Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/-4uM3GC8GVmEZAfucOtsfLqkDZc.roa
File: -4uM3GC8GVmEZAfucOtsfLqkDZc.roa (raw, json)
Hash identifier: MncyXkk3bgNyYMZBtrueMxS/j50dKWxsKGuaJZBOsPc=
Subject key identifier: FB:8B:8C:DC:60:BC:19:59:84:64:07:EE:70:EB:6C:7C:BA:A4:0D:97
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 54D5
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-4uM3GC8GVmEZAfucOtsfLqkDZc.roa
Signing time: Sat 11 May 2024 16:54:09 +0000
ROA not before: Sat 11 May 2024 16:54:09 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21717 (0x54d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 11 16:54:09 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FB8B8CDC60BC1959846407EE70EB6C7CBAA40D97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:da:8c:af:c1:3a:db:14:d3:88:75:ef:f4:a3:
92:e7:18:c4:13:67:85:6a:a7:f8:4c:be:6e:56:62:
e6:72:e7:9e:60:e3:53:32:f5:36:7c:70:b6:03:66:
ba:c2:93:fa:f1:7c:8e:59:29:a4:cc:8e:44:36:9a:
f2:45:61:7a:84:1a:74:2f:3a:76:1f:7c:0d:c6:c0:
1e:57:47:c8:e2:34:6b:83:28:3b:6a:a9:27:8b:b1:
69:c9:88:cc:aa:13:a2:24:81:e5:2d:4c:b0:29:7e:
77:e5:de:e6:ca:99:9b:60:b5:a0:38:1e:c4:9f:1b:
06:e1:aa:c0:dc:ef:19:9c:ec:af:13:98:9e:ad:79:
e5:7d:5f:22:10:93:0d:ec:9b:74:b6:a4:88:dd:29:
4f:cf:19:5b:74:71:e2:30:2b:e1:04:c7:62:e7:a1:
a4:2b:4c:17:94:35:4a:13:54:33:e6:71:22:9a:e8:
d3:b3:cd:8f:5d:5d:07:0a:82:68:5f:2e:60:a2:b0:
f4:c8:3f:c5:8b:64:bf:dd:b1:6e:48:76:d7:22:6d:
14:0a:3a:ea:f3:34:d8:5f:e0:99:5c:53:e8:24:4f:
a1:b1:9d:bd:d2:62:e4:96:8f:9a:d2:36:92:9b:9d:
2e:07:ae:49:b8:3f:50:1a:64:30:8c:fe:06:83:46:
f8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8B:8C:DC:60:BC:19:59:84:64:07:EE:70:EB:6C:7C:BA:A4:0D:97
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-4uM3GC8GVmEZAfucOtsfLqkDZc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
30:62:09:a3:8d:04:de:ab:32:d7:67:11:7d:4e:f8:55:b2:0b:
6a:bb:88:b5:24:01:c2:02:ec:d8:5b:3e:70:b1:70:5d:5d:d7:
d0:42:0c:e6:5f:8d:d2:70:5c:06:fb:33:3d:5c:8d:46:29:b5:
82:3f:58:6f:c9:89:23:0d:cb:b0:be:c9:04:1c:49:c9:28:10:
31:59:07:8b:7c:67:cd:2c:4b:82:3f:85:40:f3:9e:6d:89:89:
90:45:f3:3b:8f:57:d9:30:91:67:b9:ec:89:fb:f0:72:e3:61:
f9:0a:60:ad:7b:1f:09:b9:62:e9:7f:56:2e:ca:dc:e9:35:9d:
88:b3:28:41:26:15:55:d2:a5:f8:32:02:f4:26:34:94:7d:0f:
1c:67:49:9e:ad:c7:c9:2e:14:94:40:b9:09:fc:cc:88:37:01:
3c:f8:0a:de:b0:18:23:b6:a4:85:b4:9c:62:46:12:b8:57:db:
f4:a3:fa:c7:34:79:00:98:ac:82:9d:24:5e:ba:9c:de:db:ac:
75:61:6d:5f:13:6e:46:14:66:e0:c9:73:0f:a9:62:87:f1:7e:
51:71:c2:f7:7d:ed:66:e2:2f:4d:a4:b6:38:38:f5:1c:a8:37:
d8:b6:a6:26:d7:5f:45:fc:eb:4d:51:10:e4:ec:ee:df:b8:60:
8c:97:df:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 02:02:52 2025 by rpki-client