Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/FHsRu14JaCAnrNZ4mSRPqV3c-o4.roa
File: FHsRu14JaCAnrNZ4mSRPqV3c-o4.roa (raw, json)
Hash identifier: IVVHHSELUxUyMCnmvxCQBvX3Hk+cJ8gu+s28mw8qBSE=
Subject key identifier: 14:7B:11:BB:5E:09:68:20:27:AC:D6:78:99:24:4F:A9:5D:DC:FA:8E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4AF2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/FHsRu14JaCAnrNZ4mSRPqV3c-o4.roa
Signing time: Sun 28 Apr 2024 12:23:35 +0000
ROA not before: Sun 28 Apr 2024 12:23:35 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19186 (0x4af2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 28 12:23:35 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=147B11BB5E09682027ACD67899244FA95DDCFA8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f5:5e:d6:5b:79:de:6c:20:55:04:08:3d:14:
cb:19:80:1d:ec:e8:0b:74:3f:bb:53:b2:ce:5a:af:
4b:18:6b:fa:f8:8f:15:2e:12:93:29:67:c8:b5:0b:
09:cf:0c:1b:10:7a:55:5c:10:f5:b8:01:7c:fb:8d:
16:d0:08:9c:a0:7e:d3:69:ff:f3:86:d5:fb:6d:76:
25:8d:33:5b:d9:0b:8d:48:61:de:0c:99:2f:f8:5a:
b4:b1:80:c6:f6:54:b1:c2:92:ea:55:98:c1:99:63:
69:ac:32:c2:77:76:a3:df:b6:74:e8:d6:a2:2a:09:
10:de:35:6f:e4:b0:98:97:19:3c:fc:71:c7:40:f3:
90:1a:fc:fb:f5:a7:a2:6b:02:3e:b2:1c:a5:05:d0:
20:4c:29:a1:3c:1f:8d:22:56:5e:08:34:59:9f:c1:
42:1d:f8:62:ff:62:7e:74:61:1e:67:4d:e1:ff:90:
6d:68:b5:c5:69:66:d6:ec:65:00:48:75:f3:ee:43:
13:49:40:68:b0:51:64:ea:8b:1c:28:4a:42:42:4c:
56:ef:03:f9:b0:f1:8b:1e:55:7d:6e:42:48:a9:80:
30:45:a1:a4:55:f8:47:fd:3a:b5:87:fc:8e:5c:61:
cc:6f:78:48:4a:1d:e1:e7:7a:66:43:9b:ce:31:51:
94:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7B:11:BB:5E:09:68:20:27:AC:D6:78:99:24:4F:A9:5D:DC:FA:8E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/FHsRu14JaCAnrNZ4mSRPqV3c-o4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
88:ea:1a:26:bc:75:bb:ac:fc:4c:c7:d0:a6:a2:d0:08:15:23:
e6:0e:65:11:fb:5d:36:58:0c:d1:a4:b0:19:c0:db:fe:18:2e:
69:4c:63:3f:47:0f:3e:74:38:3a:76:65:2a:4e:a3:83:e0:fe:
7b:4e:b5:d3:d1:ac:cb:1b:bc:6d:9e:fb:cb:a0:0e:f5:9a:f6:
da:dc:35:31:ff:5f:a3:df:aa:73:d6:43:82:e7:0b:e8:d0:67:
93:6b:96:8e:81:2d:74:b3:4f:c4:2c:86:a2:bc:76:a9:15:80:
bb:29:d7:31:bb:06:e3:3e:1f:f3:89:4e:c1:e2:c1:04:0c:48:
fa:74:52:00:be:6a:77:09:45:b5:56:a1:50:fa:87:03:08:55:
bd:7e:29:0c:13:71:ae:0d:c7:c1:5e:4b:cf:88:f3:fe:c1:07:
5e:44:c6:40:cb:5e:c9:3e:dd:a3:fa:4a:69:fe:99:43:80:c1:
c6:9e:11:6b:c9:de:99:60:05:1b:91:c5:a1:f4:49:b3:13:50:
25:ce:55:ae:3d:da:5a:1a:c6:a4:c7:00:d2:7e:be:7b:81:e6:
0d:37:36:f1:0d:1e:d6:6e:2c:e9:8f:b0:df:12:ee:58:40:90:
d8:54:5c:f8:81:a6:0f:9d:33:f7:52:ee:71:4b:ed:92:24:ee:
d4:ec:e4:a1
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICSvIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0Mjgx
MjIzMzVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDE0N0IxMUJCNUUwOTY4
MjAyN0FDRDY3ODk5MjQ0RkE5NUREQ0ZBOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDD9V7WW3nebCBVBAg9FMsZgB3s6At0P7tTss5ar0sYa/r4jxUu
EpMpZ8i1CwnPDBsQelVcEPW4AXz7jRbQCJygftNp//OG1fttdiWNM1vZC41IYd4M
mS/4WrSxgMb2VLHCkupVmMGZY2msMsJ3dqPftnTo1qIqCRDeNW/ksJiXGTz8ccdA
85Aa/Pv1p6JrAj6yHKUF0CBMKaE8H40iVl4INFmfwUId+GL/Yn50YR5nTeH/kG1o
tcVpZtbsZQBIdfPuQxNJQGiwUWTqixwoSkJCTFbvA/mw8YseVX1uQkipgDBFoaRV
+Ef9OrWH/I5cYcxveEhKHeHnemZDm84xUZQ5AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUFHsRu14JaCAnrNZ4mSRPqV3c+o4wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0ZIc1J1MTRKYUNBbnJO
WjRtU1JQcVYzYy1vNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAiOoaJrx1u6z8TMfQpqLQCBUj5g5lEftd
NlgM0aSwGcDb/hguaUxjP0cPPnQ4OnZlKk6jg+D+e06109Gsyxu8bZ77y6AO9Zr2
2tw1Mf9fo9+qc9ZDgucL6NBnk2uWjoEtdLNPxCyGorx2qRWAuynXMbsG4z4f84lO
weLBBAxI+nRSAL5qdwlFtVahUPqHAwhVvX4pDBNxrg3HwV5Lz4jz/sEHXkTGQMte
yT7do/pKaf6ZQ4DBxp4Ra8nemWAFG5HFofRJsxNQJc5Vrj3aWhrGpMcA0n6+e4Hm
DTc28Q0e1m4s6Y+w3xLuWECQ2FRc+IGmD50z91LucUvtkiTu1OzkoQ==
-----END CERTIFICATE-----
Generated at Sat May 17 22:46:37 2025 by rpki-client