Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/9VnMf8wMIMWAg4KCfvNmll_Bxd0.roa
File: 9VnMf8wMIMWAg4KCfvNmll_Bxd0.roa (raw, json)
Hash identifier: 7VZKCpbbew+kxv67gY8jsVqlTP+o3MllZRIjlMJ7PpI=
Subject key identifier: F5:59:CC:7F:CC:0C:20:C5:80:83:82:82:7E:F3:66:96:5F:C1:C5:DD
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4EF7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9VnMf8wMIMWAg4KCfvNmll_Bxd0.roa
Signing time: Fri 03 May 2024 20:53:48 +0000
ROA not before: Fri 03 May 2024 20:53:48 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20215 (0x4ef7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 3 20:53:48 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F559CC7FCC0C20C5808382827EF366965FC1C5DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f2:c2:d2:68:5d:8d:ee:f1:98:cb:f8:2b:4c:
10:37:97:96:f9:c6:c1:58:4a:63:da:97:31:7b:40:
32:dc:de:e9:56:d9:fc:ce:19:5d:b8:08:04:63:0b:
33:c5:9a:80:ea:30:ed:1a:a5:c3:f8:2c:3d:82:91:
5e:4d:91:61:3a:c9:d1:67:b1:14:9f:f1:fd:62:3d:
43:e5:eb:14:61:25:18:0c:08:9d:10:45:09:eb:05:
01:b6:ab:de:5f:03:19:df:dc:52:f3:e4:fe:cc:4e:
ee:35:be:7f:6a:92:f7:24:86:b5:b3:01:93:8c:2f:
79:9d:bb:eb:35:a9:14:f3:4b:f4:fb:92:b4:1d:27:
3f:f1:e6:6f:46:93:41:09:ba:9b:b9:6c:07:ff:40:
46:80:60:c8:22:62:7d:f6:c2:12:5d:7b:c2:e2:4a:
2a:e1:17:64:f5:55:ff:58:7b:a2:0b:d5:de:99:74:
cd:6f:b3:72:60:c7:c5:1f:9b:0a:35:36:04:b1:cd:
5f:e0:a0:9f:5e:a9:a3:e8:8a:ad:23:e3:e3:76:fa:
c2:5e:5d:09:90:31:e2:0d:3a:b6:8d:6c:ef:35:ef:
08:6f:56:3f:88:f0:ec:bb:14:a6:76:34:c2:ec:78:
bb:33:d8:d4:a7:79:4b:d9:81:25:77:60:34:05:48:
52:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:59:CC:7F:CC:0C:20:C5:80:83:82:82:7E:F3:66:96:5F:C1:C5:DD
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9VnMf8wMIMWAg4KCfvNmll_Bxd0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
74:0e:94:a8:6d:8e:ef:b8:e4:84:1a:1d:d4:c1:3a:b9:b3:d2:
88:ac:cb:e3:64:04:62:be:df:2f:6c:2d:0e:8e:fa:d9:c7:93:
55:b9:d6:c1:9a:a9:e2:2b:84:3c:fc:fb:6b:16:24:89:c1:d3:
fd:3b:da:75:ef:7a:f0:ba:d6:9e:c3:cb:0c:54:07:29:87:23:
4a:9a:33:bd:14:c1:ee:73:ed:80:ec:d8:f8:7e:ec:f3:05:1b:
f9:69:6c:c9:0f:c5:a5:c0:4d:ee:af:06:cd:d2:ca:63:62:36:
55:03:6e:df:9d:cb:d2:a6:9f:04:ef:8e:5c:17:b1:35:9b:c6:
bf:58:8f:74:c5:0e:26:ec:a4:76:77:74:f1:c9:24:19:a2:df:
30:d8:0f:46:c6:33:d6:b4:4a:5d:67:9a:f3:72:64:39:fd:fe:
a2:c3:95:14:67:cc:b7:7c:c2:c2:d3:56:a7:f6:e1:41:82:c4:
eb:e6:77:49:04:e1:6f:3c:5f:cf:b0:e4:e3:16:5b:05:6b:cd:
d8:14:1b:40:05:e5:e3:fb:37:0b:cc:53:a6:58:1f:87:0f:b9:
76:22:c1:4c:6a:3a:15:c5:88:14:54:e5:94:03:8c:b0:44:48:
6e:3b:84:c7:e6:57:ab:e7:a2:f5:73:72:8b:cf:54:82:be:16:
49:47:82:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 23:58:38 2025 by rpki-client