Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/mT9lqEwmGLYyXjib-iQznZ8GWRQ.roa
File: mT9lqEwmGLYyXjib-iQznZ8GWRQ.roa (raw, json)
Hash identifier: VmwzdErnDAr8lfkMN9sSVwNN/w/9NA4cjTuCxfaR/c4=
Subject key identifier: 99:3F:65:A8:4C:26:18:B6:32:5E:38:9B:FA:24:33:9D:9F:06:59:14
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 195A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/mT9lqEwmGLYyXjib-iQznZ8GWRQ.roa
Signing time: Sat 27 Apr 2024 13:53:51 +0000
ROA not before: Sat 27 Apr 2024 13:53:51 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6490 (0x195a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 27 13:53:51 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=993F65A84C2618B6325E389BFA24339D9F065914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:81:cd:8f:e1:2c:32:d4:36:af:90:56:f9:c8:
67:a1:ff:fa:74:29:25:0a:49:a9:2f:b8:7d:31:88:
7f:e7:63:ba:2c:f1:d8:ed:f5:4c:3c:32:f4:17:8e:
91:ee:92:f2:1e:b0:71:92:db:37:b7:c1:1b:1d:d7:
dc:b1:e3:7f:0a:e6:c9:8b:72:e1:90:a2:ac:5e:ca:
ae:87:cc:e4:88:ab:c0:ff:41:39:9a:4d:a0:fe:bd:
fb:ec:f4:64:2a:28:dc:1f:5a:fc:ca:0c:ec:a1:9d:
fb:92:b8:f3:37:58:de:52:8e:88:b4:a8:23:3b:4c:
f8:b1:a2:23:4a:4b:6e:54:27:e7:57:73:e0:bc:4d:
0b:1b:98:6a:04:08:51:3a:94:54:59:d6:61:99:a0:
90:a2:94:f4:2e:d3:1f:70:7d:03:8d:62:2e:83:40:
0f:54:e8:89:b0:98:80:8d:7d:03:6e:9c:32:cd:8c:
14:89:38:f8:06:7b:75:89:8e:03:60:9f:b8:37:02:
2b:d7:d2:f8:ed:b8:4b:1b:18:36:41:a0:fb:fc:ce:
70:14:66:fe:d3:7d:b1:4d:12:23:1d:eb:0a:c3:34:
d8:64:79:93:dd:76:8b:b9:64:d7:7f:ec:80:29:cd:
30:d5:0e:c7:ed:ab:78:fe:3a:a8:40:f9:01:ea:f3:
f0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3F:65:A8:4C:26:18:B6:32:5E:38:9B:FA:24:33:9D:9F:06:59:14
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/mT9lqEwmGLYyXjib-iQznZ8GWRQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6c:2b:6d:53:84:89:40:e5:47:3e:06:23:a2:5b:20:c8:24:8e:
c4:2b:25:23:ab:ac:40:fa:16:e2:aa:81:58:dc:96:cf:b9:4d:
ca:05:e5:9e:18:f2:a9:5a:bc:a6:91:3b:6d:8d:39:97:cc:6e:
42:92:37:7b:1f:88:85:43:1c:9e:0d:25:b3:81:05:94:a9:07:
ad:da:e6:a0:12:b7:6f:0d:4f:54:0c:f9:ee:1b:36:1f:47:ea:
12:d6:c4:07:f9:b0:61:41:b0:28:a0:d4:44:d7:6d:b2:8b:fb:
8d:e8:2c:80:0a:f9:8f:99:ee:24:b0:22:bc:c5:0c:d6:33:ce:
c3:f5:d8:78:a8:32:a0:67:e8:e3:13:2f:30:ef:55:77:10:51:
5b:20:c8:2d:82:8b:08:d8:0c:97:4c:13:05:7d:e8:60:b4:04:
92:eb:b9:f7:d2:a5:a3:c4:a2:ed:30:82:6e:4d:94:96:dd:9f:
32:16:2e:93:ff:b2:ce:26:f4:fa:df:6d:69:fb:cf:39:52:bf:
bb:02:1d:f6:28:47:a0:3d:1a:d3:a2:79:a2:e7:15:cc:de:f0:
82:f5:b3:67:85:03:68:12:e8:ee:47:a2:0f:09:da:ae:a6:8a:
74:1a:8a:f7:81:68:0f:86:e3:d3:8e:d7:d4:fd:05:dd:b2:23:
a6:97:30:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 20:46:50 2024 by rpki-client on console.sobornost.net