Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/KUo-okpxlm_EYxlnSc7ZTusGzr4.roa
File: KUo-okpxlm_EYxlnSc7ZTusGzr4.roa (raw, json)
Hash identifier: CGfaQ49ktZ86/crR1h5Ze0Gmd+ywdYJQ4LOPLlPAEEw=
Subject key identifier: 29:4A:3E:A2:4A:71:96:6F:C4:63:19:67:49:CE:D9:4E:EB:06:CE:BE
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3689
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/KUo-okpxlm_EYxlnSc7ZTusGzr4.roa
Signing time: Mon 01 Apr 2024 07:25:47 +0000
ROA not before: Mon 01 Apr 2024 07:25:47 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13961 (0x3689)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 1 07:25:47 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=294A3EA24A71966FC463196749CED94EEB06CEBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:63:af:73:76:26:5f:6b:78:c6:85:b8:11:4e:
e5:20:c9:10:39:52:a2:94:84:0f:1c:ef:a0:d9:6f:
ad:d2:09:52:13:07:44:32:45:82:77:1f:ca:96:d8:
88:e2:c8:9b:90:6e:d8:72:b5:3a:66:cc:c3:fe:d4:
d0:46:93:8e:5e:89:91:a9:1e:52:c0:4a:15:46:a3:
3e:7f:8d:82:b9:8f:cc:23:1d:5b:76:6f:d5:49:18:
d4:7a:af:c6:52:2d:83:15:ce:c5:68:6c:61:0f:68:
85:db:b2:56:02:a8:1f:8a:a0:c4:23:1f:b0:8c:27:
52:89:3e:1d:1d:72:4d:4f:57:d5:25:0e:7b:58:ad:
17:3e:e1:94:c8:c3:ec:a3:e9:71:94:93:90:50:17:
1d:35:a4:95:52:45:21:d2:5c:28:95:9c:ae:ca:c1:
cc:5b:7e:9c:1c:87:35:14:33:e5:bf:03:71:96:93:
3e:07:43:ff:ff:48:5a:42:13:9d:c3:a7:46:96:6d:
c2:cd:eb:cd:98:a6:6e:cb:93:a5:f8:6c:f5:a6:a1:
7d:eb:6f:44:d6:ae:4e:9f:18:fa:52:36:d6:38:1c:
fb:d9:1f:ce:a9:35:af:53:72:01:4a:24:3f:a4:34:
ef:04:c8:43:21:d6:8f:7c:21:db:4b:53:66:63:a8:
3f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4A:3E:A2:4A:71:96:6F:C4:63:19:67:49:CE:D9:4E:EB:06:CE:BE
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/KUo-okpxlm_EYxlnSc7ZTusGzr4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
50:3a:b8:9a:d2:b9:ca:87:64:74:dc:54:96:b0:7d:c6:dc:84:
2b:59:ab:56:16:c3:a3:79:a3:c1:43:88:12:89:31:f3:e0:50:
09:5f:80:d6:99:af:2a:27:6e:56:68:28:0f:64:77:7e:eb:4e:
c2:07:62:0a:69:6e:37:24:a5:02:26:dd:2d:e3:15:16:0a:aa:
54:83:41:ce:b8:74:4b:13:8a:9c:f3:a6:07:c3:52:e1:c0:60:
c5:15:d4:24:b0:fe:ba:48:5e:a6:da:91:59:4d:73:11:8e:c7:
fb:3b:ed:21:07:93:70:57:39:d3:10:da:2e:24:53:03:96:0f:
a6:10:8c:86:cd:ab:f3:cc:9f:a9:2d:2b:6d:11:0f:e3:aa:2d:
6b:f7:d3:18:32:91:1c:4e:4e:73:ba:19:87:cf:96:cc:55:2f:
2b:39:8d:a4:8f:12:87:3b:69:56:dc:66:cb:4c:0f:4f:d9:b3:
fa:fa:3d:a9:1a:43:bf:61:08:ff:aa:ed:ab:fe:7e:b6:3b:f5:
ae:1a:ea:fa:ba:4e:99:fc:5e:a7:ea:85:8e:b0:37:03:25:b0:
99:ee:70:50:0b:48:be:72:e7:d0:24:0e:bf:c0:b4:25:69:45:
71:81:13:11:10:fb:31:25:75:3f:a2:ed:6b:4a:1e:db:a4:c1:
3c:0a:28:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 22:46:00 2025 by rpki-client