Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/639WSQRruZfbvRa4kUBEZwu1iIk.roa
File: 639WSQRruZfbvRa4kUBEZwu1iIk.roa (raw, json)
Hash identifier: VYxLrRj4WB2SK5twJxeptjHFk4EhDvC9AIN3IfyrA0I=
Subject key identifier: EB:7F:56:49:04:6B:B9:97:DB:BD:16:B8:91:40:44:67:0B:B5:88:89
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1526
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/639WSQRruZfbvRa4kUBEZwu1iIk.roa
Signing time: Tue 16 Apr 2024 08:53:21 +0000
ROA not before: Tue 16 Apr 2024 08:53:21 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5414 (0x1526)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 16 08:53:21 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EB7F5649046BB997DBBD16B8914044670BB58889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d8:0d:49:3b:c5:16:d7:c2:a8:ce:3d:ec:2e:
07:46:45:e4:3d:40:b1:e2:71:47:47:58:25:1c:dd:
df:6f:a3:84:aa:37:c5:d3:80:c6:ae:13:91:ed:e9:
23:8d:d0:dd:6f:5d:47:fa:1f:45:97:ac:2d:54:13:
de:c3:23:66:db:b7:ac:e8:89:12:66:86:8d:df:71:
68:7b:35:10:d9:7a:29:cf:ca:df:37:0e:7a:33:01:
68:73:45:b6:aa:80:0f:a1:d6:21:33:fa:cf:e8:c9:
63:1c:ba:f8:71:3f:d3:fd:5c:44:ce:e2:4d:6d:ea:
3b:15:c8:9f:7b:e3:e4:3d:91:cd:1e:db:ff:f3:0b:
69:1c:39:02:e7:55:cd:42:99:5c:13:c5:af:f7:3d:
c5:ae:11:4b:fc:af:fd:9f:f9:b6:6c:8e:5e:3d:d3:
9d:bc:a0:4e:24:6b:ee:5d:b1:77:9f:64:db:3f:06:
05:4a:99:e3:91:86:ec:46:66:27:35:d3:f5:53:0e:
de:4e:a8:a3:69:3c:c9:28:11:41:08:9f:e0:c1:73:
fb:d3:12:5a:a4:93:0b:9f:1f:23:99:68:8c:2d:9f:
c8:6a:7a:53:61:f5:fa:30:bd:48:aa:98:1c:5e:b7:
f2:df:57:e6:99:ca:e1:77:97:ab:9c:5f:65:31:59:
e8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7F:56:49:04:6B:B9:97:DB:BD:16:B8:91:40:44:67:0B:B5:88:89
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/639WSQRruZfbvRa4kUBEZwu1iIk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a2:cb:44:ed:53:c3:42:e3:76:30:69:95:2c:04:d6:87:f3:f9:
4a:fb:3e:f9:a3:36:1e:c1:0c:80:02:ba:22:6d:de:26:98:ff:
33:4c:88:12:99:87:f5:1e:9b:02:94:01:21:7c:05:3e:5a:48:
f9:14:00:8b:d5:ff:61:00:b3:64:e8:37:1e:88:c0:39:5c:e7:
f8:47:92:db:03:19:1f:ea:80:cf:90:1f:92:17:16:91:23:f7:
12:40:30:33:4a:da:bc:35:33:1e:77:71:70:27:aa:24:60:41:
8a:97:a2:66:1f:8a:d9:37:d5:df:a0:57:cd:eb:0c:56:15:fe:
36:96:21:78:41:19:5b:67:76:fc:c1:4c:3e:da:51:48:a6:1c:
66:c0:96:f4:7f:ab:9d:e0:d6:9f:d0:6f:dc:e3:3b:d4:f9:7a:
46:99:af:b2:fb:2a:22:05:36:e7:e8:9d:cf:f8:fe:8d:77:19:
2c:da:d6:4a:c5:bf:24:14:fc:96:df:c7:a3:79:64:5c:98:06:
a5:2b:67:1f:ab:86:4b:d6:fe:d1:5e:8b:a3:3e:32:c9:df:9e:
a5:d4:96:50:7e:59:0e:94:b8:d4:e9:40:b0:ce:2b:ff:7f:b6:
79:94:1a:f2:30:fa:1b:96:41:51:a1:43:35:4b:b1:d5:65:8f:
f8:6d:87:99
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICFSYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MTYw
ODUzMjFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEVCN0Y1NjQ5MDQ2QkI5
OTdEQkJEMTZCODkxNDA0NDY3MEJCNTg4ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDC2A1JO8UW18Kozj3sLgdGReQ9QLHicUdHWCUc3d9vo4SqN8XT
gMauE5Ht6SON0N1vXUf6H0WXrC1UE97DI2bbt6zoiRJmho3fcWh7NRDZeinPyt83
DnozAWhzRbaqgA+h1iEz+s/oyWMcuvhxP9P9XETO4k1t6jsVyJ974+Q9kc0e2//z
C2kcOQLnVc1CmVwTxa/3PcWuEUv8r/2f+bZsjl490528oE4ka+5dsXefZNs/BgVK
meORhuxGZic10/VTDt5OqKNpPMkoEUEIn+DBc/vTElqkkwufHyOZaIwtn8hqelNh
9fowvUiqmBxet/LfV+aZyuF3l6ucX2UxWejdAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU639WSQRruZfbvRa4kUBEZwu1iIkwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzLzYzOVdTUVJydVpmYnZS
YTRrVUJFWnd1MWlJay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAostE7VPDQuN2MGmVLATWh/P5Svs++aM2
HsEMgAK6Im3eJpj/M0yIEpmH9R6bApQBIXwFPlpI+RQAi9X/YQCzZOg3HojAOVzn
+EeS2wMZH+qAz5AfkhcWkSP3EkAwM0ravDUzHndxcCeqJGBBipeiZh+K2TfV36BX
zesMVhX+NpYheEEZW2d2/MFMPtpRSKYcZsCW9H+rneDWn9Bv3OM71Pl6Rpmvsvsq
IgU25+idz/j+jXcZLNrWSsW/JBT8lt/Ho3lkXJgGpStnH6uGS9b+0V6Loz4yyd+e
pdSWUH5ZDpS41OlAsM4r/3+2eZQa8jD6G5ZBUaFDNUux1WWP+G2HmQ==
Generated at Tue Apr 16 12:19:23 2024 by rpki-client on console.sobornost.net