Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/N6FW3f_38jyUD9EmklOa8MenbII.roa
File: N6FW3f_38jyUD9EmklOa8MenbII.roa (raw, json)
Hash identifier: Ni2tYLm6qeoAqPVVLIyH0QUs4UZmLTBnFFPC4EsVyM0=
Subject key identifier: 37:A1:56:DD:FF:F7:F2:3C:94:0F:D1:26:92:53:9A:F0:C7:A7:6C:82
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 57C7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/N6FW3f_38jyUD9EmklOa8MenbII.roa
Signing time: Wed 15 May 2024 14:54:12 +0000
ROA not before: Wed 15 May 2024 14:54:12 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22471 (0x57c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 15 14:54:12 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=37A156DDFFF7F23C940FD12692539AF0C7A76C82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:19:af:af:1c:0b:cc:5a:85:c1:cb:84:37:28:
f4:05:0b:e9:64:b1:df:22:6f:49:21:48:e6:4b:11:
2e:f8:1e:40:63:74:2f:9b:8c:d0:8e:1b:b5:b6:8e:
a6:e0:e0:f9:3d:41:52:3c:12:b6:3d:d7:02:8e:c2:
3a:f8:9d:30:03:d7:5b:df:90:0f:86:7d:fa:5f:57:
50:cc:8b:81:d4:28:2f:8c:d6:01:bc:f4:7e:64:25:
cf:0d:23:d2:2d:38:78:31:31:db:9e:c4:10:ed:06:
b1:32:fa:ba:d9:34:62:c7:dd:4c:e0:c6:61:18:80:
9b:ec:f4:58:96:1b:76:c5:e4:e4:29:57:18:a4:d4:
73:88:26:fb:6f:5f:f7:30:28:95:41:73:92:93:41:
de:8b:bf:22:b3:0b:76:25:64:47:aa:5d:e6:eb:41:
ce:77:e9:86:a4:af:3a:19:c3:24:61:36:0b:c3:e1:
ea:7b:58:7e:75:82:26:22:b3:fc:58:ab:79:95:97:
c0:01:7f:c1:6a:af:46:4c:d4:eb:64:c2:90:cc:25:
7c:24:5d:16:0e:56:7a:0f:43:e1:99:83:aa:b6:ad:
41:20:1d:df:98:f7:ca:2f:01:1b:74:10:e5:1a:c5:
57:1b:c9:be:75:33:c2:88:77:d0:24:df:18:fd:ad:
ee:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A1:56:DD:FF:F7:F2:3C:94:0F:D1:26:92:53:9A:F0:C7:A7:6C:82
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/N6FW3f_38jyUD9EmklOa8MenbII.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
76:bd:63:98:b4:be:47:8a:4e:9d:1f:84:c5:03:7a:ef:b8:ca:
0f:20:90:bb:08:87:35:81:b5:4d:e2:ca:8a:bc:a4:52:7f:68:
6d:1f:a7:95:8d:5b:0a:95:96:df:82:ea:6d:a5:58:62:38:9e:
b8:52:c0:4a:f6:b3:d5:e3:b0:e8:1f:d2:04:fc:19:32:e6:fc:
89:4b:f1:96:84:58:7e:c5:fc:42:9f:02:19:74:15:f4:b2:d4:
c4:3a:ea:be:f6:7c:43:aa:96:7b:95:26:82:82:85:26:ba:8a:
17:c2:8a:76:19:9e:ee:f9:56:eb:b9:89:17:f3:ef:e4:ba:a2:
3c:bc:5e:4f:b4:70:44:ae:f8:5a:70:34:eb:3d:69:5c:26:41:
4d:7d:8c:47:89:8d:56:8b:6a:3c:ba:4f:9f:d6:76:28:13:ae:
9e:a8:03:24:a9:5c:e5:5f:18:4e:1f:12:3d:9c:38:fd:29:14:
e3:c6:9c:71:d8:b3:e5:f9:1b:35:3d:2c:c2:f8:ba:17:d0:41:
22:a4:53:ee:e2:70:02:54:3d:a4:27:0d:96:57:6f:87:46:9f:
e8:eb:d1:e3:20:74:8e:38:cb:5a:8b:48:fa:07:fa:6d:2a:23:
74:ba:32:03:5f:1d:47:84:7a:78:07:44:e6:5d:c0:cc:1b:f9:
08:a7:83:1a
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICV8cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MTUx
NDU0MTJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDM3QTE1NkRERkZGN0Yy
M0M5NDBGRDEyNjkyNTM5QUYwQzdBNzZDODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwGa+vHAvMWoXBy4Q3KPQFC+lksd8ib0khSOZLES74HkBjdC+b
jNCOG7W2jqbg4Pk9QVI8ErY91wKOwjr4nTAD11vfkA+GffpfV1DMi4HUKC+M1gG8
9H5kJc8NI9ItOHgxMduexBDtBrEy+rrZNGLH3UzgxmEYgJvs9FiWG3bF5OQpVxik
1HOIJvtvX/cwKJVBc5KTQd6LvyKzC3YlZEeqXebrQc536YakrzoZwyRhNgvD4ep7
WH51giYis/xYq3mVl8ABf8Fqr0ZM1OtkwpDMJXwkXRYOVnoPQ+GZg6q2rUEgHd+Y
98ovARt0EOUaxVcbyb51M8KId9Ak3xj9re4dAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUN6FW3f/38jyUD9EmklOa8MenbIIwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L042RlczZl8zOGp5VUQ5
RW1rbE9hOE1lbmJJSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAHa9Y5i0vkeKTp0fhMUDeu+4yg8gkLsI
hzWBtU3iyoq8pFJ/aG0fp5WNWwqVlt+C6m2lWGI4nrhSwEr2s9XjsOgf0gT8GTLm
/IlL8ZaEWH7F/EKfAhl0FfSy1MQ66r72fEOqlnuVJoKChSa6ihfCinYZnu75Vuu5
iRfz7+S6ojy8Xk+0cESu+FpwNOs9aVwmQU19jEeJjVaLajy6T5/WdigTrp6oAySp
XOVfGE4fEj2cOP0pFOPGnHHYs+X5GzU9LML4uhfQQSKkU+7icAJUPaQnDZZXb4dG
n+jr0eMgdI44y1qLSPoH+m0qI3S6MgNfHUeEengHROZdwMwb+Qingxo=
-----END CERTIFICATE-----
Generated at Sat May 17 19:39:03 2025 by rpki-client