Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/6-1qOp_p-_ptvTL-Kn6j2ZEre7s.roa
File: 6-1qOp_p-_ptvTL-Kn6j2ZEre7s.roa (raw, json)
Hash identifier: Vux+Pk9SVK6Ze6qZnVUJPiBBM3q5QkS9Z1Wo5nB8dLs=
Subject key identifier: EB:ED:6A:3A:9F:E9:FB:FA:6D:BD:32:FE:2A:7E:A3:D9:91:2B:7B:BB
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0F3A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/6-1qOp_p-_ptvTL-Kn6j2ZEre7s.roa
Signing time: Sun 31 Mar 2024 13:52:34 +0000
ROA not before: Sun 31 Mar 2024 13:52:34 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3898 (0xf3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 31 13:52:34 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EBED6A3A9FE9FBFA6DBD32FE2A7EA3D9912B7BBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5b:3b:91:4c:43:e7:d5:e2:1c:75:50:9b:72:
7c:e4:e7:52:a9:6d:23:14:f5:3a:d7:d7:e7:67:6c:
aa:a7:37:7a:2a:e9:8b:99:8c:30:bd:b0:0e:a3:a2:
31:06:74:01:55:47:e4:02:51:c9:4f:a0:e0:7d:02:
9a:26:dd:a0:b3:9c:72:60:07:06:85:bd:d5:45:e7:
d2:d1:6b:af:58:91:39:1c:41:f0:9e:d4:a3:07:bd:
d4:ad:c7:04:56:03:98:aa:69:cb:41:dc:3d:a5:6e:
5d:8b:ea:d8:68:8f:db:1b:50:d7:4c:69:f0:ff:7b:
a5:71:85:18:d5:42:54:81:db:d4:8c:8c:f0:14:70:
56:ba:8f:21:9c:70:81:95:2d:69:bc:33:2b:3a:94:
76:a4:27:9f:c0:81:a0:b5:a2:64:4e:33:ca:55:70:
d3:d7:12:72:69:02:fa:58:53:ec:b2:0e:59:61:bb:
b6:dd:aa:34:f7:f9:78:15:75:b4:2a:59:cd:c5:29:
11:26:d8:86:42:94:e5:d6:49:c3:92:8d:85:4b:0e:
32:6e:85:b9:5a:42:2b:db:46:c7:13:49:aa:35:c1:
ae:fd:6e:49:90:ab:34:95:bc:d8:6c:b3:3e:c3:c4:
e0:89:45:15:d7:bc:b7:84:3d:3f:e6:29:50:76:5e:
d2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:ED:6A:3A:9F:E9:FB:FA:6D:BD:32:FE:2A:7E:A3:D9:91:2B:7B:BB
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/6-1qOp_p-_ptvTL-Kn6j2ZEre7s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
60:20:4e:ee:12:5f:5a:76:bb:fd:fb:ef:81:c4:7a:61:a5:6c:
34:c0:33:d1:ef:8e:79:f9:23:f2:a9:0e:7d:24:92:88:b8:82:
9f:03:d5:e7:79:83:5e:f0:66:40:4d:0d:69:c2:95:68:55:1b:
6c:06:fe:ec:ae:3f:63:5f:99:da:10:34:19:92:85:7d:69:5f:
09:03:3c:cd:0a:35:14:45:bf:36:e2:08:46:01:a4:f0:20:17:
a0:b9:90:5c:14:75:b9:2b:d7:ff:6d:b0:b5:11:4f:2e:2f:a2:
3e:92:01:1b:fd:50:01:57:36:e5:e3:2f:54:80:62:a8:9c:ab:
56:71:41:d9:1b:ff:c3:56:76:73:be:80:d1:9c:e3:6e:3a:47:
31:78:f5:2a:26:f3:65:69:92:79:b5:6a:a8:b2:40:bf:7e:19:
22:4d:ab:ca:91:a9:ca:6c:54:38:20:d4:07:82:62:32:b0:fe:
64:d7:e5:44:65:18:05:9c:4f:fc:17:3b:10:c4:46:ba:e9:88:
f8:b8:33:63:01:10:3a:c6:e5:a8:46:91:d2:18:e5:28:bc:07:
47:94:24:ec:f6:82:e2:08:1a:5a:d2:3c:df:e1:68:c6:48:d8:
09:2f:30:67:44:dd:16:d7:aa:eb:0a:17:11:06:d6:bb:3d:f1:
2a:cd:36:07
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDzowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDAzMzEx
MzUyMzRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEVCRUQ2QTNBOUZFOUZC
RkE2REJEMzJGRTJBN0VBM0Q5OTEyQjdCQkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFWzuRTEPn1eIcdVCbcnzk51KpbSMU9TrX1+dnbKqnN3oq6YuZ
jDC9sA6jojEGdAFVR+QCUclPoOB9Apom3aCznHJgBwaFvdVF59LRa69YkTkcQfCe
1KMHvdStxwRWA5iqactB3D2lbl2L6thoj9sbUNdMafD/e6VxhRjVQlSB29SMjPAU
cFa6jyGccIGVLWm8Mys6lHakJ5/AgaC1omROM8pVcNPXEnJpAvpYU+yyDllhu7bd
qjT3+XgVdbQqWc3FKREm2IZClOXWScOSjYVLDjJuhblaQivbRscTSao1wa79bkmQ
qzSVvNhssz7DxOCJRRXXvLeEPT/mKVB2XtJnAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU6+1qOp/p+/ptvTL+Kn6j2ZEre7swHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzLzYtMXFPcF9wLV9wdHZU
TC1LbjZqMlpFcmU3cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAYCBO7hJfWna7/fvvgcR6YaVsNMAz0e+O
efkj8qkOfSSSiLiCnwPV53mDXvBmQE0NacKVaFUbbAb+7K4/Y1+Z2hA0GZKFfWlf
CQM8zQo1FEW/NuIIRgGk8CAXoLmQXBR1uSvX/22wtRFPLi+iPpIBG/1QAVc25eMv
VIBiqJyrVnFB2Rv/w1Z2c76A0ZzjbjpHMXj1KibzZWmSebVqqLJAv34ZIk2rypGp
ymxUOCDUB4JiMrD+ZNflRGUYBZxP/Bc7EMRGuumI+LgzYwEQOsblqEaR0hjlKLwH
R5Qk7PaC4ggaWtI83+FoxkjYCS8wZ0TdFteq6woXEQbWuz3xKs02Bw==
-----END CERTIFICATE-----
Generated at Sun Mar 31 20:32:18 2024 by rpki-client on console.sobornost.net