Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/5DWjvUKyXJIdOdaPTZzrOBQDjB4.roa
File: 5DWjvUKyXJIdOdaPTZzrOBQDjB4.roa (raw, json)
Hash identifier: g0qPGBAWCwvC7O/PBEtjbF9I3WOQD/TRowATIQ1M8MI=
Subject key identifier: E4:35:A3:BD:42:B2:5C:92:1D:39:D6:8F:4D:9C:EB:38:14:03:8C:1E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4433
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/5DWjvUKyXJIdOdaPTZzrOBQDjB4.roa
Signing time: Fri 19 Apr 2024 12:23:00 +0000
ROA not before: Fri 19 Apr 2024 12:23:00 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17459 (0x4433)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 19 12:23:00 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E435A3BD42B25C921D39D68F4D9CEB3814038C1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b9:45:6e:1e:ac:7e:0e:7b:28:aa:2f:67:62:
26:e6:f6:a6:8c:a2:36:20:c5:ca:0f:75:43:03:40:
e7:76:65:19:3b:1e:d2:d4:23:31:23:c6:41:b9:62:
14:ef:cb:9d:c3:37:3c:7f:5c:0e:e1:37:18:ef:19:
92:a7:f9:4f:44:9c:74:eb:b6:37:64:37:2c:31:71:
a3:85:b3:0d:eb:b7:67:7a:b5:48:9e:3c:7f:57:3f:
1e:ca:63:f6:4e:c4:7c:12:88:e3:4f:8b:87:d5:49:
be:ae:f0:bb:c6:be:d7:e9:6e:53:70:35:8f:26:01:
30:cf:52:08:1a:04:2e:b5:c6:16:95:08:c9:46:d7:
e2:bf:c1:76:98:ea:7a:fb:02:81:bd:49:38:f9:f1:
35:08:a8:a4:c0:e4:f0:c7:c5:e5:e9:d2:d9:17:e0:
09:8a:05:10:d3:11:71:32:b4:c9:3f:08:49:90:bf:
c6:a4:e6:e7:31:4a:e3:bd:8b:1a:70:d5:31:c8:03:
11:b7:3b:fd:fb:a1:3e:a7:2a:19:ac:96:2b:bb:38:
b7:b3:ce:92:3c:2e:f3:25:bc:bf:02:38:83:d5:80:
2e:31:1d:a8:aa:40:06:8f:38:af:9b:8d:b7:26:cd:
d6:e5:1f:75:b6:98:07:e1:66:e9:dc:09:5e:60:ab:
a5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:35:A3:BD:42:B2:5C:92:1D:39:D6:8F:4D:9C:EB:38:14:03:8C:1E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/5DWjvUKyXJIdOdaPTZzrOBQDjB4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a0:7c:f2:76:4b:9e:51:32:05:3f:76:d3:f8:79:b6:aa:50:1d:
1d:35:88:9d:39:4c:f8:46:a8:6b:ca:5a:5e:3c:fc:48:90:8b:
1e:c0:21:03:cb:a8:ff:b8:6a:5a:2f:5f:87:57:bc:84:62:65:
85:af:c8:5e:45:85:05:c8:65:ac:9e:9f:13:31:63:80:cb:e7:
5c:15:37:12:05:cb:72:a0:07:3f:7f:d5:b4:2f:ee:03:e8:95:
ce:7a:9e:44:49:2f:12:5c:7a:4a:ae:89:c5:93:38:4a:2c:b6:
a3:20:f3:7f:49:c6:a3:89:4e:b7:74:24:47:51:09:0d:b6:f0:
3a:87:7f:4a:9d:b9:d0:d9:ff:8d:b2:d1:30:da:58:97:28:c1:
6a:c1:f6:6f:92:b5:44:8f:b5:a2:44:9d:1a:b3:fb:39:d2:52:
f1:0d:7a:f9:c6:20:d7:29:ac:42:a8:1a:26:9d:ce:a6:ca:3a:
30:e8:81:0f:67:08:9d:b1:bf:2d:0e:01:a1:07:b2:00:76:d0:
fa:6a:11:27:66:9f:69:9c:a3:57:fa:28:8a:46:60:ad:a0:2c:
54:43:ae:53:82:af:5e:27:c7:60:dc:25:df:79:60:bd:7f:74:
e6:40:d9:32:81:c2:83:14:a2:d7:04:c1:3d:08:b1:cb:56:db:
97:fb:81:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 21:27:22 2025 by rpki-client