Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/IJ3p7ZwR6ahmNetsNzmIi2KpHdc.roa
File: IJ3p7ZwR6ahmNetsNzmIi2KpHdc.roa (raw, json)
Hash identifier: Z9Wacx8tjZJyIjoMs7pl8uLtWyj3CX6pdQZ4HliCwmw=
Subject key identifier: 20:9D:E9:ED:9C:11:E9:A8:66:35:EB:6C:37:39:88:8B:62:A9:1D:D7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4349
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/IJ3p7ZwR6ahmNetsNzmIi2KpHdc.roa
Signing time: Thu 18 Apr 2024 07:22:59 +0000
ROA not before: Thu 18 Apr 2024 07:22:59 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17225 (0x4349)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 18 07:22:59 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=209DE9ED9C11E9A86635EB6C3739888B62A91DD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:03:65:4f:1b:63:51:ce:4a:fb:c5:cc:01:65:
9e:8d:aa:5b:62:e5:03:d3:2b:42:77:e4:d2:f4:54:
50:fb:fc:59:c1:01:7f:de:bd:8a:e5:9f:e7:fd:df:
b9:20:2c:4b:9a:04:48:67:3b:dc:f3:52:51:65:e0:
06:db:a0:4d:05:26:5a:3c:bf:93:50:96:51:77:aa:
64:d5:42:44:d4:eb:95:71:2e:4c:63:b5:69:2e:3d:
61:f4:98:95:43:c9:8d:bb:64:13:f2:b9:f0:a4:ae:
50:bb:91:8a:24:e1:af:4c:3e:ba:72:1d:27:4f:7b:
b5:75:3b:84:a8:5c:e6:b2:f1:1f:b9:86:2d:94:2f:
d2:e6:4a:dd:a5:24:17:5e:64:68:a1:d8:5d:9d:0d:
77:f7:62:49:ac:a4:a3:0d:2b:42:12:fa:9b:a1:89:
d3:9e:f1:4b:ee:5a:93:c7:3a:03:83:04:00:07:d1:
6a:8e:8a:98:15:ad:2f:ee:6e:20:e1:6e:a0:21:11:
57:75:b5:12:f9:3b:86:e1:70:5f:95:2d:fe:95:2f:
ac:26:0d:62:3f:4f:c0:be:cf:71:16:35:9b:9c:0a:
91:66:27:bd:c4:7e:ac:5a:3f:de:e3:f1:3c:d4:57:
88:89:5c:18:32:bd:97:6a:c3:2a:cb:ba:68:8f:de:
33:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9D:E9:ED:9C:11:E9:A8:66:35:EB:6C:37:39:88:8B:62:A9:1D:D7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/IJ3p7ZwR6ahmNetsNzmIi2KpHdc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
70:ef:54:4f:3b:80:9f:31:87:45:dc:21:9d:27:9e:5d:0b:93:
f3:89:42:58:b1:aa:02:c5:2d:59:5c:c8:c0:06:86:97:26:d2:
53:a9:76:25:67:a4:2e:8d:ef:08:18:23:9a:02:62:be:9c:ad:
78:a2:69:b2:3c:33:76:c7:4a:ff:fc:59:43:60:94:ab:37:c0:
23:cd:ee:fa:1c:9d:57:53:b4:86:c7:5e:bc:e6:25:eb:51:26:
3b:85:e4:7c:81:05:ec:cf:31:3a:18:8b:92:aa:f3:cd:83:8c:
c7:da:ad:21:25:78:bc:74:59:d4:fa:fa:7d:5b:d6:fa:d9:f1:
62:a3:bd:cf:ae:d7:af:29:ef:82:2d:1d:e6:68:9b:e3:87:6a:
e8:15:3b:f8:6f:6c:ed:3e:b8:8c:b7:71:59:f8:82:bc:29:4e:
16:bf:8a:44:ee:f4:61:55:84:1f:e1:a1:52:da:95:c3:ac:42:
68:c5:f4:2d:b7:39:a2:54:e2:03:6e:d2:57:29:2b:8b:72:e3:
44:1e:a0:d2:94:1c:76:3a:e3:53:f0:ae:e2:f4:f3:00:85:00:
7e:09:1c:d2:d5:7c:41:dd:b9:85:5b:92:7c:73:07:34:83:b9:
f4:e9:e3:0e:61:40:52:d5:7c:05:34:24:99:f6:fe:b0:ca:29:
19:06:9a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 23:42:18 2025 by rpki-client