Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/9Mf9X9QdNduXYkwsiZa-3vBmBJk.roa
File: 9Mf9X9QdNduXYkwsiZa-3vBmBJk.roa (raw, json)
Hash identifier: GKxi0i/1WmaT+9sETPuZPLNVPNLt/Wdh9v0h5pVmdk4=
Subject key identifier: F4:C7:FD:5F:D4:1D:35:DB:97:62:4C:2C:89:96:BE:DE:F0:66:04:99
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3BFF
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9Mf9X9QdNduXYkwsiZa-3vBmBJk.roa
Signing time: Mon 08 Apr 2024 13:52:35 +0000
ROA not before: Mon 08 Apr 2024 13:52:35 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15359 (0x3bff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 8 13:52:35 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F4C7FD5FD41D35DB97624C2C8996BEDEF0660499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:99:c6:7f:51:3f:7a:7a:3c:be:2c:6a:77:23:
bb:e9:84:95:4d:b1:30:fd:2c:53:39:84:34:8c:78:
15:64:96:01:a6:b3:df:d1:50:69:65:45:6a:af:2b:
af:2e:58:2d:a1:b8:04:b9:38:80:70:d2:e7:2e:80:
d8:af:9f:25:ef:20:a0:c4:e7:06:16:f4:d6:15:5c:
ef:17:10:d7:6d:c8:0a:81:52:4b:9f:93:7a:e4:bd:
43:b6:69:9f:29:05:ad:74:20:6c:a7:8b:15:29:24:
8e:4c:4e:ba:19:85:f1:89:fb:0d:e5:0b:e1:86:35:
a0:5b:05:6f:8b:3d:3e:bb:1a:98:b5:93:34:d8:30:
d8:76:52:a9:6b:a1:ea:e6:de:8b:51:19:31:4f:aa:
b5:90:4f:1c:0a:25:b4:1d:4b:02:55:5e:46:ec:06:
52:98:75:28:69:fa:76:0c:57:a8:c7:65:99:51:4f:
a8:1d:bb:0a:a6:1d:ae:c8:29:00:69:04:d5:cc:f3:
1c:d2:7d:6e:7e:c9:a2:20:67:f8:a5:eb:0d:58:a6:
8e:dd:bf:49:62:fc:89:d8:49:66:9c:97:44:11:27:
d6:58:81:6d:30:e6:d8:b4:f2:02:27:ab:b8:bd:e6:
22:53:4a:ad:7f:4c:3a:de:e4:fc:67:27:5c:ed:98:
47:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C7:FD:5F:D4:1D:35:DB:97:62:4C:2C:89:96:BE:DE:F0:66:04:99
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9Mf9X9QdNduXYkwsiZa-3vBmBJk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
59:54:8c:21:86:91:97:be:66:ff:77:c8:0c:84:16:4b:24:70:
a2:39:b9:95:52:b2:cd:5b:b1:f9:16:75:31:e2:b9:65:a4:cf:
13:71:19:69:ea:3b:b0:ba:9f:09:f3:6f:3b:a9:96:2f:a9:0b:
1e:47:de:e5:46:3e:da:7c:35:92:a2:bb:93:48:e3:b3:ff:41:
46:a3:1a:61:61:2e:c8:e1:fc:69:3c:43:24:62:75:5a:69:dc:
59:64:90:97:57:d5:63:26:46:6b:2f:50:fb:0e:93:f7:40:56:
9a:71:63:87:86:ac:0d:3a:5f:7f:6f:36:e3:15:73:a2:82:89:
2b:eb:df:a6:5a:24:3b:ec:fd:06:6f:a6:f0:f6:d8:2a:2d:7a:
4c:4a:51:77:47:dd:92:fe:ff:ec:19:07:07:f9:76:b5:7e:b0:
fa:09:48:e0:d2:db:60:35:05:68:fc:f2:12:98:f9:32:b3:a9:
7c:f9:fe:0f:5d:a3:a4:83:11:6c:99:ed:da:61:47:f9:64:84:
b3:68:5c:a6:8e:11:ef:7a:f5:04:9a:35:25:a4:8c:67:2a:8e:
35:f8:4a:66:69:a4:47:73:d0:7a:01:2f:71:55:8a:0d:dd:5d:
b5:b3:f0:9e:f3:7b:6f:7a:a1:b4:18:38:ab:cc:3c:eb:ec:47:
56:10:27:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:49:49 2025 by rpki-client