Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/2Pvvnl_GRM9pVw6zsK0RLXpxfZk.roa
File: 2Pvvnl_GRM9pVw6zsK0RLXpxfZk.roa (raw, json)
Hash identifier: 9+MCoESjz8ymjSWoHm2UURLgZ82b+ATbj6eLx+M4eZo=
Subject key identifier: D8:FB:EF:9E:5F:C6:44:CF:69:57:0E:B3:B0:AD:11:2D:7A:71:7D:99
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 13C4
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/2Pvvnl_GRM9pVw6zsK0RLXpxfZk.roa
Signing time: Fri 12 Apr 2024 16:23:12 +0000
ROA not before: Fri 12 Apr 2024 16:23:12 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5060 (0x13c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 12 16:23:12 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D8FBEF9E5FC644CF69570EB3B0AD112D7A717D99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c3:ef:38:a6:b7:77:48:ef:7b:2d:39:f1:70:
cd:a6:ef:be:26:3b:4c:92:64:59:1a:65:fa:ba:4a:
2a:2d:6b:47:26:63:8d:c3:73:d3:f1:ae:f7:a5:eb:
f8:9f:21:c3:d3:ce:70:80:1d:b7:f9:73:aa:7e:96:
82:d7:7e:b3:73:fa:2c:4e:66:e6:97:6b:fa:1a:fa:
cb:7f:09:19:5d:7a:53:7c:f3:24:c5:86:00:83:5a:
cf:5f:6e:15:69:97:ab:f7:77:b6:f4:88:3f:66:b6:
cd:78:d7:79:a9:aa:fe:66:6b:41:63:95:58:b7:ee:
3d:37:87:bb:7d:85:7a:f7:8a:1e:ca:87:1c:a3:92:
0a:b1:7d:26:bf:75:80:6d:ba:a9:18:18:22:da:df:
5d:66:83:6e:80:73:c4:d6:9e:b0:21:a7:21:dd:e3:
c3:43:b0:78:0f:c5:d3:56:da:ea:30:75:ab:a0:6e:
ec:be:fa:55:69:9f:1e:ff:e5:7d:b7:95:7a:af:d8:
09:c1:20:f7:dd:10:97:9c:87:4d:00:2f:7a:98:e3:
dd:af:43:39:93:47:22:c9:1f:4f:11:b1:c6:6b:f1:
30:03:e7:94:f1:64:04:c0:e8:70:a8:b8:9d:f9:44:
a5:90:0a:a4:05:3e:36:7b:8c:12:cb:95:1c:91:d8:
d9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FB:EF:9E:5F:C6:44:CF:69:57:0E:B3:B0:AD:11:2D:7A:71:7D:99
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/2Pvvnl_GRM9pVw6zsK0RLXpxfZk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b4:61:4a:09:33:d4:0d:dc:2b:dc:0e:d5:cd:b4:b3:bb:29:d6:
89:36:68:e4:dd:cb:54:7c:3a:0b:34:75:69:f0:61:93:a9:11:
ba:47:be:d1:72:b7:d4:e7:b9:8e:71:5c:be:00:0d:0c:7c:20:
a4:db:b3:c5:67:3c:b4:54:57:24:66:a8:84:b8:53:b7:ce:33:
e9:23:cc:07:e7:6f:ad:93:e4:04:2f:e5:a8:f0:24:9e:af:04:
d3:0e:d8:58:13:cd:0c:e3:98:46:b0:9b:8b:fe:30:8b:e6:aa:
9a:5a:59:a8:d7:11:01:2c:79:71:11:94:cb:01:b2:b4:62:ca:
8f:5f:df:18:6e:8b:e1:79:8b:05:12:b5:dd:1a:40:9a:42:36:
42:7e:dd:a9:e7:f2:3b:26:11:fc:68:e6:08:4b:42:a6:5b:ca:
af:ce:3e:5e:6a:b0:74:c8:36:a2:2b:5b:1f:45:e3:9d:da:f3:
74:1f:4c:e3:8f:73:03:01:88:ff:ab:79:6b:e0:16:be:0b:10:
b5:58:08:41:90:1d:82:84:c0:3a:21:33:1b:aa:6c:94:bf:f8:
6a:61:cd:01:60:49:ee:04:79:06:f1:c4:10:d8:b2:0d:80:f5:
ff:72:68:35:af:b5:10:b1:0c:9a:6a:bc:ce:05:a0:78:e1:0e:
9d:f3:b9:fa
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICE8QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MTIx
NjIzMTJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEQ4RkJFRjlFNUZDNjQ0
Q0Y2OTU3MEVCM0IwQUQxMTJEN0E3MTdEOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3w+84prd3SO97LTnxcM2m774mO0ySZFkaZfq6Siota0cmY43D
c9Pxrvel6/ifIcPTznCAHbf5c6p+loLXfrNz+ixOZuaXa/oa+st/CRldelN88yTF
hgCDWs9fbhVpl6v3d7b0iD9mts1413mpqv5ma0FjlVi37j03h7t9hXr3ih7Khxyj
kgqxfSa/dYBtuqkYGCLa311mg26Ac8TWnrAhpyHd48NDsHgPxdNW2uowdaugbuy+
+lVpnx7/5X23lXqv2AnBIPfdEJech00AL3qY492vQzmTRyLJH08RscZr8TAD55Tx
ZATA6HCouJ35RKWQCqQFPjZ7jBLLlRyR2NmlAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU2Pvvnl/GRM9pVw6zsK0RLXpxfZkwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzLzJQdnZubF9HUk05cFZ3
NnpzSzBSTFhweGZaay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAtGFKCTPUDdwr3A7VzbSzuynWiTZo5N3L
VHw6CzR1afBhk6kRuke+0XK31Oe5jnFcvgANDHwgpNuzxWc8tFRXJGaohLhTt84z
6SPMB+dvrZPkBC/lqPAknq8E0w7YWBPNDOOYRrCbi/4wi+aqmlpZqNcRASx5cRGU
ywGytGLKj1/fGG6L4XmLBRK13RpAmkI2Qn7dqefyOyYR/GjmCEtCplvKr84+Xmqw
dMg2oitbH0XjndrzdB9M449zAwGI/6t5a+AWvgsQtVgIQZAdgoTAOiEzG6pslL/4
amHNAWBJ7gR5BvHEENiyDYD1/3JoNa+1ELEMmmq8zgWgeOEOnfO5+g==
-----END CERTIFICATE-----
Generated at Sat Apr 13 02:37:20 2024 by rpki-client on console.sobornost.net