Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/gnywa6ZmQp-5VlxAJPxICVO1Vs4.roa
File: gnywa6ZmQp-5VlxAJPxICVO1Vs4.roa (raw, json)
Hash identifier: tm3JR29U1oVnI0mXi+ldF1qpnosbaESG0H/nTmQB+sg=
Subject key identifier: 82:7C:B0:6B:A6:66:42:9F:B9:56:5C:40:24:FC:48:09:53:B5:56:CE
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1B96
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/gnywa6ZmQp-5VlxAJPxICVO1Vs4.roa
Signing time: Fri 03 May 2024 12:54:22 +0000
ROA not before: Fri 03 May 2024 12:54:22 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7062 (0x1b96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 3 12:54:22 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=827CB06BA666429FB9565C4024FC480953B556CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:12:9a:df:83:f4:21:e3:64:24:c1:26:ad:be:
63:1d:07:81:43:04:a4:cc:44:ff:6a:fb:2f:0d:75:
fa:84:63:40:47:dd:c9:8f:55:b9:c8:ff:43:b5:aa:
d5:4a:af:0d:2c:1a:53:26:c9:91:52:ab:e1:c6:00:
2a:b5:32:ef:35:5c:be:91:1b:61:4d:3f:a0:a8:0f:
f0:83:81:44:00:29:54:99:b9:11:23:d8:09:b7:66:
f2:00:c3:f5:6d:68:0d:48:7f:23:2e:04:95:5b:71:
33:c2:70:29:c4:6a:fc:5a:e8:d7:40:4d:9b:af:df:
f5:00:a7:e3:40:23:75:2a:1d:7e:22:4d:6a:07:92:
14:02:07:f4:c9:7a:bb:b6:4e:63:52:5a:b0:e0:d0:
3b:33:46:61:77:a5:89:cc:78:66:55:16:cf:32:50:
35:37:39:0c:06:31:10:03:55:ef:af:6b:eb:94:60:
24:b5:7c:23:de:6c:a1:8f:c6:26:07:be:26:96:2a:
de:46:c6:8b:47:89:b1:14:51:92:51:48:8f:e3:65:
df:89:d3:05:3c:3d:c8:ec:0f:65:b6:dc:38:77:47:
b7:df:ea:73:74:65:2a:e8:ab:8c:76:df:14:20:c8:
d5:1e:e5:3e:51:26:86:4a:5c:13:d6:5d:61:8c:a6:
99:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7C:B0:6B:A6:66:42:9F:B9:56:5C:40:24:FC:48:09:53:B5:56:CE
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/gnywa6ZmQp-5VlxAJPxICVO1Vs4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
cb:bc:7f:95:58:ca:43:e3:db:a6:3c:70:f1:5f:3d:3c:3d:14:
9c:92:2c:06:1c:f4:15:d5:15:11:9b:78:06:64:53:f0:a3:34:
fb:34:2e:5c:c3:d7:a7:db:89:0d:08:a5:0d:11:5b:38:4a:1b:
0e:e6:11:fe:0e:de:4a:ca:83:0f:41:06:1c:8d:48:ae:05:f3:
5c:41:f8:7e:41:e2:a3:12:5f:83:4e:a6:2c:b3:a7:2b:4b:31:
9d:5f:e3:d1:b5:44:bb:df:1e:9e:fc:9c:80:a9:31:51:48:78:
d8:bc:80:ea:8c:b9:a7:0c:27:03:59:a4:32:18:d9:89:d8:65:
84:2a:04:66:8a:ac:67:93:a0:52:f8:23:fc:7e:0f:4d:12:e8:
78:c8:6c:08:a9:a9:17:52:be:e0:34:4c:3b:ce:3a:88:c0:1a:
71:52:e5:62:84:be:ba:c4:aa:8e:ac:10:fd:9f:c8:22:24:b3:
9b:89:02:80:4b:8c:33:16:54:dc:42:af:07:77:66:83:bc:f6:
5a:53:77:45:95:32:45:37:ef:74:7e:7d:44:a0:ea:b1:a9:12:
be:83:a4:06:8a:b7:d1:fb:eb:37:c0:92:fa:9f:8b:06:eb:87:
5f:c5:be:e5:4a:e5:99:c2:2c:59:45:84:89:2f:0a:e2:75:bd:
1e:6a:ec:72
-----BEGIN CERTIFICATE-----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Generated at Fri May 3 17:05:21 2024 by rpki-client on console.sobornost.net