Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/zYP9F3b0Kkwzow9Infy67pzOKFQ.roa
File: zYP9F3b0Kkwzow9Infy67pzOKFQ.roa (raw, json)
Hash identifier: mrMEwiT35qQpjk2wqeoRU189hl3O8ciiKjEus0oV7Dw=
Subject key identifier: CD:83:FD:17:76:F4:2A:4C:33:A3:0F:48:9D:FC:BA:EE:9C:CE:28:54
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 12B6
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/zYP9F3b0Kkwzow9Infy67pzOKFQ.roa
Signing time: Tue 09 Apr 2024 20:53:05 +0000
ROA not before: Tue 09 Apr 2024 20:53:05 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4790 (0x12b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 9 20:53:05 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CD83FD1776F42A4C33A30F489DFCBAEE9CCE2854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0e:48:de:42:ac:6e:d4:56:0a:9e:de:3e:fa:
4b:a0:cb:65:0e:c5:0f:77:24:39:f5:b7:27:21:2b:
0b:d1:39:76:33:ac:62:b3:d6:df:76:4c:6a:38:a8:
d8:f3:50:43:95:14:5c:62:0e:be:5f:9b:72:6f:dc:
57:9d:e8:09:10:bd:5d:61:e4:cb:a4:cf:de:7d:7b:
e6:f6:69:dc:a9:dc:e8:b3:02:d8:d0:a2:1a:8c:af:
44:83:25:ee:50:86:b5:f8:43:48:03:01:43:1c:b8:
10:5a:b6:bf:b7:72:ff:11:d9:e7:75:ce:34:f6:33:
b6:a3:45:b7:0a:4c:01:3f:da:60:da:f5:33:39:5b:
c7:2c:8e:ac:70:c9:8e:d4:f8:70:0a:d8:a8:79:cd:
b7:52:37:35:5c:53:98:84:9e:4b:57:f2:4f:41:eb:
dc:39:4b:6c:5b:f7:fc:5e:94:d0:ee:e7:43:6d:6d:
4a:1b:db:95:b4:95:7b:b1:05:c7:61:77:14:6b:e7:
8e:66:73:56:b2:a4:77:75:5a:84:23:ee:f1:ae:88:
24:d0:aa:27:38:f1:7f:15:9e:3f:2b:e1:d8:d9:44:
b3:04:b6:ae:5d:58:8f:1b:a4:06:9b:bc:a7:5e:cc:
57:28:86:e4:a3:9c:46:cf:1f:87:6f:ec:95:a7:20:
85:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:83:FD:17:76:F4:2A:4C:33:A3:0F:48:9D:FC:BA:EE:9C:CE:28:54
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/zYP9F3b0Kkwzow9Infy67pzOKFQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c2:17:64:c6:5a:f1:26:bb:77:02:60:fe:19:05:71:69:b9:21:
b7:9e:f9:9a:d5:d0:b7:33:ed:f1:95:37:9a:1c:54:da:be:df:
c9:f5:07:da:98:e6:ce:d6:94:28:3d:10:2a:91:88:a0:63:56:
48:bb:2b:32:33:18:19:3e:c5:af:15:fe:9d:79:dc:b1:aa:cd:
02:0b:a6:56:c2:53:7f:3f:0d:f9:87:9e:2f:ac:7a:c1:03:fb:
12:11:be:26:3f:d7:69:2d:b6:55:84:cd:2d:94:70:4d:e0:77:
75:92:41:7e:24:af:3e:a2:cc:8d:70:6d:e7:61:80:df:74:b1:
52:fc:9e:4f:f3:ca:55:55:d2:5b:d4:5d:f5:c8:72:40:3e:b4:
71:0c:55:e3:9e:5b:0d:64:d3:9e:19:8d:cf:bb:75:76:84:f7:
1f:30:5d:b4:ce:7b:94:22:79:f8:ad:cd:74:08:6f:5f:6d:e0:
96:0b:4f:a9:6b:08:0e:c2:3d:db:ab:58:34:f9:42:81:68:99:
aa:2d:ab:5a:2f:96:8d:2d:d4:d2:aa:e3:04:f9:6a:4c:c2:d6:
e2:b7:85:a2:40:5c:ad:c8:8b:45:ad:6f:3b:2a:07:27:e1:53:
59:eb:64:3d:c7:ce:79:15:b2:cb:9a:44:7d:b0:63:93:78:10:
4b:10:40:e3
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICErYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MDky
MDUzMDVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKENEODNGRDE3NzZGNDJB
NEMzM0EzMEY0ODlERkNCQUVFOUNDRTI4NTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCDkjeQqxu1FYKnt4++kugy2UOxQ93JDn1tychKwvROXYzrGKz
1t92TGo4qNjzUEOVFFxiDr5fm3Jv3Fed6AkQvV1h5Mukz959e+b2adyp3OizAtjQ
ohqMr0SDJe5QhrX4Q0gDAUMcuBBatr+3cv8R2ed1zjT2M7ajRbcKTAE/2mDa9TM5
W8csjqxwyY7U+HAK2Kh5zbdSNzVcU5iEnktX8k9B69w5S2xb9/xelNDu50NtbUob
25W0lXuxBcdhdxRr545mc1aypHd1WoQj7vGuiCTQqic48X8Vnj8r4djZRLMEtq5d
WI8bpAabvKdezFcohuSjnEbPH4dv7JWnIIVpAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUzYP9F3b0Kkwzow9Infy67pzOKFQwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL3pZUDlGM2IwS2t3em93
OUluZnk2N3B6T0tGUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAwhdkxlrxJrt3AmD+GQVxabkht575mtXQ
tzPt8ZU3mhxU2r7fyfUH2pjmztaUKD0QKpGIoGNWSLsrMjMYGT7FrxX+nXncsarN
AgumVsJTfz8N+YeeL6x6wQP7EhG+Jj/XaS22VYTNLZRwTeB3dZJBfiSvPqLMjXBt
52GA33SxUvyeT/PKVVXSW9Rd9chyQD60cQxV455bDWTTnhmNz7t1doT3HzBdtM57
lCJ5+K3NdAhvX23glgtPqWsIDsI926tYNPlCgWiZqi2rWi+WjS3U0qrjBPlqTMLW
4reFokBcrciLRa1vOyoHJ+FTWetkPcfOeRWyy5pEfbBjk3gQSxBA4w==
Generated at Wed Apr 10 03:54:24 2024 by rpki-client on console.sobornost.net