Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/L0XblGp3ZuI3jeeIIhbz91YSez8.roa
File: L0XblGp3ZuI3jeeIIhbz91YSez8.roa (raw, json)
Hash identifier: z8gKgbR1H/YaPr/pBPEq/qgUyGA1PtK9gkttzsdzNzM=
Subject key identifier: 2F:45:DB:94:6A:77:66:E2:37:8D:E7:88:22:16:F3:F7:56:12:7B:3F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 533A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/L0XblGp3ZuI3jeeIIhbz91YSez8.roa
Signing time: Thu 09 May 2024 13:23:58 +0000
ROA not before: Thu 09 May 2024 13:23:58 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21306 (0x533a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 9 13:23:58 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2F45DB946A7766E2378DE7882216F3F756127B3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b2:ac:ad:e1:ee:24:43:81:72:ea:db:ff:5d:
25:83:9e:ca:fd:74:da:9c:9c:89:03:78:4d:33:45:
91:e0:cd:9a:61:2f:af:08:0d:a8:e7:4c:ed:57:d8:
1e:fd:b4:e0:b7:9c:44:ed:3d:0a:e0:6a:d7:a8:e5:
a1:c2:39:bd:86:4c:d5:92:5a:c6:3e:c2:e3:83:eb:
dc:e3:7b:ef:29:3e:61:3c:c6:48:ee:fe:44:c9:f9:
a6:b2:a4:6a:2f:3e:dc:63:ca:ad:40:80:13:3d:ac:
08:d2:7e:f7:25:09:ca:0d:94:0f:80:88:c5:a6:c4:
0f:8c:35:52:26:bd:66:a4:e8:af:92:97:0a:bc:00:
a2:82:be:05:b8:f6:7c:66:a0:f8:49:00:2d:7e:09:
44:4e:3a:28:da:f2:30:7d:d2:4f:51:db:3e:0d:84:
ee:ab:1d:c3:d3:87:6f:c5:fc:09:2d:27:25:25:04:
5e:93:0c:fb:4f:82:19:35:d2:93:96:5e:89:8d:5a:
2f:cb:9b:85:29:d4:34:dd:27:e4:9a:1c:4b:c2:50:
e0:7c:79:22:e6:23:b9:b4:59:1d:59:19:f3:50:7e:
2d:4c:1b:b3:ba:64:d7:8c:dc:bf:d2:a8:4f:ca:bc:
56:58:85:2a:cd:2b:e8:ec:61:d7:25:dc:64:29:10:
f1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:45:DB:94:6A:77:66:E2:37:8D:E7:88:22:16:F3:F7:56:12:7B:3F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/L0XblGp3ZuI3jeeIIhbz91YSez8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
41:68:10:0c:89:d1:01:f8:88:7b:bb:e9:95:8d:eb:fa:cd:ef:
9a:9d:b2:bd:d5:d3:a5:96:43:a4:7f:14:f8:4a:98:fe:12:89:
45:ca:77:b7:ba:a2:d8:d0:3e:fd:cb:37:f8:cc:fb:46:1c:2d:
89:de:89:d4:ff:ca:2c:32:35:2f:b5:03:d0:3b:36:30:3f:3e:
9f:e8:00:7c:49:0c:52:e4:30:47:44:ec:cb:ea:3c:27:bc:de:
39:d9:26:42:96:66:79:56:22:fb:5c:30:aa:4a:59:22:6b:a1:
8c:3f:d7:09:26:22:cf:a5:b3:b0:57:bb:47:02:33:af:16:b4:
4b:3f:61:69:5a:df:16:a3:f9:6b:2b:37:1f:aa:7c:f5:1a:5b:
78:8f:b6:9a:5f:12:5b:3a:cd:2f:bb:2a:a6:6d:8c:77:49:ed:
95:49:1c:dc:4f:24:b2:1a:33:a7:fb:22:42:c8:05:2f:95:b5:
64:dd:67:d3:05:1f:84:cc:3b:d3:e6:e9:25:3e:73:7f:4b:67:
86:c7:e8:59:65:4a:2f:8b:f8:c6:a4:6a:06:ba:bf:ff:5e:09:
52:a7:92:24:08:5b:c2:36:1e:34:ac:ae:d2:4c:aa:2d:69:d9:
c3:f3:bd:59:6b:ce:43:51:cf:cf:08:ad:72:4a:ee:94:15:98:
4c:d9:ec:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 02:15:03 2025 by rpki-client