Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/5Alkif8J_mkOIKXlITAuZyv68T0.roa
File: 5Alkif8J_mkOIKXlITAuZyv68T0.roa (raw, json)
Hash identifier: MtAeRHGzD6jSEncZvaw/WHxL4crjaXBcsOLD9hK+upc=
Subject key identifier: E4:09:64:89:FF:09:FE:69:0E:20:A5:E5:21:30:2E:67:2B:FA:F1:3D
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 168E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/5Alkif8J_mkOIKXlITAuZyv68T0.roa
Signing time: Sat 20 Apr 2024 02:53:37 +0000
ROA not before: Sat 20 Apr 2024 02:53:37 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5774 (0x168e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 20 02:53:37 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E4096489FF09FE690E20A5E521302E672BFAF13D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4b:02:ca:08:23:52:49:21:d4:79:dd:f6:d9:
e0:5c:5b:d2:fc:fa:fb:e2:77:d8:dc:4d:9e:2d:33:
25:ca:ed:38:d8:6b:75:5b:df:2a:56:b2:1d:8c:e5:
6c:f3:0e:ac:06:e0:88:b8:9d:21:c2:7d:95:49:3d:
8e:94:3d:9e:06:8f:79:83:07:da:7d:5f:55:95:c2:
e2:2b:74:ef:0e:14:5e:e4:4b:c9:f2:66:12:06:74:
53:26:b5:0c:52:4a:6e:fa:cb:f4:12:c8:5b:90:fc:
a2:ef:ed:b9:6c:09:d2:07:de:da:32:7d:5a:31:6d:
97:77:37:e1:f0:32:64:54:91:0e:d9:ef:33:fb:cb:
bf:1a:42:e5:06:8d:ac:c6:bd:7c:9f:3e:02:24:63:
17:40:8b:4d:84:22:d3:a2:cf:b9:9d:e7:17:43:1e:
d5:42:35:8c:29:02:e0:92:66:51:0f:ac:6d:d2:7e:
18:43:72:24:c3:38:d8:42:75:f9:fb:6f:65:60:bc:
1a:a1:90:d3:2a:77:b1:a9:40:3e:4d:14:67:60:4d:
76:cf:cd:a6:0e:19:71:2b:c5:31:bd:99:12:a0:88:
c2:64:63:66:52:4a:f1:6c:68:0a:a9:e7:ba:14:ff:
08:27:c5:9a:6e:e6:73:e2:65:be:09:ba:7f:92:e4:
77:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:09:64:89:FF:09:FE:69:0E:20:A5:E5:21:30:2E:67:2B:FA:F1:3D
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/5Alkif8J_mkOIKXlITAuZyv68T0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
52:be:66:88:0c:f0:99:a3:e0:ca:a6:83:8c:4b:b3:e6:c1:8b:
f9:54:9a:ee:2d:2e:7d:33:df:50:8c:57:66:e9:a6:e9:6d:ff:
15:7d:c4:b5:e7:22:95:30:6d:de:4b:7f:fe:5a:6d:0c:d2:1b:
8c:80:7a:1c:72:7c:b1:0b:d3:4b:9e:66:0a:df:f2:5a:90:c6:
55:80:7d:6f:64:86:27:a7:8e:17:9f:55:e9:f3:73:60:2d:2d:
3f:38:41:95:84:34:b1:be:df:c8:fc:38:32:8d:c7:48:52:be:
d5:fb:f0:88:29:62:78:22:4c:70:71:73:96:54:96:56:3c:cb:
b2:b2:8c:95:cf:a1:36:6f:47:f7:c9:4a:d8:26:32:46:a6:80:
48:6c:a1:1b:e0:65:08:b2:89:25:e0:2a:26:bc:09:a6:77:e5:
5d:af:30:91:01:2e:45:f1:78:23:a6:ac:d9:7a:76:b9:52:ec:
9c:9f:84:91:c9:fa:81:70:c3:d8:bb:95:03:41:76:da:56:83:
e8:8d:a5:b5:f7:cd:05:21:07:b3:39:02:8f:5d:28:81:26:14:
5d:18:5a:fd:1a:dd:f9:09:51:e2:e4:d9:00:b2:82:0b:e8:76:
b5:6a:97:86:1d:3b:d2:92:d0:0c:f5:82:9f:25:5a:cb:93:34:
43:e9:0a:f5
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICFo4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MjAw
MjUzMzdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEU0MDk2NDg5RkYwOUZF
NjkwRTIwQTVFNTIxMzAyRTY3MkJGQUYxM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2SwLKCCNSSSHUed322eBcW9L8+vvid9jcTZ4tMyXK7TjYa3Vb
3ypWsh2M5WzzDqwG4Ii4nSHCfZVJPY6UPZ4Gj3mDB9p9X1WVwuIrdO8OFF7kS8ny
ZhIGdFMmtQxSSm76y/QSyFuQ/KLv7blsCdIH3toyfVoxbZd3N+HwMmRUkQ7Z7zP7
y78aQuUGjazGvXyfPgIkYxdAi02EItOiz7md5xdDHtVCNYwpAuCSZlEPrG3SfhhD
ciTDONhCdfn7b2VgvBqhkNMqd7GpQD5NFGdgTXbPzaYOGXErxTG9mRKgiMJkY2ZS
SvFsaAqp57oU/wgnxZpu5nPiZb4Jun+S5HfBAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU5Alkif8J/mkOIKXlITAuZyv68T0wHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzLzVBbGtpZjhKX21rT0lL
WGxJVEF1Wnl2NjhUMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAUr5miAzwmaPgyqaDjEuz5sGL+VSa7i0u
fTPfUIxXZumm6W3/FX3EtecilTBt3kt//lptDNIbjIB6HHJ8sQvTS55mCt/yWpDG
VYB9b2SGJ6eOF59V6fNzYC0tPzhBlYQ0sb7fyPw4Mo3HSFK+1fvwiClieCJMcHFz
llSWVjzLsrKMlc+hNm9H98lK2CYyRqaASGyhG+BlCLKJJeAqJrwJpnflXa8wkQEu
RfF4I6as2Xp2uVLsnJ+Ekcn6gXDD2LuVA0F22laD6I2ltffNBSEHszkCj10ogSYU
XRha/Rrd+QlR4uTZALKCC+h2tWqXhh070pLQDPWCnyVay5M0Q+kK9Q==
-----END CERTIFICATE-----
Generated at Sat Apr 20 07:46:17 2024 by rpki-client on console.sobornost.net