Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/QSE1YRTzh-4cmRVv6-u0eKEgvBw.roa
File: QSE1YRTzh-4cmRVv6-u0eKEgvBw.roa (raw, json)
Hash identifier: KonDAQ6z+/AmRokHD99uXnuo0+ToPTAwSfOdZvbaNmI=
Subject key identifier: 41:21:35:61:14:F3:87:EE:1C:99:15:6F:EB:EB:B4:78:A1:20:BC:1C
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0EE6
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/QSE1YRTzh-4cmRVv6-u0eKEgvBw.roa
Signing time: Sat 30 Mar 2024 16:53:07 +0000
ROA not before: Sat 30 Mar 2024 16:53:07 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3814 (0xee6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 30 16:53:07 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4121356114F387EE1C99156FEBEBB478A120BC1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:df:2c:12:31:a1:63:6f:6f:5d:45:67:be:4d:
f0:4c:d6:8d:cf:b8:a2:df:39:83:1f:12:96:54:c4:
85:88:fe:04:ac:76:07:2d:78:74:75:a6:b3:18:ae:
db:24:76:9c:84:14:66:55:74:cd:13:8f:fe:8d:56:
e3:27:17:d2:68:3b:1e:ef:c6:e4:5e:22:ab:01:3e:
54:b1:1b:e3:33:c4:c3:d2:ab:bc:65:7d:96:28:58:
d9:22:dc:a2:2b:3d:99:fa:95:87:bd:b0:d8:f2:7c:
41:84:e8:bd:2b:2b:38:c0:39:f3:f1:52:44:0b:ad:
a2:e0:10:a3:d0:42:ec:54:9c:5e:fa:76:fe:ab:cf:
3b:dc:a9:5b:61:9b:98:c9:5e:e1:ca:8c:e9:72:97:
58:f9:af:c3:07:73:58:11:39:60:b5:2d:61:fe:d7:
9a:ab:88:37:d0:9f:54:9d:c1:c7:0a:1f:cc:ab:f4:
b8:1f:13:72:64:0e:85:c9:17:07:f8:e4:d6:6f:46:
27:42:d1:50:be:3f:64:6b:56:07:15:2b:5b:56:e3:
11:f3:00:9a:13:89:e3:2e:3a:50:26:b2:88:a2:96:
79:88:76:52:b7:98:38:e2:ef:b1:ea:44:60:c2:cd:
3c:98:00:20:78:1f:fc:5b:ff:a2:3c:76:f7:ee:29:
ca:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:21:35:61:14:F3:87:EE:1C:99:15:6F:EB:EB:B4:78:A1:20:BC:1C
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/QSE1YRTzh-4cmRVv6-u0eKEgvBw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
23:71:cc:70:01:9b:ce:03:ba:33:45:5b:4b:77:c6:cf:8f:1f:
fb:a5:8d:50:f7:cf:04:80:28:d1:66:6b:5e:c9:2f:83:8a:0d:
2f:af:0b:d1:92:c4:b4:2b:d8:0b:df:a5:fa:47:74:fa:b6:8a:
ed:1b:a1:3c:44:04:1b:89:c4:8a:79:1c:b4:ef:00:52:e7:de:
f2:45:e6:d1:fb:69:85:97:78:10:76:6e:63:89:c3:a0:1c:65:
2c:9e:8e:2a:19:c9:d3:40:70:25:89:51:04:85:61:52:b1:4c:
dc:94:42:0f:76:74:22:4d:77:30:81:28:38:9f:ec:d0:e7:5a:
3e:c6:45:1d:a3:af:61:9e:61:e3:ea:c3:a2:54:c1:15:a2:ce:
3e:dc:58:ad:9b:18:97:77:1a:7c:7f:ae:66:7e:98:23:0c:10:
bd:1a:79:00:66:fc:e9:49:70:dc:0c:cd:e2:c8:e4:84:91:6c:
1c:0d:8f:92:d5:39:b7:7d:97:75:f8:da:3a:e2:0f:da:08:65:
75:d0:67:00:1b:5f:08:db:f9:a3:8f:b8:2c:98:79:2f:c2:bd:
ad:19:96:6a:da:3e:d5:66:d4:90:d6:ae:df:c0:ef:66:ee:18:
ee:cc:93:01:52:ba:63:7e:9f:2d:aa:c3:62:dc:78:36:10:96:
01:6d:e7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 30 19:50:24 2024 by rpki-client on console.sobornost.net