Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/0nyoO0qXCakrcmj3cCaREyJ8j_s.roa
File: 0nyoO0qXCakrcmj3cCaREyJ8j_s.roa (raw, json)
Hash identifier: 6E6lvK2YX9CBI4MoMh31rEFcaE2/QUeJ+yH7PJ5WsQg=
Subject key identifier: D2:7C:A8:3B:4A:97:09:A9:2B:72:68:F7:70:26:91:13:22:7C:8F:FB
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 35D1
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0nyoO0qXCakrcmj3cCaREyJ8j_s.roa
Signing time: Sun 31 Mar 2024 08:22:12 +0000
ROA not before: Sun 31 Mar 2024 08:22:12 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13777 (0x35d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 31 08:22:12 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D27CA83B4A9709A92B7268F770269113227C8FFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a8:4b:21:1c:f5:a4:0e:74:b2:fd:d0:f2:d2:
c7:67:66:11:6f:89:ea:01:08:91:18:e0:92:03:f9:
03:be:7e:d8:7b:f5:29:56:05:99:59:0b:da:9c:fd:
4f:da:0f:64:c8:b3:8f:70:9d:a8:b9:80:a0:0b:5c:
e6:96:e7:7e:87:16:f3:b9:fa:e7:41:a1:c2:fc:db:
5a:7f:9c:fd:2f:8f:3f:59:39:dc:29:81:7f:ab:d7:
23:d9:60:5e:7f:ca:3a:be:04:bf:d2:58:58:1e:db:
7a:e2:7d:08:f7:fb:c9:96:ce:18:2e:55:ef:e5:84:
8c:1f:e2:26:f2:80:58:43:46:f3:0e:d1:92:01:39:
37:3f:e4:3d:5b:de:b3:2a:83:e2:13:82:00:5a:7e:
45:a7:e1:15:c6:00:e4:25:08:19:c1:92:cb:ff:40:
22:4c:49:ad:17:b4:86:72:0d:9c:f4:ac:5b:9e:52:
27:d0:3a:73:2a:cb:36:10:a1:5e:92:dd:af:7d:2a:
2c:c7:cd:e3:d8:ed:0e:be:5c:8f:27:a1:58:1e:0d:
5b:1d:09:e6:bc:09:2f:ae:e2:4b:96:3d:89:ff:1a:
3d:31:dc:2b:9e:56:3f:11:72:04:e4:ab:b6:2e:b9:
eb:89:0b:14:94:b3:da:b2:ef:ed:8a:a5:c4:84:75:
a1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7C:A8:3B:4A:97:09:A9:2B:72:68:F7:70:26:91:13:22:7C:8F:FB
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0nyoO0qXCakrcmj3cCaREyJ8j_s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
33:5b:fc:2f:de:74:7c:bf:f4:50:0d:41:0c:49:be:61:fc:d0:
6e:ba:5f:7b:0c:f3:3d:c3:d4:35:39:6a:92:e5:56:fc:46:a4:
0d:0e:bf:0c:94:51:cd:41:5b:4a:26:e7:82:cf:ea:4f:a8:11:
60:b3:75:42:2e:63:a5:06:3f:ae:b1:3e:95:b1:19:61:37:33:
dd:d9:45:7d:b3:0c:12:4d:10:ec:fc:89:61:76:b3:f2:3f:46:
cc:cd:58:d7:a9:d8:b0:1c:b2:16:e8:a7:f3:e8:cf:ad:2f:fd:
63:c4:f8:01:86:b9:79:a2:e7:df:c4:b2:72:e9:31:c1:b3:8c:
f9:bd:37:14:4a:0f:68:ce:74:ec:19:78:40:80:74:ed:9b:82:
ab:90:51:53:48:d2:74:c8:ae:bf:ac:ce:84:e7:92:f0:0b:ba:
2e:87:a5:d1:b2:5b:2e:d7:cb:62:e1:0f:4b:30:de:d0:dc:68:
40:d5:e8:4c:3c:6c:d6:55:a1:40:8e:29:71:7f:e0:68:99:72:
b1:62:a1:33:49:1d:f9:c4:62:99:52:c2:21:2a:2a:a3:4c:77:
84:d8:fc:73:5a:59:9f:50:18:45:6d:3d:5a:d5:40:8c:d1:81:
ed:17:bc:31:d6:20:0e:5b:58:bc:f6:61:08:1b:ac:4c:11:6c:
01:61:f8:2f
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICNdEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDAzMzEw
ODIyMTJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEQyN0NBODNCNEE5NzA5
QTkyQjcyNjhGNzcwMjY5MTEzMjI3QzhGRkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0qEshHPWkDnSy/dDy0sdnZhFvieoBCJEY4JID+QO+fth79SlW
BZlZC9qc/U/aD2TIs49wnai5gKALXOaW536HFvO5+udBocL821p/nP0vjz9ZOdwp
gX+r1yPZYF5/yjq+BL/SWFge23rifQj3+8mWzhguVe/lhIwf4ibygFhDRvMO0ZIB
OTc/5D1b3rMqg+ITggBafkWn4RXGAOQlCBnBksv/QCJMSa0XtIZyDZz0rFueUifQ
OnMqyzYQoV6S3a99KizHzePY7Q6+XI8noVgeDVsdCea8CS+u4kuWPYn/Gj0x3Cue
Vj8RcgTkq7YuueuJCxSUs9qy7+2KpcSEdaEfAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQU0nyoO0qXCakrcmj3cCaREyJ8j/swHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzBueW9PMHFYQ2FrcmNt
ajNjQ2FSRXlKOGpfcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBADNb/C/edHy/9FAN
QQxJvmH80G66X3sM8z3D1DU5apLlVvxGpA0OvwyUUc1BW0om54LP6k+oEWCzdUIu
Y6UGP66xPpWxGWE3M93ZRX2zDBJNEOz8iWF2s/I/RszNWNep2LAcshbop/Poz60v
/WPE+AGGuXmi59/EsnLpMcGzjPm9NxRKD2jOdOwZeECAdO2bgquQUVNI0nTIrr+s
zoTnkvALui6HpdGyWy7Xy2LhD0sw3tDcaEDV6Ew8bNZVoUCOKXF/4GiZcrFioTNJ
HfnEYplSwiEqKqNMd4TY/HNaWZ9QGEVtPVrVQIzRge0XvDHWIA5bWLz2YQgbrEwR
bAFh+C8=
-----END CERTIFICATE-----
Generated at Sat May 17 21:27:25 2025 by rpki-client