Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/qXJxxWT6cQT_B7hteStZZTxhqNw.roa
File: qXJxxWT6cQT_B7hteStZZTxhqNw.roa (raw, json)
Hash identifier: 53cw9s37xDcR0pq+0aF7BAc+0MZF8aPNOdjvSZlwDCU=
Subject key identifier: A9:72:71:C5:64:FA:71:04:FF:07:B8:6D:79:2B:59:65:3C:61:A8:DC
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 19CA
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/qXJxxWT6cQT_B7hteStZZTxhqNw.roa
Signing time: Sun 28 Apr 2024 17:53:53 +0000
ROA not before: Sun 28 Apr 2024 17:53:53 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6602 (0x19ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 28 17:53:53 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A97271C564FA7104FF07B86D792B59653C61A8DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2a:11:8d:ed:6d:d4:3e:45:d8:69:ea:4d:9e:
05:a2:6f:88:05:d2:3d:1e:15:b8:df:0c:32:02:40:
49:14:65:e9:99:64:90:5a:93:6a:d6:cf:8e:f9:02:
a7:60:c6:f4:d9:12:ea:cf:fa:bb:be:66:6e:7e:3c:
3d:ef:da:16:d8:be:de:ed:1f:e5:82:65:f7:fb:d4:
2c:a3:25:a2:1a:a3:4e:44:4f:f0:50:c8:0e:ef:c6:
2f:d8:0b:69:cd:f2:fb:e8:ed:6f:08:8d:99:ae:92:
5b:b4:54:60:20:4f:52:6b:6a:ea:16:81:b8:a7:cf:
99:ec:2d:a5:d4:c0:87:36:d2:f3:ee:c4:06:df:09:
1e:3f:4d:3c:ca:22:f7:01:40:4b:b9:be:cd:bf:e1:
0f:19:2d:96:6a:ff:58:e6:ad:fd:03:b2:a7:4c:7e:
86:04:30:e2:79:fe:23:85:44:4c:27:80:01:de:f7:
01:c1:d1:df:32:34:d4:a4:6a:be:2b:c4:ed:1f:7e:
3e:26:cb:a6:be:e5:90:4a:80:f3:14:74:67:e1:35:
76:cd:b0:cd:da:2b:db:7d:e2:20:54:f0:52:02:e9:
e4:b1:4d:8f:87:67:21:9a:7f:a3:0c:67:48:cd:c6:
64:72:08:99:94:70:d5:e3:1d:b2:b7:a0:b6:fa:11:
b1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:72:71:C5:64:FA:71:04:FF:07:B8:6D:79:2B:59:65:3C:61:A8:DC
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/qXJxxWT6cQT_B7hteStZZTxhqNw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3c:26:08:08:68:2b:15:55:4c:c2:3c:a1:59:84:49:47:ed:5e:
fb:9e:cb:83:5d:9b:85:25:f6:18:f9:40:70:f6:d3:44:6d:ea:
57:d6:11:c2:4f:11:ee:58:1e:2d:d8:30:e7:0d:fe:c1:37:81:
10:16:68:23:9f:d4:fe:7b:b3:72:ff:db:32:46:5c:81:01:8a:
14:77:07:4f:63:6f:fc:69:c8:ae:eb:82:47:00:8d:10:35:a8:
8f:09:a5:08:98:c0:34:d5:d7:a9:71:87:8c:d8:e9:5a:33:e2:
3c:1d:b5:7a:de:ca:59:74:91:87:73:7e:6c:7b:82:d2:d0:15:
53:31:67:fa:96:51:4b:0b:e9:36:33:d6:19:4e:86:6a:09:3f:
e7:3b:27:8d:26:30:2d:3f:68:50:e4:82:33:44:4b:45:a8:49:
1e:c3:bc:88:e3:4a:db:04:9c:da:32:6b:9b:95:a5:ba:ba:4b:
0a:8f:c4:98:7f:63:73:6e:af:a0:51:e9:40:47:6c:98:56:41:
75:6a:c7:3d:5c:1e:a6:cb:76:0a:d0:13:db:8b:b3:60:66:16:
31:26:30:b8:43:0e:2f:b6:b9:1b:93:22:75:05:f7:83:dd:90:
09:4e:24:6f:18:c2:8d:64:0b:fc:40:c2:93:d7:85:4b:52:0b:
35:a6:c5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 00:39:48 2024 by rpki-client on console.sobornost.net