Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/-j1tBWRYGGP5ymYRCbsGH_bpjI0.roa
File: -j1tBWRYGGP5ymYRCbsGH_bpjI0.roa (raw, json)
Hash identifier: zNVN6GQIcuHDxO+lnELjY170BNqM1VYEmfxHXwvnllo=
Subject key identifier: FA:3D:6D:05:64:58:18:63:F9:CA:66:11:09:BB:06:1F:F6:E9:8C:8D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 57C6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-j1tBWRYGGP5ymYRCbsGH_bpjI0.roa
Signing time: Wed 15 May 2024 14:54:12 +0000
ROA not before: Wed 15 May 2024 14:54:12 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22470 (0x57c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 15 14:54:12 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FA3D6D0564581863F9CA661109BB061FF6E98C8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0c:79:02:41:38:ea:d4:4a:61:b3:17:21:7b:
c6:e5:ad:1d:42:a8:8b:73:63:1c:21:27:fd:cc:31:
d4:a8:cd:75:48:20:64:39:19:6c:8f:9c:ae:0a:f8:
20:e0:9a:f9:84:90:4a:1c:7f:1b:f7:d5:9a:c9:4c:
eb:4f:ae:35:40:ba:09:61:59:7b:1f:29:ec:44:11:
b2:3e:0f:07:9d:da:af:5f:1f:4c:6f:0c:82:df:8a:
01:34:c9:29:29:e2:78:e1:a3:1b:fb:fe:4f:ba:59:
6f:a5:33:1e:e6:7f:87:84:c8:c6:4f:92:3c:db:fc:
c8:57:2f:f9:ab:1f:44:9d:f7:e5:92:6d:ea:67:c0:
8e:f9:43:e7:81:a9:7c:cb:a3:71:3e:33:4b:22:17:
e6:30:d2:09:29:d0:1b:f6:3f:ee:55:d4:e4:36:44:
84:a0:5a:8a:c7:e4:b8:38:84:b7:be:21:0d:54:06:
50:a6:d5:2b:56:c8:b8:57:86:68:49:98:c8:87:70:
07:34:5f:00:99:dc:7f:49:76:f9:42:6e:2e:7c:96:
4b:1b:14:82:7c:9c:19:89:28:94:07:fb:a6:0a:f8:
72:85:69:1e:77:f5:d9:e9:a7:83:a2:fd:2b:d8:68:
20:75:3c:04:dc:30:7a:0d:ce:64:b4:ed:29:3a:17:
17:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:3D:6D:05:64:58:18:63:F9:CA:66:11:09:BB:06:1F:F6:E9:8C:8D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-j1tBWRYGGP5ymYRCbsGH_bpjI0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6f:23:0f:70:20:8f:a5:53:21:04:f1:b6:9a:03:b2:3d:ac:6f:
ef:de:f7:da:c2:a7:d5:18:f2:6f:dd:4a:98:6b:4b:33:83:7a:
ec:a9:e5:68:1d:ff:6c:0a:14:e0:68:3d:b2:23:de:05:39:aa:
eb:e3:c2:f2:3c:13:58:08:33:2b:47:15:f8:6c:3f:3b:2a:75:
56:51:77:f3:8d:f0:27:26:fe:c1:82:c1:46:a9:70:16:08:f7:
c3:66:b9:da:5e:e0:da:ec:0c:fa:4a:cb:6d:72:54:0f:b0:94:
73:47:57:9e:d2:4c:a8:32:bf:69:50:c9:e5:33:52:59:a9:84:
52:63:83:d6:d3:b8:c3:0f:10:a2:de:7a:6d:23:9f:d8:5f:8c:
31:04:a4:01:04:af:10:ae:b9:f4:0e:03:02:57:c3:82:20:3d:
ca:ed:24:09:f2:13:42:02:43:c8:62:2a:1f:7f:e4:79:99:6b:
35:0e:f9:ce:3c:02:d5:30:8b:8a:01:43:38:2e:7f:78:2f:7c:
9a:36:c7:9d:65:79:ae:eb:4b:3a:ba:b9:ef:4e:46:5b:f2:59:
15:d6:bd:f7:a4:e1:39:d9:85:eb:15:9d:6c:31:93:98:2c:a2:
eb:f6:49:2f:ae:34:7f:83:13:cb:1c:ed:17:91:1c:2d:b0:40:
fc:1b:0d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 21:22:42 2025 by rpki-client