Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/6aXiAQNVv9j5dY2EgCeS-6aMKf4.roa
File: 6aXiAQNVv9j5dY2EgCeS-6aMKf4.roa (raw, json)
Hash identifier: rGssYO5tWGcdBBOseZ1zBBltZb7ouuz9OpoWrfRQ+W8=
Subject key identifier: E9:A5:E2:01:03:55:BF:D8:F9:75:8D:84:80:27:92:FB:A6:8C:29:FE
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3522
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6aXiAQNVv9j5dY2EgCeS-6aMKf4.roa
Signing time: Sat 30 Mar 2024 10:22:14 +0000
ROA not before: Sat 30 Mar 2024 10:22:14 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13602 (0x3522)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 30 10:22:14 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E9A5E2010355BFD8F9758D84802792FBA68C29FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e7:18:2d:2e:31:3e:76:a0:13:e5:f7:a0:16:
d4:97:1b:c5:0c:98:e3:fc:1f:cd:a3:35:69:ef:b4:
f6:8a:94:c6:cd:28:26:e0:4f:11:bd:70:4c:c5:f0:
9b:94:cb:3a:03:8b:cc:43:62:05:c2:36:25:92:64:
06:5c:87:d3:b6:a6:aa:fd:73:c4:26:db:7a:49:2f:
b2:10:78:74:c4:c5:63:9a:56:e4:29:f8:09:a6:61:
4f:80:6a:07:92:7f:da:a2:f7:e5:4b:94:1f:ad:41:
2c:ea:f4:b2:19:f7:c3:bb:83:21:6a:1c:80:78:b5:
15:d5:4d:41:1f:e1:d8:d3:4f:00:c1:bc:db:66:d4:
e4:44:06:db:4e:59:b3:91:59:d6:19:ee:fe:31:ba:
46:e4:f5:a4:d2:5e:3a:ca:9a:09:3f:9e:6c:8b:82:
33:23:ec:35:f2:d6:21:10:b7:62:c6:eb:10:50:d1:
01:a0:8d:fb:89:e0:76:98:97:ad:92:1c:41:55:e1:
d9:d6:ea:6c:38:cf:42:cb:54:ab:3a:75:6b:d0:fd:
ad:58:42:f7:65:70:1c:b9:35:56:5f:d6:f7:32:d1:
9b:9a:b8:a0:85:eb:de:76:fa:c2:46:4b:1a:55:f2:
05:1b:44:ae:14:6b:62:e8:2b:53:5d:04:51:21:e4:
ca:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A5:E2:01:03:55:BF:D8:F9:75:8D:84:80:27:92:FB:A6:8C:29:FE
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6aXiAQNVv9j5dY2EgCeS-6aMKf4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9c:cc:53:16:2f:3d:25:33:9c:a4:1a:94:02:0a:56:af:66:ee:
c1:5d:b4:e7:82:33:df:a8:ee:0d:1d:cb:e7:cf:5d:45:b7:b6:
b0:3a:e2:3f:2a:5c:39:4a:c6:91:d4:85:4b:c8:a2:48:59:f2:
a0:58:5a:b0:ee:c7:b8:fa:49:af:9d:da:df:71:5b:ab:b3:d3:
1e:72:74:5d:5c:ec:0c:89:d0:81:bd:4c:67:b2:13:5f:a7:2a:
1c:bb:0d:4b:ad:1d:78:71:1c:cc:c2:32:4a:f5:47:a6:3b:9f:
d2:2c:dc:e2:f9:14:c6:4d:1c:02:fc:6f:60:47:0a:26:ca:3e:
cb:cd:16:51:fb:92:4e:a0:10:14:c0:21:a1:7e:a2:e8:a4:5d:
dd:b2:69:ac:cd:97:58:f8:96:5d:7c:f8:44:fa:6a:df:16:89:
ee:ae:86:57:60:76:bc:d5:ac:30:30:3b:4e:69:0c:53:cd:e8:
05:81:7b:c0:2e:26:d9:de:2d:b2:c5:03:e0:0c:3f:f9:1e:ed:
60:80:e0:94:c3:da:78:be:28:c6:ab:de:15:52:03:19:3b:ce:
ac:60:d0:00:47:39:2a:ae:ac:4a:23:79:a0:67:6d:48:7d:45:
eb:8f:b9:ae:c2:3c:93:eb:3f:ba:6e:a8:4a:7a:2c:fb:34:8a:
01:a5:65:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 23:59:41 2025 by rpki-client