Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/zw4Nh0Qt_gVqKWw48X4YH_q5HCY.roa
File: zw4Nh0Qt_gVqKWw48X4YH_q5HCY.roa (raw, json)
Hash identifier: SC5QAoKh+E1AIPabG/i0KjRpYZpz9TPBqWtLlpsjDIU=
Subject key identifier: CF:0E:0D:87:44:2D:FE:05:6A:29:6C:38:F1:7E:18:1F:FA:B9:1C:26
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1588
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/zw4Nh0Qt_gVqKWw48X4YH_q5HCY.roa
Signing time: Wed 17 Apr 2024 09:23:22 +0000
ROA not before: Wed 17 Apr 2024 09:23:22 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5512 (0x1588)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 17 09:23:22 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CF0E0D87442DFE056A296C38F17E181FFAB91C26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:86:5f:05:7f:10:bb:84:23:6e:62:fe:b9:dc:
c9:8b:35:4a:cf:e1:b6:a0:29:a9:98:d9:e3:d9:ba:
65:57:b9:66:20:65:3c:ad:96:f4:14:34:31:ba:b0:
43:51:83:bc:fa:38:43:0d:d9:06:0d:cc:64:71:ce:
1f:96:e8:6d:cf:a8:39:cf:2a:4f:ec:ad:7a:5e:9f:
a8:93:cd:47:6a:b0:59:a0:49:f3:dc:46:b9:b3:19:
52:3a:7f:56:cf:04:48:5d:82:0b:04:61:63:dc:e6:
b4:64:cf:0a:6f:43:f0:64:75:46:88:b1:bb:02:6b:
87:cd:8e:e0:34:35:d0:3e:1b:d4:d2:8b:62:e4:e2:
13:cb:12:2c:b0:0e:0f:0e:41:be:17:8e:16:86:7f:
0d:00:09:b6:a0:aa:c0:9f:ba:7b:bb:f4:95:18:62:
ea:91:9c:dd:42:69:86:6b:83:e1:d8:ea:5c:94:16:
d1:d3:78:5f:5c:f1:56:b8:8a:2a:a3:23:46:59:01:
96:f5:14:37:41:83:a1:bb:47:7e:69:a2:89:22:7f:
30:ad:49:50:af:69:d0:fc:d9:bc:ae:5a:13:42:c2:
b7:5f:bc:44:c7:67:47:72:22:f5:10:04:22:60:b1:
fd:13:34:a6:0f:a9:61:cd:7b:0f:d2:6b:c9:55:25:
4b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0E:0D:87:44:2D:FE:05:6A:29:6C:38:F1:7E:18:1F:FA:B9:1C:26
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/zw4Nh0Qt_gVqKWw48X4YH_q5HCY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
91:cb:62:77:4a:45:4b:e2:a6:b3:4a:9f:87:b1:70:ce:a4:e3:
fd:f5:40:a1:84:68:b1:fd:32:2a:1e:eb:57:e8:92:98:ce:25:
53:09:c7:dc:98:ca:f9:04:31:3e:e6:48:9c:69:52:cb:36:34:
ea:29:33:cf:37:94:6a:e3:4f:19:e3:04:26:03:7d:07:57:79:
f7:49:84:03:e4:94:3e:d0:f0:a1:4f:45:55:4a:92:9b:4a:fe:
02:7f:0b:e3:76:72:da:a7:86:23:bc:52:49:9d:4f:91:17:1d:
22:e6:20:d7:35:f0:ca:b0:f9:b2:00:7c:3e:54:64:e3:f4:e5:
bc:6d:2e:97:e9:dd:69:11:1e:98:06:04:05:42:b4:51:f2:39:
5f:5e:76:b6:52:ea:14:11:23:15:73:cf:28:2d:e2:e7:b5:2d:
9d:d7:0e:4b:ad:0b:9f:09:ac:49:2e:03:25:be:44:81:f5:6e:
1e:a6:ec:9f:ab:35:49:e4:24:36:72:8f:02:6b:61:e6:e8:f6:
b4:74:80:a4:4c:25:b6:be:d9:cc:57:0e:e3:a5:58:9c:a7:66:
d1:02:ab:e3:7c:0f:7a:ea:4d:c1:1f:66:b3:cf:e1:fe:d5:96:
0e:62:b2:46:f9:8b:18:ef:56:ae:c3:b4:33:5e:bc:14:81:9c:
94:e4:ad:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 14:46:04 2024 by rpki-client on console.sobornost.net