Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/OukRnqje_udCqkhRjLKt_sWKzXU.roa
File: OukRnqje_udCqkhRjLKt_sWKzXU.roa (raw, json)
Hash identifier: 4PDCzlKMWPiul50yZ7/v8G0k3E27DVBrV2Ey6isyeB8=
Subject key identifier: 3A:E9:11:9E:A8:DE:FE:E7:42:AA:48:51:8C:B2:AD:FE:C5:8A:CD:75
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3ACD
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/OukRnqje_udCqkhRjLKt_sWKzXU.roa
Signing time: Sat 06 Apr 2024 23:52:55 +0000
ROA not before: Sat 06 Apr 2024 23:52:55 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15053 (0x3acd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 6 23:52:55 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3AE9119EA8DEFEE742AA48518CB2ADFEC58ACD75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:82:e1:e0:ba:74:c1:e6:ed:9e:02:e7:0a:d1:
2e:33:e3:ae:4c:00:e0:1e:ad:3b:62:c6:5c:d0:f5:
01:49:27:8d:36:f5:f0:79:7b:cd:42:67:9f:43:40:
d2:7c:9e:e5:4f:37:16:52:87:f3:eb:3c:2a:c3:41:
99:c5:31:fb:7f:39:9d:68:f8:97:7a:0c:a4:70:0e:
84:e4:4e:49:a6:e9:06:b1:0b:56:85:09:d1:89:f6:
5b:12:f6:95:f2:8f:78:fc:24:dd:9c:3d:24:0c:42:
8a:f7:64:8a:cb:bf:44:28:8c:9f:e4:db:cc:07:6f:
0c:34:c4:bd:d1:a2:2e:8e:6b:de:3f:66:09:1b:27:
01:fb:9c:ec:2c:b8:7f:33:78:e6:f7:75:5c:c9:85:
25:6f:f9:69:36:0d:1d:0f:1d:86:c3:94:36:bd:a4:
de:a9:b8:fc:e8:22:b3:94:5e:06:b4:e7:21:21:de:
03:d0:da:cf:d4:f3:29:5e:90:fb:f5:ed:1f:29:43:
47:66:17:b9:7c:fc:d7:4f:69:aa:a2:66:7a:9f:e6:
85:ff:7d:36:5b:6c:18:4b:a4:fd:c3:ba:0a:7a:f1:
c8:29:f6:00:74:bf:81:7f:27:f3:b4:9d:87:ca:d3:
ed:f1:7e:0c:e7:de:5c:62:40:b7:c9:3b:47:26:b5:
cd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E9:11:9E:A8:DE:FE:E7:42:AA:48:51:8C:B2:AD:FE:C5:8A:CD:75
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/OukRnqje_udCqkhRjLKt_sWKzXU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
70:98:af:aa:cc:37:99:ec:92:36:c4:d5:45:30:4d:6c:60:13:
77:bf:25:bf:1e:2e:cb:15:61:61:3d:38:63:d7:2f:66:80:e4:
fd:59:e4:b6:7d:af:30:5e:71:53:75:99:9d:3c:73:2c:0c:c5:
a0:b9:6d:8c:df:95:62:29:d3:d7:24:45:3a:3b:29:23:7d:78:
4a:c4:a3:a9:4e:13:3c:c0:3f:0d:db:0b:b2:ac:e9:92:24:74:
0b:3d:b8:fe:c1:25:44:a7:81:bb:58:58:1c:6e:7f:57:80:17:
2e:f5:80:e7:d0:83:d9:c1:8c:b3:30:38:04:73:f5:7c:c3:06:
07:8f:9f:11:52:30:da:27:52:90:0b:0e:23:b7:c0:12:9e:76:
21:e5:57:03:44:39:30:cc:31:d2:1e:38:d4:a2:4d:ec:b2:40:
2e:18:64:13:eb:23:df:cd:19:5e:ac:ab:40:e6:ed:bf:8d:91:
5f:19:4e:e9:d4:b3:0f:58:fa:39:a3:4c:3c:86:46:5e:4b:fb:
8b:7a:da:fd:6a:f2:28:5e:7b:04:e0:d2:bd:2b:52:3c:5b:e9:
ac:ff:ee:6d:7b:59:0c:3c:59:3b:97:20:8d:33:16:2a:72:e6:
3e:84:f5:55:4a:e1:79:0b:3d:87:45:89:f9:42:9d:ea:e4:98:
0f:7b:55:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:50:52 2025 by rpki-client