Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/KXhypBgTHyXIojWNfbVVoYmoTsg.roa
File: KXhypBgTHyXIojWNfbVVoYmoTsg.roa (raw, json)
Hash identifier: jEspq1Qlj8bm9sM0MudXK4zCppIofUjYqBAGzMt3jIg=
Subject key identifier: 29:78:72:A4:18:13:1F:25:C8:A2:35:8D:7D:B5:55:A1:89:A8:4E:C8
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3E51
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/KXhypBgTHyXIojWNfbVVoYmoTsg.roa
Signing time: Thu 11 Apr 2024 16:22:46 +0000
ROA not before: Thu 11 Apr 2024 16:22:46 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15953 (0x3e51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 11 16:22:46 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=297872A418131F25C8A2358D7DB555A189A84EC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:08:bf:59:b0:27:84:24:b1:cb:89:db:d2:cd:
7f:cd:2e:4e:d6:57:89:d9:7d:00:ec:62:dc:bb:9a:
24:67:11:16:1d:ff:27:63:b1:2b:08:ee:08:d8:69:
1a:e0:c7:1f:8c:8f:5e:ba:e9:61:7b:68:fd:3b:ff:
13:ee:1a:7d:b0:d7:e0:b7:0e:07:2d:d1:e5:03:0a:
80:6d:62:f1:92:c9:84:0c:dd:cd:b6:7c:7b:46:36:
54:05:c4:70:d9:89:35:6a:64:15:57:5d:d6:e2:c6:
2e:81:eb:85:e5:95:e6:d2:01:70:f4:d1:59:9f:c3:
a1:80:6c:3b:8f:78:2f:72:ba:ac:bb:15:c1:94:82:
3a:db:af:4b:fc:0e:9a:f4:77:bf:cb:2e:a7:ca:f6:
0b:b4:43:c7:15:1b:92:e9:fb:d8:ac:de:fa:4c:b7:
56:7b:43:35:7c:0e:77:86:95:91:7e:d8:1e:d9:95:
34:01:e1:69:14:74:ea:c2:5c:f1:68:77:1d:b7:44:
83:2b:3f:b2:ed:ca:34:13:97:b9:58:03:95:4b:2c:
aa:8a:61:13:24:7d:ba:9d:e3:92:ce:91:a0:8f:76:
57:e4:49:22:98:1e:48:86:66:1e:e6:5d:87:62:0c:
1f:28:ae:c7:9e:dd:c6:32:3b:00:92:f3:84:e8:e8:
32:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:78:72:A4:18:13:1F:25:C8:A2:35:8D:7D:B5:55:A1:89:A8:4E:C8
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/KXhypBgTHyXIojWNfbVVoYmoTsg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
4c:79:06:ce:3b:20:ce:51:4b:48:bd:5c:a9:50:dc:bc:f8:8f:
3e:dc:25:66:91:bf:a1:e5:3d:c7:86:e1:68:5d:38:8f:35:9c:
59:e2:c5:b0:e0:15:03:dc:33:05:8e:89:67:a4:71:5f:bb:a6:
e9:48:c9:bd:6d:bb:f6:df:7b:0c:69:58:58:11:b5:ac:84:f8:
fc:81:80:7e:ea:2e:48:7b:51:5a:b8:51:72:41:d0:48:32:16:
01:78:c2:78:dc:34:53:78:7c:55:a5:ce:49:5b:f3:c0:81:4c:
f8:25:a7:f2:0f:29:19:3d:b8:e3:bd:0f:8a:65:84:3a:23:2c:
08:1b:6b:74:90:62:07:1c:56:55:b1:a5:4a:ab:f7:b6:ae:eb:
38:5d:77:2d:df:cc:43:2a:e3:30:fc:c3:13:fa:f9:49:02:cb:
a4:3e:22:3f:77:b5:32:64:f6:ec:24:88:cc:b0:58:24:2e:ef:
3d:eb:ab:82:0c:87:33:74:d2:ec:76:ab:4d:71:3e:67:99:ea:
5b:9e:17:d4:89:02:e3:f9:73:44:38:23:83:e0:3d:e1:a8:36:
20:17:a9:60:f0:8e:66:f6:3a:4c:a6:18:4d:97:90:53:3b:ab:
86:e4:a1:ca:3a:5b:16:aa:4a:0c:71:af:76:36:05:22:5a:c7:
61:0f:ba:c0
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICPlEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTEx
NjIyNDZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDI5Nzg3MkE0MTgxMzFG
MjVDOEEyMzU4RDdEQjU1NUExODlBODRFQzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDuCL9ZsCeEJLHLidvSzX/NLk7WV4nZfQDsYty7miRnERYd/ydj
sSsI7gjYaRrgxx+Mj1666WF7aP07/xPuGn2w1+C3Dgct0eUDCoBtYvGSyYQM3c22
fHtGNlQFxHDZiTVqZBVXXdbixi6B64XllebSAXD00Vmfw6GAbDuPeC9yuqy7FcGU
gjrbr0v8Dpr0d7/LLqfK9gu0Q8cVG5Lp+9is3vpMt1Z7QzV8DneGlZF+2B7ZlTQB
4WkUdOrCXPFodx23RIMrP7LtyjQTl7lYA5VLLKqKYRMkfbqd45LOkaCPdlfkSSKY
HkiGZh7mXYdiDB8orsee3cYyOwCS84To6DJbAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUKXhypBgTHyXIojWNfbVVoYmoTsgwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0tYaHlwQmdUSHlYSW9q
V05mYlZWb1ltb1RzZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAEx5Bs47IM5RS0i9
XKlQ3Lz4jz7cJWaRv6HlPceG4WhdOI81nFnixbDgFQPcMwWOiWekcV+7pulIyb1t
u/bfewxpWFgRtayE+PyBgH7qLkh7UVq4UXJB0EgyFgF4wnjcNFN4fFWlzklb88CB
TPglp/IPKRk9uOO9D4plhDojLAgba3SQYgccVlWxpUqr97au6zhddy3fzEMq4zD8
wxP6+UkCy6Q+Ij93tTJk9uwkiMywWCQu7z3rq4IMhzN00ux2q01xPmeZ6lueF9SJ
AuP5c0Q4I4PgPeGoNiAXqWDwjmb2OkymGE2XkFM7q4bkoco6WxaqSgxxr3Y2BSJa
x2EPusA=
-----END CERTIFICATE-----
Generated at Sat May 17 19:40:05 2025 by rpki-client