Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/NulpEmtds18_8rddTmDM5EHlrkc.roa
File: NulpEmtds18_8rddTmDM5EHlrkc.roa (raw, json)
Hash identifier: 0Iki8m/LAYCpRYhhXkPaWbweQE7hJDHnxlIGk5kGbyM=
Subject key identifier: 36:E9:69:12:6B:5D:B3:5F:3F:F2:B7:5D:4E:60:CC:E4:41:E5:AE:47
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1A0A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/NulpEmtds18_8rddTmDM5EHlrkc.roa
Signing time: Mon 29 Apr 2024 09:53:56 +0000
ROA not before: Mon 29 Apr 2024 09:53:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6666 (0x1a0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 29 09:53:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=36E969126B5DB35F3FF2B75D4E60CCE441E5AE47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:25:b6:cd:69:a9:03:b8:1e:e8:5c:d8:99:bd:
f1:0c:4b:d0:4f:8e:ed:d8:2b:15:2d:7c:4b:7e:16:
ea:50:a5:02:a1:fa:5e:0d:cf:15:d6:e7:ff:58:76:
6c:e5:14:26:ca:54:ba:2d:d7:a3:eb:b7:d2:a4:e3:
a9:ec:23:f1:eb:22:a9:15:b6:98:0a:b8:13:e1:ca:
c4:d2:d8:d7:c3:a2:58:39:1f:95:0c:a0:b0:2e:60:
e8:5f:79:cf:5c:f8:c1:a8:2c:9b:c3:76:ff:c6:10:
3b:3b:d1:c6:09:1d:8e:94:2e:31:05:20:cc:3c:2f:
d6:50:b1:02:16:f5:01:37:55:a8:f1:15:86:56:a0:
93:b6:88:9d:8f:7c:67:bb:3e:d0:70:e0:51:ff:eb:
39:c1:8e:df:b1:34:9a:9b:ff:fa:98:33:c9:e9:db:
e1:b5:81:8f:83:59:26:c3:a4:60:44:06:bf:74:e6:
8f:7a:21:ba:f9:37:25:11:88:a3:52:26:b0:4d:5b:
b1:d5:30:41:9e:f7:5d:60:f2:b3:50:2f:3a:cc:bb:
71:be:ce:63:20:23:14:47:34:36:1e:9e:95:50:88:
d2:84:f7:5e:77:47:8d:fe:86:c4:21:35:3e:f8:db:
d0:44:f2:86:b9:ae:bd:a7:9d:8b:9a:88:89:be:1a:
36:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E9:69:12:6B:5D:B3:5F:3F:F2:B7:5D:4E:60:CC:E4:41:E5:AE:47
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/NulpEmtds18_8rddTmDM5EHlrkc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3b:5f:86:19:3a:f8:c7:8b:10:1a:15:4b:50:9e:0b:2a:f4:26:
0f:4b:f3:a4:ce:5c:1e:11:c8:23:bf:2c:14:54:72:a1:0c:97:
35:45:a4:4a:1b:9f:5b:ae:9b:b7:f9:36:4b:28:cd:65:4f:59:
af:f0:b7:58:79:c9:a6:a1:85:1d:04:52:35:b4:6a:3d:6d:07:
1c:08:db:78:d0:19:f9:a0:85:60:a4:bc:8c:0d:60:15:66:99:
de:29:71:e9:ad:d0:41:99:75:f9:ca:88:a3:34:26:10:3f:3b:
16:ab:78:35:a3:4b:fa:6a:c5:e1:cb:87:ae:4e:22:b1:e0:63:
3a:18:73:fc:ad:98:83:51:a0:00:ed:9b:d2:8c:d1:b1:5e:55:
76:1c:dd:e5:02:79:e3:f3:20:7a:1d:ac:76:28:c8:b2:90:e3:
86:2d:35:31:af:c5:f4:28:6f:f3:ae:74:d6:5d:0b:9d:02:d2:
e9:3b:85:c5:a7:e0:87:16:93:98:6c:8c:9d:74:7d:ce:3b:0d:
30:50:ee:d9:c4:b6:3e:5e:db:bd:2d:e6:38:f5:c1:32:c1:42:
bf:cb:d9:d5:e9:67:fb:99:d4:66:5c:6d:db:33:c2:5e:54:3e:
65:08:ba:a4:1c:c8:dd:26:f0:d7:72:3a:77:f7:b4:98:70:c2:
b5:d6:e3:6d
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICGgowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0Mjkw
OTUzNTZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDM2RTk2OTEyNkI1REIz
NUYzRkYyQjc1RDRFNjBDQ0U0NDFFNUFFNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0JbbNaakDuB7oXNiZvfEMS9BPju3YKxUtfEt+FupQpQKh+l4N
zxXW5/9YdmzlFCbKVLot16Prt9Kk46nsI/HrIqkVtpgKuBPhysTS2NfDolg5H5UM
oLAuYOhfec9c+MGoLJvDdv/GEDs70cYJHY6ULjEFIMw8L9ZQsQIW9QE3VajxFYZW
oJO2iJ2PfGe7PtBw4FH/6znBjt+xNJqb//qYM8np2+G1gY+DWSbDpGBEBr905o96
Ibr5NyURiKNSJrBNW7HVMEGe911g8rNQLzrMu3G+zmMgIxRHNDYenpVQiNKE9153
R43+hsQhNT7429BE8oa5rr2nnYuaiIm+GjavAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUNulpEmtds18/8rddTmDM5EHlrkcwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL051bHBFbXRkczE4Xzhy
ZGRUbURNNUVIbHJrYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAO1+GGTr4x4sQGhVLUJ4LKvQmD0vzpM5c
HhHII78sFFRyoQyXNUWkShufW66bt/k2SyjNZU9Zr/C3WHnJpqGFHQRSNbRqPW0H
HAjbeNAZ+aCFYKS8jA1gFWaZ3ilx6a3QQZl1+cqIozQmED87Fqt4NaNL+mrF4cuH
rk4iseBjOhhz/K2Yg1GgAO2b0ozRsV5Vdhzd5QJ54/Mgeh2sdijIspDjhi01Ma/F
9Chv86501l0LnQLS6TuFxafghxaTmGyMnXR9zjsNMFDu2cS2Pl7bvS3mOPXBMsFC
v8vZ1eln+5nUZlxt2zPCXlQ+ZQi6pBzI3Sbw13I6d/e0mHDCtdbjbQ==
-----END CERTIFICATE-----
Generated at Mon Apr 29 14:27:22 2024 by rpki-client on console.sobornost.net