Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/86UcOhOh9N68GAfLNXpHBDKAbx8.roa
File: 86UcOhOh9N68GAfLNXpHBDKAbx8.roa (raw, json)
Hash identifier: 5OdaDDckyfoe/nEBv169IThqo0UwhFWXVVLueddbEd4=
Subject key identifier: F3:A5:1C:3A:13:A1:F4:DE:BC:18:07:CB:35:7A:47:04:32:80:6F:1F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 37C7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/86UcOhOh9N68GAfLNXpHBDKAbx8.roa
Signing time: Tue 02 Apr 2024 22:52:39 +0000
ROA not before: Tue 02 Apr 2024 22:52:39 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14279 (0x37c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 2 22:52:39 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F3A51C3A13A1F4DEBC1807CB357A470432806F1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:66:2c:ae:e6:99:fb:85:3d:32:57:7a:51:fc:
6f:33:9c:14:4b:6a:39:d2:e2:86:74:fb:b4:08:7b:
22:dc:3a:52:30:23:63:e3:5b:0e:06:b3:5a:8b:63:
f0:de:86:fd:c8:73:11:39:44:1b:bb:e2:66:a2:ef:
60:bb:ce:bb:69:80:99:74:4d:72:cf:69:e4:e5:6e:
f8:49:22:d2:ad:ac:8e:11:6a:d9:1a:e8:03:9d:b4:
fc:37:07:b3:45:bd:53:d0:93:79:9f:3a:af:dc:a4:
ff:c4:59:71:85:42:01:d2:74:6f:ec:41:2f:e5:0d:
63:f8:8b:1f:30:bf:71:13:11:d2:d2:6a:09:e9:2e:
b7:e1:86:79:38:ee:d5:35:92:3d:b3:ae:3a:1c:90:
f9:20:07:a6:2c:7b:d6:a1:81:25:f9:02:a8:61:99:
4e:ec:dd:07:dd:c8:76:c4:7b:b8:1b:de:13:c9:c4:
09:ef:cc:31:4c:45:fa:99:16:5e:89:25:4b:61:7f:
c3:87:38:c9:99:6a:34:69:dc:4f:36:7a:23:b3:bf:
b5:c5:10:41:0c:9d:35:54:de:a9:89:72:49:2b:b8:
c9:c8:a5:dd:f8:ac:58:c6:7b:5e:ab:73:e3:75:96:
8f:ab:8b:54:84:9e:73:70:d4:b2:af:62:07:a8:b4:
d8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A5:1C:3A:13:A1:F4:DE:BC:18:07:CB:35:7A:47:04:32:80:6F:1F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/86UcOhOh9N68GAfLNXpHBDKAbx8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b4:fe:af:8e:81:9b:0e:79:2d:e1:5c:50:31:e5:e6:6d:90:46:
07:fd:a0:d0:27:b8:9a:b6:ba:ac:92:97:d6:8d:49:38:f4:69:
2e:ab:99:a1:95:9a:3e:e3:b2:46:e8:62:5f:81:5b:83:b7:44:
db:4a:51:81:25:0d:28:40:c9:19:51:ec:b1:aa:c0:0e:b2:13:
84:4b:fd:7a:d8:e5:7f:77:5c:72:b3:05:e1:8c:e0:e6:71:76:
2c:dd:fa:8f:c3:59:ae:c2:ca:b0:80:92:dd:65:88:b5:22:e1:
62:db:85:d2:92:ce:5e:80:9b:80:51:13:52:0e:6e:d5:9c:41:
3b:a7:93:0a:8d:48:f8:d8:be:fd:9a:3f:92:5e:37:b8:21:68:
f6:94:5f:11:e0:4e:fe:f2:d4:22:77:e5:01:ce:7f:9f:f3:12:
7d:05:11:8f:7b:a4:59:6a:99:b7:2e:37:9f:af:c9:65:f6:54:
fd:08:78:8e:9a:4e:3b:b6:87:2f:42:da:b9:96:0f:7d:3a:6c:
59:c6:a5:87:70:df:8c:a9:8c:2e:1a:ed:bd:af:3f:1c:9e:1c:
21:ba:f9:4c:59:9c:35:5a:da:9b:fa:18:57:3a:0a:6a:aa:25:
5c:bb:e3:25:dc:ed:83:2a:a8:e1:f5:e5:e3:b4:d8:ae:76:13:
55:c3:df:93
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICN8cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDIy
MjUyMzlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEYzQTUxQzNBMTNBMUY0
REVCQzE4MDdDQjM1N0E0NzA0MzI4MDZGMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDmZiyu5pn7hT0yV3pR/G8znBRLajnS4oZ0+7QIeyLcOlIwI2Pj
Ww4Gs1qLY/Dehv3IcxE5RBu74mai72C7zrtpgJl0TXLPaeTlbvhJItKtrI4Ratka
6AOdtPw3B7NFvVPQk3mfOq/cpP/EWXGFQgHSdG/sQS/lDWP4ix8wv3ETEdLSagnp
Lrfhhnk47tU1kj2zrjockPkgB6Yse9ahgSX5AqhhmU7s3QfdyHbEe7gb3hPJxAnv
zDFMRfqZFl6JJUthf8OHOMmZajRp3E82eiOzv7XFEEEMnTVU3qmJckkruMnIpd34
rFjGe16rc+N1lo+ri1SEnnNw1LKvYgeotNglAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU86UcOhOh9N68GAfLNXpHBDKAbx8wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3Lzg2VWNPaE9oOU42OEdB
ZkxOWHBIQkRLQWJ4OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBALT+r46Bmw55LeFcUDHl5m2QRgf9oNAn
uJq2uqySl9aNSTj0aS6rmaGVmj7jskboYl+BW4O3RNtKUYElDShAyRlR7LGqwA6y
E4RL/XrY5X93XHKzBeGM4OZxdizd+o/DWa7CyrCAkt1liLUi4WLbhdKSzl6Am4BR
E1IObtWcQTunkwqNSPjYvv2aP5JeN7ghaPaUXxHgTv7y1CJ35QHOf5/zEn0FEY97
pFlqmbcuN5+vyWX2VP0IeI6aTju2hy9C2rmWD306bFnGpYdw34ypjC4a7b2vPxye
HCG6+UxZnDVa2pv6GFc6CmqqJVy74yXc7YMqqOH15eO02K52E1XD35M=
-----END CERTIFICATE-----
Generated at Sat May 17 23:54:14 2025 by rpki-client