Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ElH7WE0ZHL7CcHKDFdvAZsSnvMw.roa
File: ElH7WE0ZHL7CcHKDFdvAZsSnvMw.roa (raw, json)
Hash identifier: msNQvCX7KIvp6oNEldm3p3EQJrNsuFdqZjaObyEQzHg=
Subject key identifier: 12:51:FB:58:4D:19:1C:BE:C2:70:72:83:15:DB:C0:66:C4:A7:BC:CC
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 403D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ElH7WE0ZHL7CcHKDFdvAZsSnvMw.roa
Signing time: Sun 14 Apr 2024 05:52:53 +0000
ROA not before: Sun 14 Apr 2024 05:52:53 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16445 (0x403d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 14 05:52:53 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1251FB584D191CBEC270728315DBC066C4A7BCCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:15:01:68:b6:a2:90:fe:b9:46:13:0f:bf:87:
b8:85:fc:94:bd:0f:a1:48:a4:24:61:3c:17:4e:e9:
0e:3b:a0:ed:a2:39:ba:77:bf:aa:dd:b4:6f:70:0c:
22:d1:ad:63:81:74:05:54:4a:23:cd:20:e3:98:db:
50:a8:f1:6d:03:65:d2:38:e7:ae:68:3f:aa:ff:21:
2a:f8:8c:d3:40:4f:9c:f0:0b:ad:d6:8e:b5:2b:1f:
3a:ab:f6:34:35:2b:cc:b3:a5:8f:8b:c8:24:1e:85:
c4:bc:83:55:e8:15:0f:d9:7a:53:6b:a3:29:1a:90:
7e:af:8b:33:d0:59:35:cc:15:95:a7:5f:44:77:f7:
4f:ac:63:c9:8b:93:66:5e:0e:d7:f2:f9:43:1b:91:
82:7c:c0:39:6c:26:f5:7c:de:cb:ad:d9:46:3a:36:
78:dd:49:98:d6:bb:36:91:27:7a:60:c4:ec:a1:89:
33:fc:42:64:62:93:56:9f:07:dd:d6:25:78:01:2c:
77:23:af:2b:52:64:5f:5c:75:3d:fb:eb:66:47:e3:
8f:5c:4d:f6:f6:9c:74:07:c2:32:e6:b1:08:21:58:
b2:ba:a9:58:e0:76:e7:85:58:f6:b5:96:70:72:2d:
c0:d2:ab:53:4a:5a:8b:86:38:4c:7c:47:13:72:fe:
2d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:51:FB:58:4D:19:1C:BE:C2:70:72:83:15:DB:C0:66:C4:A7:BC:CC
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ElH7WE0ZHL7CcHKDFdvAZsSnvMw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
b3:f2:f1:0b:9b:60:25:ee:f5:fd:f5:90:da:b0:f6:21:e1:e0:
66:62:f6:9e:de:0d:75:29:e9:d7:60:a4:ae:53:e1:6e:d1:fc:
68:73:5a:81:df:3f:87:cc:5b:94:0d:27:00:24:c4:13:4e:a7:
28:e7:a3:b8:32:bb:12:d9:09:03:be:ad:9f:97:57:0a:46:09:
80:36:ab:94:81:86:0a:ec:ee:bc:6b:07:73:30:12:cf:f6:5c:
09:5a:18:ce:af:11:e9:9a:cd:24:ce:c1:80:53:79:41:fd:48:
f0:1b:f4:7c:2e:f6:29:52:f4:9a:28:a1:f5:c6:7a:17:55:0c:
00:5b:e0:51:f2:2b:9c:0b:80:d7:96:79:4f:d8:f0:e9:73:f7:
ad:fd:1d:b8:8a:ed:8d:63:1d:b3:52:65:59:08:81:ce:3e:0e:
5a:15:36:6f:ba:22:7d:62:cb:e0:22:76:67:63:56:62:96:64:
49:f1:d2:bf:b8:3d:c6:7f:08:4e:9a:e1:c9:09:90:a7:83:4f:
05:aa:99:a3:83:e5:9b:d6:d2:74:59:f4:a7:5f:03:64:81:ee:
85:ef:79:00:ed:4a:92:ad:ec:3c:9d:31:fe:2a:78:f6:00:57:
a7:93:56:1a:6d:2a:41:8a:92:26:9f:6a:d7:ea:01:15:b3:dc:
a7:a6:ef:ba
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICQD0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTQw
NTUyNTNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDEyNTFGQjU4NEQxOTFD
QkVDMjcwNzI4MzE1REJDMDY2QzRBN0JDQ0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/FQFotqKQ/rlGEw+/h7iF/JS9D6FIpCRhPBdO6Q47oO2iObp3
v6rdtG9wDCLRrWOBdAVUSiPNIOOY21Co8W0DZdI4565oP6r/ISr4jNNAT5zwC63W
jrUrHzqr9jQ1K8yzpY+LyCQehcS8g1XoFQ/ZelNroykakH6vizPQWTXMFZWnX0R3
90+sY8mLk2ZeDtfy+UMbkYJ8wDlsJvV83sut2UY6NnjdSZjWuzaRJ3pgxOyhiTP8
QmRik1afB93WJXgBLHcjrytSZF9cdT3762ZH449cTfb2nHQHwjLmsQghWLK6qVjg
dueFWPa1lnByLcDSq1NKWouGOEx8RxNy/i0tAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUElH7WE0ZHL7CcHKDFdvAZsSnvMwwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0VsSDdXRTBaSEw3Q2NI
S0RGZHZBWnNTbnZNdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBALPy8QubYCXu9f31
kNqw9iHh4GZi9p7eDXUp6ddgpK5T4W7R/GhzWoHfP4fMW5QNJwAkxBNOpyjno7gy
uxLZCQO+rZ+XVwpGCYA2q5SBhgrs7rxrB3MwEs/2XAlaGM6vEemazSTOwYBTeUH9
SPAb9Hwu9ilS9JooofXGehdVDABb4FHyK5wLgNeWeU/Y8Olz9639HbiK7Y1jHbNS
ZVkIgc4+DloVNm+6In1iy+AidmdjVmKWZEnx0r+4PcZ/CE6a4ckJkKeDTwWqmaOD
5ZvW0nRZ9KdfA2SB7oXveQDtSpKt7DydMf4qePYAV6eTVhptKkGKkiafatfqARWz
3Kem77o=
-----END CERTIFICATE-----
Generated at Sun May 18 01:58:34 2025 by rpki-client