Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/6fLGgWlzGRPWqRRy-M35FroTP_0.roa
File: 6fLGgWlzGRPWqRRy-M35FroTP_0.roa (raw, json)
Hash identifier: buWz+GzTMeT7RlrQWwLsL2eE9qynDVqOusXa2Ab6eKI=
Subject key identifier: E9:F2:C6:81:69:73:19:13:D6:A9:14:72:F8:CD:F9:16:BA:13:3F:FD
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 40C3
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6fLGgWlzGRPWqRRy-M35FroTP_0.roa
Signing time: Sun 14 Apr 2024 22:22:52 +0000
ROA not before: Sun 14 Apr 2024 22:22:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16579 (0x40c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 14 22:22:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E9F2C68169731913D6A91472F8CDF916BA133FFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:96:31:97:39:7b:4c:4c:2b:70:30:18:b5:a1:
37:db:f8:e3:39:81:b6:4a:1f:52:d2:3f:15:33:8a:
3d:fe:6e:1f:1c:fb:7c:c0:b8:cd:aa:ed:61:53:19:
da:9c:19:c5:bc:a6:f9:21:42:98:96:5c:ec:77:c7:
1a:9f:6f:8b:de:b5:49:cd:7d:59:08:78:e0:77:2d:
71:cc:e3:43:ef:3e:b5:79:ed:4d:55:5f:cb:5b:7a:
72:e8:c9:be:7a:bb:62:f6:e3:b1:26:4b:96:76:c9:
97:bc:57:3c:9f:7b:10:24:b8:34:9b:58:76:d5:8d:
7d:7d:88:ec:35:3e:35:e3:39:91:7f:9b:89:36:49:
e6:48:94:4c:af:db:99:08:a4:55:5f:f9:c3:a6:1f:
89:43:0f:70:77:17:93:21:cc:84:88:dc:92:2f:da:
aa:62:18:fd:b4:03:3a:db:ca:ec:a4:4d:46:b3:49:
9f:67:80:96:7e:fd:1f:34:88:58:95:e2:5f:19:70:
de:f5:b0:6b:e2:d9:13:d9:a4:da:3b:cb:05:4e:7b:
77:34:18:e1:c6:32:dc:1e:e1:a9:8d:14:e5:91:c4:
eb:9e:9d:25:19:c9:19:17:92:70:52:5f:55:ec:f8:
5e:a0:05:a6:31:69:d4:cc:15:8f:a4:fe:02:ce:fb:
01:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F2:C6:81:69:73:19:13:D6:A9:14:72:F8:CD:F9:16:BA:13:3F:FD
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6fLGgWlzGRPWqRRy-M35FroTP_0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
18:b4:c9:f9:64:07:77:e5:1d:12:64:38:e6:b9:17:f9:07:44:
54:3e:02:1b:72:be:e7:cb:23:ff:7d:54:2b:b8:64:db:b9:a8:
7b:a3:99:5e:4b:17:7d:ae:8d:ac:18:d9:8d:b8:16:3b:58:2d:
ad:31:a7:df:58:4f:00:6d:4c:5d:e9:a0:fd:04:6b:6b:eb:64:
0a:c6:6b:26:d2:74:2e:f3:ec:e5:2e:00:50:c7:ab:ba:27:bd:
f4:fc:cf:48:6d:69:5b:28:8d:e9:47:f3:75:76:0e:00:40:0f:
b4:47:46:ff:85:85:48:8a:e4:62:13:f2:23:a2:14:e5:ff:98:
3a:fa:9a:c6:5f:d6:12:45:50:1b:df:65:f6:a3:ba:28:45:e8:
6d:fc:2f:81:fc:82:fe:26:2a:97:a1:bd:e5:fa:22:6c:d7:3c:
32:02:05:2d:45:fc:8f:86:3b:1e:f6:3e:c6:b2:9f:4a:f2:fa:
77:c6:09:e1:c1:8a:db:c2:51:df:0f:a4:54:49:18:85:b2:41:
66:94:4b:79:b7:42:f6:f9:69:38:63:16:cb:9b:90:90:cf:ad:
fa:95:b7:4a:2a:18:ed:17:fa:b8:70:6b:72:f7:56:ac:34:ac:
b3:94:64:61:54:23:80:d6:9e:be:52:20:13:47:0a:2c:06:d6:
8a:cb:e1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:55:02 2025 by rpki-client