Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/ob1NrQCt-ySzOwY70pxT9bXVhLM.roa
File: ob1NrQCt-ySzOwY70pxT9bXVhLM.roa (raw, json)
Hash identifier: d83eUIMOQVJMCTtIzDgR91R9q6lHXm4eoUVofqXbiyQ=
Subject key identifier: A1:BD:4D:AD:00:AD:FB:24:B3:3B:06:3B:D2:9C:53:F5:B5:D5:84:B3
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 14B8
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/ob1NrQCt-ySzOwY70pxT9bXVhLM.roa
Signing time: Mon 15 Apr 2024 05:23:18 +0000
ROA not before: Mon 15 Apr 2024 05:23:18 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5304 (0x14b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 15 05:23:18 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A1BD4DAD00ADFB24B33B063BD29C53F5B5D584B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5f:46:b1:b7:c9:8d:56:a2:50:af:d1:92:82:
9b:d9:c9:e2:a6:e9:28:c8:22:45:15:8f:c4:d2:66:
90:d9:57:5c:11:7f:45:0a:25:de:d2:bb:df:c4:03:
58:78:a3:3a:50:e7:e6:4b:fa:34:98:1a:77:01:a3:
d0:bf:08:34:3c:98:29:97:5b:6a:7f:5c:7b:7d:e9:
5f:39:b2:20:c3:7e:36:3f:03:30:f1:d4:6a:25:23:
87:c4:1b:53:d8:d6:4d:ab:50:6e:12:a0:ae:15:ea:
f2:45:15:a0:52:3e:c6:8f:ca:81:f4:94:89:ad:e7:
aa:2c:77:8e:fc:4c:5d:ca:5f:eb:34:ce:4e:63:6b:
6a:fd:31:00:1b:42:85:1f:27:e4:2f:03:de:ae:b0:
92:7f:7e:bb:0d:4c:d3:f3:ce:57:44:60:ac:78:f8:
9d:c0:f5:36:97:7f:cf:72:55:b0:bd:e6:86:c8:e2:
0a:a5:eb:ce:ac:b0:ec:81:cb:2d:68:ba:49:57:e7:
d2:17:7c:41:53:2e:93:d0:a0:ff:ca:37:15:5e:15:
bf:94:f4:1d:25:0d:45:ec:6a:5a:ec:88:9f:15:75:
fb:6e:f7:1e:30:8d:78:09:e8:0b:69:79:7d:c4:cb:
7a:d7:7b:1b:d7:60:b7:77:d9:9e:08:08:03:90:b2:
16:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BD:4D:AD:00:AD:FB:24:B3:3B:06:3B:D2:9C:53:F5:B5:D5:84:B3
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/ob1NrQCt-ySzOwY70pxT9bXVhLM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
bd:81:72:ce:61:9a:be:52:bc:4c:cb:88:20:26:4d:01:20:28:
16:d0:e3:b9:65:2e:a8:ce:4d:ba:71:f4:58:5e:12:15:ee:10:
01:d6:ae:ff:62:52:f3:b0:fe:54:46:59:dc:ce:a0:f8:8b:e5:
0e:e5:f7:f6:84:79:1b:4c:26:dc:3a:31:03:5d:78:a0:7a:0d:
69:45:ba:e9:e9:e4:b7:0d:6e:c9:87:2b:eb:a5:0e:ea:ea:5c:
f2:c6:7a:a2:c5:ac:7f:42:17:45:c4:1d:c4:e3:a7:ee:f2:5c:
f9:bd:12:73:0c:6b:3a:b1:46:01:53:e8:b6:2d:fe:f6:2a:67:
62:4d:02:96:7d:55:83:bc:ad:b7:b3:f7:ff:e2:b4:e6:ec:38:
68:9f:39:d7:ce:c4:01:5b:40:d7:4e:4f:c0:8e:4f:31:e1:65:
43:1c:1b:02:9a:08:01:cf:82:86:44:cb:65:d8:29:be:30:0d:
dd:cb:12:73:b7:7e:37:ed:5f:6f:59:c8:d8:bc:ef:d9:f8:7f:
44:48:89:2f:e3:0a:96:a7:9b:3b:0c:c1:5c:9d:73:5d:75:c0:
2a:10:65:80:d1:94:47:c2:54:0d:a4:f4:27:e5:06:45:82:4d:
41:11:ce:20:ff:35:b6:62:79:a0:1c:b8:d7:59:36:de:a6:bf:
6e:64:1f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 11:57:31 2024 by rpki-client on console.sobornost.net