Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/bcDBGTJIszmuYi-QUO9HVl-Y5dM.roa
File: bcDBGTJIszmuYi-QUO9HVl-Y5dM.roa (raw, json)
Hash identifier: F6rk5BR56FRm3GHZ3P/oXVPxH7SHLiCGHyMYHWO/MJE=
Subject key identifier: 6D:C0:C1:19:32:48:B3:39:AE:62:2F:90:50:EF:47:56:5F:98:E5:D3
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 100C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/bcDBGTJIszmuYi-QUO9HVl-Y5dM.roa
Signing time: Tue 02 Apr 2024 18:22:41 +0000
ROA not before: Tue 02 Apr 2024 18:22:41 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4108 (0x100c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 2 18:22:41 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6DC0C1193248B339AE622F9050EF47565F98E5D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bc:3d:f6:96:18:d0:11:74:18:2b:c7:65:dd:
62:fb:3b:7a:e4:cc:25:db:91:94:cb:79:40:1c:4d:
c5:a4:cd:f4:9b:45:f9:62:61:15:0c:ae:9f:41:74:
f2:9d:06:95:6f:d5:62:7d:2e:64:b8:2a:84:c5:d3:
4f:9a:83:e8:bf:2d:41:24:d8:36:67:2a:a2:b0:43:
27:cb:40:a1:71:d8:7b:92:3c:ea:32:1f:f6:9b:be:
41:7d:8b:71:96:40:52:13:82:73:df:37:fd:3e:23:
18:ea:af:c1:0d:9b:fd:ae:40:03:59:3d:f7:20:ca:
b8:71:9c:15:a6:57:63:27:d4:ae:02:68:c1:4e:80:
f3:df:95:5b:d1:70:bb:cc:ca:6c:2e:35:de:46:cb:
cd:6a:99:6d:0a:75:d4:17:96:7a:14:de:3b:df:2f:
37:b9:21:2f:5b:af:39:98:7f:98:0e:83:68:b8:b4:
48:bb:2b:1a:c0:df:bc:18:04:d5:78:2f:48:95:28:
67:09:ee:ec:04:a9:5c:9b:87:39:cf:23:e2:85:8c:
b1:0d:e6:ed:8e:aa:97:91:c7:c6:5a:09:22:58:d8:
78:9f:93:a3:0a:80:19:85:51:27:78:9c:6a:1f:f1:
39:ba:4d:e7:2d:a7:32:ef:b3:e5:09:b2:be:40:49:
51:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C0:C1:19:32:48:B3:39:AE:62:2F:90:50:EF:47:56:5F:98:E5:D3
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/bcDBGTJIszmuYi-QUO9HVl-Y5dM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
78:f4:62:3b:79:8a:8a:64:51:bd:5c:f0:fd:c7:12:9f:56:89:
ba:ae:3d:53:0e:27:4e:c5:4e:68:96:94:a8:d0:a6:52:c3:db:
cd:22:f7:13:c1:9e:a0:f3:2e:a3:0e:d8:ab:be:62:80:94:ad:
a1:6c:db:3a:6f:8e:96:0d:0f:7e:b3:5b:0a:75:9b:da:5b:44:
29:cf:51:2e:2d:db:6d:c8:3c:fe:99:f8:7a:e3:22:61:4d:98:
37:1c:6a:52:15:46:d1:7b:7f:9f:28:e7:0a:a9:67:d5:be:94:
22:d2:16:e4:24:fd:df:ae:0c:1f:ec:0e:db:2f:75:74:a9:6c:
ba:71:3e:ef:7a:3f:28:e4:5c:8f:ed:e9:9e:4b:42:f4:5c:5d:
36:ca:f9:0e:57:db:35:fb:15:85:c7:51:c4:ac:fc:73:76:be:
a8:0a:3b:65:5c:28:8d:67:13:0a:7f:dd:75:59:52:45:d3:6c:
40:7b:7a:12:de:ce:a5:9b:16:3b:0b:19:0b:e5:8a:e7:9d:84:
08:63:e4:5a:29:e3:52:ac:d5:11:fe:ad:e9:6d:e4:96:ed:3c:
53:73:9b:85:42:45:f4:0d:e4:fc:61:57:68:a6:5c:fe:65:9c:
9a:70:b5:13:92:4e:bc:22:c9:71:25:6c:26:c6:8f:9d:7a:13:
05:2a:be:76
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICEAwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MDIx
ODIyNDFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDZEQzBDMTE5MzI0OEIz
MzlBRTYyMkY5MDUwRUY0NzU2NUY5OEU1RDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDdvD32lhjQEXQYK8dl3WL7O3rkzCXbkZTLeUAcTcWkzfSbRfli
YRUMrp9BdPKdBpVv1WJ9LmS4KoTF00+ag+i/LUEk2DZnKqKwQyfLQKFx2HuSPOoy
H/abvkF9i3GWQFITgnPfN/0+Ixjqr8ENm/2uQANZPfcgyrhxnBWmV2Mn1K4CaMFO
gPPflVvRcLvMymwuNd5Gy81qmW0KddQXlnoU3jvfLze5IS9brzmYf5gOg2i4tEi7
KxrA37wYBNV4L0iVKGcJ7uwEqVybhznPI+KFjLEN5u2OqpeRx8ZaCSJY2Hifk6MK
gBmFUSd4nGof8Tm6TectpzLvs+UJsr5ASVFpAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUbcDBGTJIszmuYi+QUO9HVl+Y5dMwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL2JjREJHVEpJc3ptdVlp
LVFVTzlIVmwtWTVkTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAePRiO3mKimRRvVzw/ccSn1aJuq49Uw4n
TsVOaJaUqNCmUsPbzSL3E8GeoPMuow7Yq75igJStoWzbOm+Olg0PfrNbCnWb2ltE
Kc9RLi3bbcg8/pn4euMiYU2YNxxqUhVG0Xt/nyjnCqln1b6UItIW5CT9364MH+wO
2y91dKlsunE+73o/KORcj+3pnktC9FxdNsr5DlfbNfsVhcdRxKz8c3a+qAo7ZVwo
jWcTCn/ddVlSRdNsQHt6Et7OpZsWOwsZC+WK552ECGPkWinjUqzVEf6t6W3klu08
U3ObhUJF9A3k/GFXaKZc/mWcmnC1E5JOvCLJcSVsJsaPnXoTBSq+dg==
-----END CERTIFICATE-----
Generated at Wed Apr 3 01:44:26 2024 by rpki-client on console.sobornost.net