Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/8ImpagLHdWTcpWozJsD7JZA0kIk.roa
File: 8ImpagLHdWTcpWozJsD7JZA0kIk.roa (raw, json)
Hash identifier: ih969+ppoJ/YgODuZwmo0tOHhv++L7u1Bl8epVeOLxM=
Subject key identifier: F0:89:A9:6A:02:C7:75:64:DC:A5:6A:33:26:C0:FB:25:90:34:90:89
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 48A5
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8ImpagLHdWTcpWozJsD7JZA0kIk.roa
Signing time: Thu 25 Apr 2024 10:53:18 +0000
ROA not before: Thu 25 Apr 2024 10:53:18 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18597 (0x48a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 25 10:53:18 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F089A96A02C77564DCA56A3326C0FB2590349089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:fc:fe:88:76:31:bd:4e:15:2f:c6:1c:fe:
df:5a:c9:14:e8:34:d1:4a:1b:3f:f3:cc:5f:aa:73:
77:5d:3b:04:a1:12:f0:00:f5:12:a6:03:4b:c8:37:
23:4e:ce:93:0d:f7:6f:60:bb:3d:30:05:69:04:c1:
f6:22:16:cf:41:36:c4:da:76:31:4b:1d:a2:2e:b7:
de:24:03:f4:51:1c:7d:d9:10:16:7f:84:25:b2:d9:
73:74:5c:b2:e0:24:42:06:44:4f:78:e7:44:f8:7e:
7a:39:ce:ca:32:ac:3a:ad:8b:cc:a3:9a:59:5b:fa:
34:f9:53:1a:25:85:9b:c9:26:07:ac:39:f9:c0:64:
c9:ab:84:30:47:93:5f:7e:9d:79:d9:f9:77:cb:a8:
28:14:0e:57:18:73:59:b8:8a:0b:90:29:39:1f:eb:
70:2d:c1:fe:23:3d:35:40:fc:80:5e:14:4b:52:7d:
93:72:07:7c:a3:ed:92:29:4a:6e:15:92:38:a0:fa:
8f:c4:03:e0:4f:88:8d:66:45:33:f5:b9:51:be:06:
73:ca:16:40:7f:ec:71:4f:5a:01:e8:d9:7d:f1:bf:
44:6e:c4:5a:6f:e0:40:fb:ab:c8:7d:ef:8a:04:02:
48:4c:2b:e1:b7:17:c2:b2:fa:c7:63:0c:c3:b6:9a:
ce:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:89:A9:6A:02:C7:75:64:DC:A5:6A:33:26:C0:FB:25:90:34:90:89
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8ImpagLHdWTcpWozJsD7JZA0kIk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
90:1e:68:bb:5e:7e:80:d8:cc:6e:6f:cd:b1:de:47:9c:ba:3c:
fb:ba:3b:f0:b1:cc:63:19:13:b1:1e:92:66:d7:39:67:f6:7d:
03:74:dd:77:e0:65:8b:45:cf:33:ae:f1:8d:ed:94:01:df:0a:
54:0a:e9:fc:2f:9c:5e:55:96:29:4d:d5:ef:a7:2f:78:63:30:
97:90:c9:7d:3c:07:2f:84:0b:11:35:3c:6e:33:2a:26:41:c6:
1d:0f:da:f8:5e:c7:89:12:0e:0a:37:f8:ad:42:9f:8a:f9:17:
15:59:77:00:5d:02:3b:05:fe:4b:61:2f:c4:e2:94:85:44:01:
f8:76:60:df:ad:94:bc:25:81:02:bf:5b:9c:b9:e4:ad:6f:d7:
20:c4:fa:56:b3:61:d1:4b:7d:8a:a2:ad:51:b6:c6:43:a5:4c:
cb:10:4c:bf:d7:28:3b:46:96:b9:fd:ab:72:47:5b:b1:45:72:
2a:17:d3:26:94:44:64:c8:8f:f8:92:04:ea:b6:b3:64:ac:2e:
f9:23:90:62:d3:cc:20:ad:b3:c4:70:8e:11:94:0c:e4:58:eb:
46:94:ac:3e:48:88:fd:1f:98:e3:56:05:e4:10:68:e4:bb:32:
65:ea:2c:39:2b:33:29:d0:b1:31:0c:0f:b2:23:d4:53:c1:c6:
be:76:03:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 23:37:37 2025 by rpki-client