Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/EQy7XB3i67DqZ84qaNa0y9yyejI.roa
File: EQy7XB3i67DqZ84qaNa0y9yyejI.roa (raw, json)
Hash identifier: wBcgaTnayPYmZay7yQ1tTwGWUOY9FFh0FH9PCEI9IYc=
Subject key identifier: 11:0C:BB:5C:1D:E2:EB:B0:EA:67:CE:2A:68:D6:B4:CB:DC:B2:7A:32
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 103C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/EQy7XB3i67DqZ84qaNa0y9yyejI.roa
Signing time: Wed 03 Apr 2024 06:22:41 +0000
ROA not before: Wed 03 Apr 2024 06:22:41 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4156 (0x103c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 3 06:22:41 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=110CBB5C1DE2EBB0EA67CE2A68D6B4CBDCB27A32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4d:f8:a4:08:a3:9e:74:2b:ee:b8:08:04:e4:
ab:9c:23:36:80:7c:3f:92:f5:19:70:8c:cc:f0:1a:
18:19:d4:74:5b:c4:f2:82:fc:4b:82:ff:62:79:f1:
b2:c2:73:5d:b9:ca:16:9b:29:45:b6:b2:99:c3:ca:
68:81:69:78:97:6b:30:59:c3:2c:7b:5f:91:e6:ba:
00:e2:2e:38:ff:78:eb:81:36:c5:3d:85:1e:4a:e9:
fc:67:95:92:50:be:07:91:df:8f:52:a7:5e:8d:dc:
ca:89:1d:fc:b1:2c:95:ba:c6:db:c4:73:3f:a3:58:
64:3a:03:af:e7:68:1b:a9:9a:a4:1d:77:22:e0:79:
e8:b2:97:b1:fa:c3:f3:de:09:62:4f:c4:a8:54:21:
10:3f:04:fd:69:3a:61:18:ca:2a:20:c5:d0:4c:a2:
60:18:4b:22:80:fa:b1:eb:df:67:79:c0:ea:5d:ef:
75:f0:55:8e:7b:4d:e4:29:d8:bb:80:4b:ea:ab:e1:
b9:d7:1a:6c:11:76:27:c5:bf:04:33:96:f6:5f:7c:
3c:e1:f8:05:5e:dd:fe:88:90:a0:35:10:b9:1e:c6:
db:78:50:e6:b4:87:63:aa:6f:8d:2a:5a:c0:41:bf:
40:a1:90:96:86:71:ff:6a:b9:3f:f7:46:b5:90:58:
75:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0C:BB:5C:1D:E2:EB:B0:EA:67:CE:2A:68:D6:B4:CB:DC:B2:7A:32
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/EQy7XB3i67DqZ84qaNa0y9yyejI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0d:ee:94:9b:10:d1:c3:e4:f6:67:42:45:63:f4:10:f0:7d:f6:
13:13:e5:b3:3d:55:eb:65:d7:b3:bb:f4:d0:69:cf:4e:a3:ef:
b6:e4:a1:3f:d8:2c:47:9f:f8:10:87:a4:6e:a5:32:2e:d0:e4:
93:d6:e2:43:c8:5a:ad:73:b0:19:3f:dc:1a:49:fd:f9:18:ed:
68:d4:cc:d4:d9:48:82:b3:6a:1b:59:df:0d:bc:5b:46:d7:74:
a7:20:b1:83:59:bd:d8:0d:95:3e:6f:55:06:a0:b6:ef:5f:e5:
61:7e:c5:37:bd:59:21:e8:d3:f0:60:41:03:a6:38:fe:43:26:
44:28:b2:36:6e:aa:d8:32:99:46:4b:6f:ed:78:27:db:5e:54:
9e:c5:39:d0:19:25:58:9d:95:b3:86:35:e9:1f:2e:56:cb:cb:
b8:c7:3f:92:23:1e:de:a9:68:cf:6c:5e:d2:fa:5c:ba:8f:20:
0f:89:a2:e2:80:63:91:ef:44:5b:ca:11:98:3b:05:af:44:a5:
b6:1f:a4:79:ff:b6:9d:3c:b0:b3:8e:c6:e9:a3:62:b2:06:21:
1c:75:1d:2d:67:d4:8d:cd:3a:0e:4d:b7:92:89:cf:82:67:93:
56:e8:02:b8:9e:e9:18:ce:5b:d7:cb:e7:63:74:e8:12:db:9d:
93:b0:69:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 3 13:13:36 2024 by rpki-client on console.sobornost.net