Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/6CjIQBXY8QMDPqwwF7MnbIKZq0M.roa
File: 6CjIQBXY8QMDPqwwF7MnbIKZq0M.roa (raw, json)
Hash identifier: Wm7sp6XorUrWqj++iHUIn5EVswA2OcySnZWnvBouwYA=
Subject key identifier: E8:28:C8:40:15:D8:F1:03:03:3E:AC:30:17:B3:27:6C:82:99:AB:43
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5557
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6CjIQBXY8QMDPqwwF7MnbIKZq0M.roa
Signing time: Sun 12 May 2024 08:54:26 +0000
ROA not before: Sun 12 May 2024 08:54:26 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21847 (0x5557)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 12 08:54:26 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E828C84015D8F103033EAC3017B3276C8299AB43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:de:62:63:cb:11:ca:d9:74:5f:29:70:f1:6a:
3a:11:65:22:c1:e8:6b:3a:0c:d9:b2:60:12:9f:62:
31:79:89:d6:f4:08:a3:92:e1:c9:4f:65:3d:f4:68:
1c:e4:5a:6b:01:83:d4:5e:dc:5d:08:6d:82:82:e3:
aa:83:6b:5b:9b:b8:18:43:9d:8b:4a:1d:03:02:e1:
1c:dd:93:0a:e0:2f:95:51:7a:b8:c4:7c:57:26:3b:
12:68:5a:40:b1:4b:39:40:19:41:fc:f0:e8:7c:2e:
f5:57:4c:d2:50:94:42:db:e6:7f:20:16:9f:76:c5:
be:a5:b0:62:cd:76:5d:41:57:68:ae:e4:6f:5c:9b:
20:09:b2:7e:b1:b5:1a:a9:29:6b:20:8a:ea:75:bd:
33:79:64:1e:47:a8:63:07:6b:fe:db:43:4e:4b:4b:
97:ef:ed:23:04:3f:f9:f0:54:62:74:66:a6:c5:fb:
f9:01:7e:98:0a:d3:53:cc:ae:a8:97:6e:e4:43:f1:
6c:47:c0:a2:14:49:96:df:6a:e4:8e:89:8b:72:10:
7d:13:2d:5a:f3:bc:ed:22:16:b3:19:b6:87:17:bc:
3a:9b:aa:b8:64:52:45:f0:07:79:4e:bb:4e:c2:2b:
4c:26:ff:4f:cd:71:0b:62:de:6d:cc:0e:07:30:6f:
38:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:28:C8:40:15:D8:F1:03:03:3E:AC:30:17:B3:27:6C:82:99:AB:43
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6CjIQBXY8QMDPqwwF7MnbIKZq0M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
31:6f:fd:0f:0e:2b:dd:8d:cc:12:ea:0d:60:20:2f:57:89:0d:
c7:4d:bb:cd:bf:c2:51:83:58:5e:fb:ee:3e:aa:ab:3d:26:2b:
d4:1e:e0:39:2c:24:07:7f:1c:b4:c6:85:2c:42:ed:9b:48:57:
1a:08:2e:72:01:b0:82:92:bd:43:9a:2a:92:04:73:88:aa:ec:
be:7b:b3:b0:4d:47:0c:78:91:5f:e7:56:2f:29:5a:14:a5:18:
21:5e:90:a9:0f:cf:cb:d0:6b:7d:4c:82:9a:14:23:05:7c:42:
d7:f8:01:5c:44:66:f2:2d:57:42:5a:de:60:18:33:23:17:4d:
08:5f:b7:0f:49:89:73:b3:28:ab:e9:84:96:ec:f5:31:98:d4:
a4:ea:17:42:7c:9e:a9:5d:1d:65:5f:2b:1e:37:db:99:b9:18:
09:14:bb:06:03:eb:e6:53:e8:0b:27:df:dd:d2:7d:43:96:1c:
be:c8:cf:b9:48:6f:44:8f:08:4e:4a:c6:8a:d3:95:e9:22:11:
ae:26:5e:3c:9a:aa:94:8b:31:62:56:21:b2:65:68:80:1d:7e:
bc:88:2b:91:6b:ec:23:61:f6:a1:ca:f2:7d:09:c1:35:b3:ab:
a0:64:9a:04:f6:f2:d6:0f:1d:32:f2:7c:7e:0e:c8:bf:36:c7:
83:76:45:85
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICVVcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MTIw
ODU0MjZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEU4MjhDODQwMTVEOEYx
MDMwMzNFQUMzMDE3QjMyNzZDODI5OUFCNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCe3mJjyxHK2XRfKXDxajoRZSLB6Gs6DNmyYBKfYjF5idb0CKOS
4clPZT30aBzkWmsBg9Re3F0IbYKC46qDa1ubuBhDnYtKHQMC4RzdkwrgL5VRerjE
fFcmOxJoWkCxSzlAGUH88Oh8LvVXTNJQlELb5n8gFp92xb6lsGLNdl1BV2iu5G9c
myAJsn6xtRqpKWsgiup1vTN5ZB5HqGMHa/7bQ05LS5fv7SMEP/nwVGJ0ZqbF+/kB
fpgK01PMrqiXbuRD8WxHwKIUSZbfauSOiYtyEH0TLVrzvO0iFrMZtocXvDqbqrhk
UkXwB3lOu07CK0wm/0/NcQti3m3MDgcwbzghAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU6CjIQBXY8QMDPqwwF7MnbIKZq0MwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzZDaklRQlhZOFFNRFBx
d3dGN01uYklLWnEwTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBADFv/Q8OK92NzBLqDWAgL1eJDcdNu82/
wlGDWF777j6qqz0mK9Qe4DksJAd/HLTGhSxC7ZtIVxoILnIBsIKSvUOaKpIEc4iq
7L57s7BNRwx4kV/nVi8pWhSlGCFekKkPz8vQa31MgpoUIwV8Qtf4AVxEZvItV0Ja
3mAYMyMXTQhftw9JiXOzKKvphJbs9TGY1KTqF0J8nqldHWVfKx4325m5GAkUuwYD
6+ZT6Asn393SfUOWHL7Iz7lIb0SPCE5KxorTlekiEa4mXjyaqpSLMWJWIbJlaIAd
fryIK5Fr7CNh9qHK8n0JwTWzq6BkmgT28tYPHTLyfH4OyL82x4N2RYU=
-----END CERTIFICATE-----
Generated at Sat May 17 21:30:16 2025 by rpki-client