Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/80TdK3XS9DtE9SLhYHlLDAU9S38.roa
File: 80TdK3XS9DtE9SLhYHlLDAU9S38.roa (raw, json)
Hash identifier: B+ssqhMvh4XtFQ3ROrVvsrjZGZgoYkZ6cSt+oCQFrrM=
Subject key identifier: F3:44:DD:2B:75:D2:F4:3B:44:F5:22:E1:60:79:4B:0C:05:3D:4B:7F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5722
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/80TdK3XS9DtE9SLhYHlLDAU9S38.roa
Signing time: Tue 14 May 2024 18:24:09 +0000
ROA not before: Tue 14 May 2024 18:24:09 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22306 (0x5722)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 14 18:24:09 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F344DD2B75D2F43B44F522E160794B0C053D4B7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f8:40:a5:af:31:44:08:e0:08:65:5f:d9:08:
02:3f:e5:bb:7c:95:0e:42:17:20:55:7b:d2:7e:f9:
57:00:fb:58:82:05:f9:4a:15:8c:0e:35:90:36:09:
1c:18:80:75:e0:c9:fa:65:86:f3:2d:64:cd:25:f7:
87:1a:9a:90:11:e2:ce:34:15:c6:a2:92:b4:cd:dd:
d8:05:2d:93:4f:05:2d:ed:bc:8b:c3:38:13:62:5d:
22:4c:c4:cc:cf:67:25:64:39:79:d0:6b:5b:5b:00:
b0:68:51:34:53:3c:bd:73:31:46:ee:16:51:5e:d1:
08:42:de:90:b1:38:27:12:dd:7d:34:71:22:e2:31:
32:12:71:6e:0a:47:54:ee:67:ef:4e:a3:77:81:79:
db:e1:24:28:b5:70:fa:6d:eb:ec:72:d5:d2:a4:16:
16:67:98:d5:df:26:b4:8f:54:4e:b9:2e:f3:55:c7:
ef:f0:bc:2b:e9:9e:64:67:78:8b:52:ce:a7:ee:5a:
b4:a6:58:57:b0:e6:c7:1f:c6:bd:b1:52:a0:15:a6:
fc:56:3b:b0:c3:e6:91:9f:c1:88:8a:c9:58:67:e9:
2f:48:55:e4:e1:94:97:a3:63:eb:ed:e7:5c:5d:30:
ff:0b:d3:37:00:a2:e3:58:66:83:60:22:49:3f:e7:
8e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:44:DD:2B:75:D2:F4:3B:44:F5:22:E1:60:79:4B:0C:05:3D:4B:7F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/80TdK3XS9DtE9SLhYHlLDAU9S38.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
04:05:a5:cf:16:2b:0d:5e:15:9a:01:d6:58:61:68:66:4a:ea:
5b:8e:2a:ec:ab:28:1e:e5:e7:31:29:dd:ec:98:1c:23:3b:bd:
ea:aa:01:d1:75:ca:a7:39:fe:ac:aa:c0:53:44:76:13:a4:d4:
db:d5:c0:cf:2c:3e:93:a2:c3:8e:67:72:98:2e:06:95:8e:6b:
1b:c1:d8:3f:77:ea:b8:4b:c6:07:3c:6c:75:07:6a:fc:6f:42:
c0:fa:a8:91:0a:b2:e9:88:58:3f:68:73:f1:1a:04:42:4c:7c:
7f:d6:0b:74:1c:f7:71:24:54:ef:97:1b:f4:5b:c0:cb:ad:88:
23:27:97:ce:3e:15:d1:27:99:e0:3a:af:c7:85:eb:55:e7:f3:
f5:da:32:f0:c6:80:93:d2:0d:70:79:c0:4d:64:4c:4f:11:98:
c4:7e:ec:4e:de:0a:53:9a:93:93:4f:14:e6:97:a3:68:7a:06:
81:2c:cf:05:30:4e:54:11:93:53:2b:1b:e5:d1:ff:32:01:b6:
58:45:78:60:59:d7:d1:b8:86:f2:39:10:8a:91:98:1d:42:0b:
7d:59:15:52:2b:ba:de:95:47:08:4e:1a:69:06:9c:8a:a2:11:
65:cc:b9:ad:ad:1f:bd:55:87:d5:6a:a8:0a:e9:26:93:c3:d3:
bc:82:0a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:49:50 2025 by rpki-client