Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/H2FPqb-sa8zMbfi_rehG1FkehQ8.roa
File: H2FPqb-sa8zMbfi_rehG1FkehQ8.roa (raw, json)
Hash identifier: +YFiu2bbBZMsrVdwJ6MFG9eW8DFERgeBhslcNU0dT94=
Subject key identifier: 1F:61:4F:A9:BF:AC:6B:CC:CC:6D:F8:BF:AD:E8:46:D4:59:1E:85:0F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 542D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/H2FPqb-sa8zMbfi_rehG1FkehQ8.roa
Signing time: Fri 10 May 2024 19:54:01 +0000
ROA not before: Fri 10 May 2024 19:54:01 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21549 (0x542d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 10 19:54:01 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1F614FA9BFAC6BCCCC6DF8BFADE846D4591E850F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:81:c7:40:8c:80:f5:1e:14:44:b2:0b:8a:26:
4b:99:26:63:34:d3:f3:ff:05:e9:20:8a:3e:bc:6a:
fb:bc:3f:e6:a3:f7:1b:a9:a9:59:54:eb:90:d9:4e:
23:fa:ae:5d:8d:09:c1:63:5d:c9:71:39:61:58:92:
7d:70:79:88:00:67:5c:e4:69:25:85:fa:06:55:ea:
53:b7:16:fa:0e:75:c4:cf:b4:b0:ef:d1:fa:3c:5c:
9f:05:18:3a:3d:85:63:bf:d3:c9:ce:be:aa:80:74:
4f:e0:f0:46:e0:4e:1e:04:8e:3d:4b:6d:80:ff:a9:
4f:11:87:23:1c:7b:c5:4e:41:d1:56:b5:1e:7b:25:
d2:9f:94:bc:ac:8c:68:21:88:2b:37:ec:05:1a:69:
0b:da:b5:fa:01:08:5d:51:01:2f:91:49:a6:36:ff:
30:99:44:66:cd:b6:fd:27:85:67:6e:23:73:37:90:
11:5a:63:91:b1:2d:ce:62:7b:22:ea:9e:fe:9c:0e:
17:e0:ed:62:77:0d:6f:ae:68:c4:7d:5d:07:e5:92:
3a:8b:3b:3b:50:ad:12:15:5f:54:b9:89:86:64:85:
cb:5b:4e:84:58:8a:82:1d:d7:eb:61:e4:49:70:65:
b2:67:87:4b:4c:af:63:db:ed:68:b5:ed:40:ea:0b:
d2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:61:4F:A9:BF:AC:6B:CC:CC:6D:F8:BF:AD:E8:46:D4:59:1E:85:0F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/H2FPqb-sa8zMbfi_rehG1FkehQ8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
6b:48:9b:e0:78:51:af:6a:40:4f:0e:f3:e0:96:d3:57:39:13:
d2:e0:75:8c:1c:32:60:37:a2:44:f7:be:c4:4b:56:31:42:65:
fc:8f:99:3e:73:b7:bc:e9:e6:d8:1b:a2:9e:25:09:a7:8e:ec:
63:ea:4b:2c:6a:e1:45:91:7e:52:8a:60:18:6f:99:c5:fd:ed:
53:a9:85:d2:04:47:24:4b:00:28:52:47:af:92:ff:96:6a:35:
bb:a3:d0:33:44:a9:de:a6:2c:ed:b4:bb:d1:b6:de:c9:55:83:
71:ee:32:cb:08:ac:72:eb:29:25:e8:0a:9b:89:c2:ad:33:55:
e7:20:b1:9d:44:3b:52:3d:7f:b3:26:7a:2d:bd:3a:30:93:61:
9f:b3:1d:66:1e:86:cc:54:6c:6c:d0:a1:df:56:a5:25:29:19:
d1:da:b3:99:67:56:f5:4e:9b:1c:c9:76:cc:5b:eb:5c:b8:e0:
6e:6f:5c:b5:64:e1:96:bc:0b:20:b9:ed:2f:4b:18:5a:24:da:
3f:d8:16:6a:f6:3b:d6:76:51:94:2c:7d:4d:be:65:33:d5:63:
4a:0e:ee:cf:27:44:6c:05:fc:c3:8a:66:a2:68:9c:e0:d6:2b:
cb:99:33:7c:6a:08:f8:91:eb:e3:c2:f2:83:90:cf:9b:4b:41:
ce:bf:8a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:39:54 2025 by rpki-client