b:3d:23:45:a2:73:
40:61:a5:72:76:e3:37:cf:59:cf:2e:26:40:11:b2:d1:09:83:
a5:40:a6:79:4d:25:37:12:89:47:a9:80:ec:13:c2:4d:fc:fb:
54:f9:59:f4:c8:b3:f4:c9:8c:33:43:9e:40:b1:f8:33:08:3f:
c7:03:3c:de:b1:93:32:59:d0:75:3d:3a:ef:b7:c1:a5:9a:15:
92:c7:5c:3b:a5:7e:f5:e1:21:c1:cd:25:4b:fb:72:08:d4:13:
d2:5e:0b:0f:55:1b:20:2d:5a:af:67:be:4f:31:b9:1f:aa:68:
98:9c:07:2f:37:3e:b4:b5:8c:9c:ef:59:a6:fd:22:1b:fb:4b:
52:c3:33:97:12:96:3d:58:6b:9b:ed:8d:ee:cc:f2:f1:a6:63:
fb:c6:66:38:34:71:74:01:ba:40:5c:b3:b3:8e:49:ec:bd:28:
b4:f1:1c:45:2b:36:32:79:7b:58:1a:93:43:f4:32:bd:e4:5b:
c2:ac:51:6c:7b:1d:60:9d:b1:16:dd:53:46:29:3b:7f:2b:29:
a6:28:44:0d:2d:72:4c:7f:ec:b8:e9:5d:52:6c:8a:20:66:fe:
8f:7c:11:2a
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICEFgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MDMx
MzIyNDFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEQ4RTZDNTE0NEY0MTcy
MTI3MjMxNDkzNzZCMEQzNkU4MzA5QUM4RDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD7Va0psgrXZejaqZ3VUZrH6kls6a0ylDYRvfUoEmzUWTmjsj/8
7dBHDpX+TKg9RV3N5Vc3j3ChWXhyutnRaGdyd5Idbmzb01/5xagiTWLL+PPnrXDc
OCVJHS/9fcqCDlNe31vZrkiD+p1+Y/lri16lDQRsKoef3fcslvbkU5RgFQBJvJDQ
xvMaglMKLBgdcIuwKSfwbVvMg2gRBk3nQjYu90u1D6ZlY21EM+z3izE5Jar67S51
hVVP8z56Hoa/9DZD+02sm8Sg5m3sRVP8IoncOi5vjk4ABsbzY8zG6yQnaxE1Ov7y
6LwHqnpwSnECmRqsqANr8eOAOjmDQMllO7xBAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU2ObFFE9BchJyMUk3aw026DCayNAwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzLzJPYkZGRTlCY2hKeU1V
azNhdzAyNkRDYXlOQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEABJ6mWsFmmvdqxNKfcMnWJ1AbcZtP8JiX
CJLAOzmCOz0jRaJzQGGlcnbjN89Zzy4mQBGy0QmDpUCmeU0lNxKJR6mA7BPCTfz7
VPlZ9Miz9MmMM0OeQLH4Mwg/xwM83rGTMlnQdT0677fBpZoVksdcO6V+9eEhwc0l
S/tyCNQT0l4LD1UbIC1ar2e+TzG5H6pomJwHLzc+tLWMnO9Zpv0iG/tLUsMzlxKW
PVhrm+2N7szy8aZj+8ZmODRxdAG6QFyzs45J7L0otPEcRSs2Mnl7WBqTQ/QyveRb
wqxRbHsdYJ2xFt1TRik7fysppihEDS1yTH/suOldUmyKIGb+j3wRKg==
-----END CERTIFICATE-----
Generated at Wed Apr 3 20:02:37 2024 by rpki-client on console.sobornost.net