Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/9czssNmlpE_7tHJ7DLRypw6Pygc.roa
File: 9czssNmlpE_7tHJ7DLRypw6Pygc.roa (raw, json)
Hash identifier: mQ2twhYDMFo/okNT5QSetoVVU2ypY3f+J40HFLA+/T0=
Subject key identifier: F5:CC:EC:B0:D9:A5:A4:4F:FB:B4:72:7B:0C:B4:72:A7:0E:8F:CA:07
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 53AB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9czssNmlpE_7tHJ7DLRypw6Pygc.roa
Signing time: Fri 10 May 2024 03:24:01 +0000
ROA not before: Fri 10 May 2024 03:24:01 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21419 (0x53ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 10 03:24:01 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F5CCECB0D9A5A44FFBB4727B0CB472A70E8FCA07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f8:e6:25:2e:e0:8b:01:c7:82:f7:35:e7:e9:
a2:36:1a:1a:a8:a4:bf:71:db:81:e4:f7:c0:a9:af:
39:b4:80:99:23:3b:5b:e5:e4:f8:71:5c:16:9b:10:
f4:b9:c9:65:e8:41:40:d1:d7:3a:77:ce:07:71:b2:
42:ca:5d:a2:26:7d:6f:c6:03:4f:54:c2:4d:9d:c6:
cc:d0:fc:4f:3b:60:a6:c5:ef:4b:32:ee:75:67:fe:
36:af:76:7a:76:1b:77:d8:8c:56:ed:40:6a:90:b2:
bc:81:3d:9c:b4:4a:c5:a8:7a:09:bc:97:a6:50:b1:
05:83:af:bf:9b:b8:40:af:85:39:6e:cb:45:a2:db:
35:e9:a5:3c:e6:9f:5f:07:f5:f1:d0:33:98:43:be:
fd:94:7b:d9:f1:86:f7:24:27:68:ab:eb:e3:4c:3a:
99:6a:a8:53:39:f2:f4:7b:0a:43:5e:3b:d2:85:57:
84:54:b6:d1:be:c9:12:e4:25:4f:78:f1:3f:66:94:
02:b2:70:b9:88:35:91:07:37:af:7d:cb:f7:f8:d0:
06:02:82:a4:21:2a:ba:1a:07:68:7d:75:4b:fe:c2:
3b:1b:8b:2e:89:3a:57:20:08:52:74:f0:ed:e6:84:
b3:fd:2e:b1:04:ec:55:64:0e:96:81:66:f0:fe:a3:
38:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CC:EC:B0:D9:A5:A4:4F:FB:B4:72:7B:0C:B4:72:A7:0E:8F:CA:07
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9czssNmlpE_7tHJ7DLRypw6Pygc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
00:50:56:5a:73:e0:bc:26:4b:1f:93:84:ad:75:20:95:15:f0:
ff:70:98:a7:ce:6f:ef:5a:5c:f0:de:1f:72:fc:22:71:37:ac:
94:2e:9e:34:88:cb:54:6f:dc:6f:94:09:14:fc:bd:08:02:fa:
7b:ca:a5:ea:43:85:ce:a1:57:d3:1c:cc:ba:0b:c6:b0:94:2b:
1b:9a:e2:a5:52:69:45:1e:8e:dd:35:98:b1:40:c4:22:9b:fb:
2b:8d:63:36:ba:5c:28:cc:e0:88:b8:dd:f5:e4:06:a3:82:4a:
73:ad:92:99:d3:c9:2c:46:5b:80:ce:8e:e8:d0:7f:d1:aa:e2:
43:1e:80:7c:22:ce:80:c7:b4:63:d4:b1:ea:94:e9:39:86:a9:
ea:4d:29:f4:30:ec:d6:f0:c2:ed:87:14:3b:47:cf:f1:a7:58:
76:e1:e3:23:41:38:a9:ff:e8:29:04:74:86:b0:bf:e8:e2:d6:
14:93:2d:ea:a6:2f:3d:02:7d:86:b2:9d:60:09:b2:3b:85:70:
44:86:e1:51:42:fa:78:58:1f:a9:8c:7e:40:15:42:ae:35:15:
9e:23:46:f1:be:96:e0:18:3b:f4:f8:32:67:14:d1:10:3a:2e:
4c:a3:bd:49:31:0b:48:61:45:76:cb:5a:dc:6a:6d:32:4f:20:
23:0c:fe:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 21:31:33 2025 by rpki-client