Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/0q1Kq_kPUTdCMYpzc4oEQUTaZ3w.roa
File: 0q1Kq_kPUTdCMYpzc4oEQUTaZ3w.roa (raw, json)
Hash identifier: IRZfZZXsICQgloUR7ukr/56i116MtRMdF68HuhCh0DA=
Subject key identifier: D2:AD:4A:AB:F9:0F:51:37:42:31:8A:73:73:8A:04:41:44:DA:67:7C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 48F6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0q1Kq_kPUTdCMYpzc4oEQUTaZ3w.roa
Signing time: Thu 25 Apr 2024 20:53:19 +0000
ROA not before: Thu 25 Apr 2024 20:53:19 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18678 (0x48f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 25 20:53:19 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D2AD4AABF90F513742318A73738A044144DA677C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:69:ac:1d:1a:6e:df:ed:e4:40:ef:f5:fc:8d:
ff:d0:05:76:66:86:df:01:2e:e0:55:98:5d:c0:6c:
6e:f1:1f:22:8f:f8:d9:72:80:ad:83:0f:61:97:fe:
50:11:2b:2d:77:d3:81:58:59:49:bb:93:ac:13:87:
be:87:59:d8:96:09:ea:e4:be:6c:28:a8:ea:a1:84:
bb:bc:be:b9:b5:d3:b0:37:1f:3b:ef:10:e3:8b:11:
3c:8f:55:e4:50:7c:fa:8c:e1:ca:a3:92:e3:14:fa:
a3:52:4b:ce:3c:0d:68:ab:f4:ba:5f:a2:b2:1c:8b:
87:a8:54:b9:9a:5f:02:80:81:70:76:66:73:a8:c9:
07:de:47:ce:b5:e5:b4:26:ec:e3:60:f3:17:b4:91:
23:c2:59:ab:36:1a:c0:ae:57:b4:f2:91:0d:60:23:
86:08:4e:b8:c0:79:6e:3b:05:2f:c6:4e:e3:20:97:
c8:52:f9:7a:a0:26:09:35:d0:65:80:af:a7:a0:33:
32:58:e9:1e:fe:90:49:03:5e:79:6d:b0:95:2d:dc:
b1:eb:0c:04:f1:ad:82:93:ac:5f:86:85:39:37:5e:
f0:48:5f:4c:d8:df:d1:94:5e:6d:f6:37:f9:f8:a7:
de:e0:b4:bf:1f:57:9f:29:eb:1e:33:2d:0e:ba:97:
ea:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AD:4A:AB:F9:0F:51:37:42:31:8A:73:73:8A:04:41:44:DA:67:7C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0q1Kq_kPUTdCMYpzc4oEQUTaZ3w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a3:cc:0e:37:3e:03:a6:a5:19:5e:f4:97:12:0e:8e:66:c5:6d:
af:da:66:cf:93:28:9d:6d:6d:4e:3b:db:49:8e:00:94:4a:ed:
5d:14:b7:44:a2:54:fc:61:94:b2:cf:f2:27:6d:d8:c4:39:01:
5c:f1:69:c3:ae:01:4f:72:89:7e:32:38:47:00:91:36:85:e2:
f6:70:5e:c5:5f:28:45:6c:36:23:78:da:6d:f3:14:75:df:08:
65:cb:b1:f2:00:dd:88:70:f0:66:1b:9c:14:36:c4:24:fb:c5:
db:b1:3f:6d:6d:04:a5:12:ad:5f:d7:29:2c:d7:d9:c5:a7:ca:
35:4e:0b:5f:45:f4:8c:6d:91:c3:1d:db:f7:98:c4:d3:d4:9a:
b9:ae:19:01:8f:de:ea:d3:db:15:1b:f6:11:ee:81:70:25:00:
9e:af:9e:3b:dc:a1:ee:5a:a4:5a:2f:ff:0c:54:f1:ab:bf:6f:
7f:99:dd:16:53:2f:e1:45:f9:44:52:83:ee:0e:a8:c8:19:0d:
bd:18:23:40:35:f2:37:fc:41:3c:8f:b3:c3:ad:f3:6b:e5:6b:
23:0a:83:b3:03:bd:61:6b:0f:bb:70:4d:94:e2:19:42:20:03:
a9:85:ca:0f:2d:0c:7b:62:80:ef:77:c1:d1:9a:1f:3e:bc:92:
58:49:f1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 20:03:18 2025 by rpki-client