Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/P6eTCc7zxXqgM1bifXIecjL4c9s.roa
File: P6eTCc7zxXqgM1bifXIecjL4c9s.roa (raw, json)
Hash identifier: fANFQfM6HI6mWKr9v99RvMdoB3visIo470+UjrxZCcg=
Subject key identifier: 3F:A7:93:09:CE:F3:C5:7A:A0:33:56:E2:7D:72:1E:72:32:F8:73:DB
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 34C6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/P6eTCc7zxXqgM1bifXIecjL4c9s.roa
Signing time: Fri 29 Mar 2024 22:52:06 +0000
ROA not before: Fri 29 Mar 2024 22:52:06 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13510 (0x34c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 29 22:52:06 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3FA79309CEF3C57AA03356E27D721E7232F873DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9a:96:f0:1f:ed:f3:7a:18:fc:cc:fc:bd:61:
ef:8f:d8:91:ea:10:f4:fb:b5:75:1d:8e:22:55:a9:
12:5a:8d:92:1b:f9:94:db:42:b3:c1:20:32:26:99:
fd:87:40:26:69:c8:1d:8b:d3:b0:6e:17:f7:08:46:
86:74:df:1a:85:de:67:e1:e6:f9:ec:93:11:cd:55:
96:d1:17:e8:50:cc:36:ea:0e:ed:e8:4a:c0:3c:9b:
d8:4e:78:68:9d:52:47:dc:b3:89:df:47:84:9f:6a:
21:c5:fd:84:f2:d7:44:a2:57:c4:eb:07:5b:c1:66:
de:7e:fc:1c:a8:83:ac:43:87:e5:6b:f3:e8:5f:e1:
7f:0d:d3:c6:51:12:9d:cf:0c:e7:0e:c8:ec:55:95:
7b:94:72:f0:db:82:38:e7:0f:6c:a3:1e:72:a3:4e:
ea:f3:65:02:f8:96:7f:3a:b9:99:ed:80:9a:48:8f:
d9:41:90:36:e5:cd:51:b8:fc:ef:ea:0e:d1:92:8a:
3a:2b:6b:8e:a4:f9:56:31:cb:5a:c8:88:ea:7d:a5:
84:48:85:59:31:ba:10:17:04:50:36:a4:a2:fb:e1:
85:64:b8:3c:50:9d:ef:13:30:17:83:b7:7e:57:e8:
78:1c:49:77:2c:b3:fb:95:b6:61:88:75:38:cc:9e:
09:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A7:93:09:CE:F3:C5:7A:A0:33:56:E2:7D:72:1E:72:32:F8:73:DB
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/P6eTCc7zxXqgM1bifXIecjL4c9s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
90:17:5c:5d:d2:5f:72:75:2b:32:ac:6c:0d:73:6b:e6:1c:65:
f0:f9:57:f3:f7:db:a4:fb:f0:ac:0e:db:f8:29:6f:0f:a7:19:
1f:f5:2d:d3:b0:2b:32:fb:7c:a2:be:74:c0:7d:59:20:d3:f3:
70:57:8e:3a:22:30:75:4f:c1:d3:08:ad:41:c0:98:95:91:f3:
75:ff:fe:7c:c3:5b:f7:88:41:04:8f:61:e7:11:da:52:fb:53:
0a:15:92:c9:9b:fb:b6:3d:d1:c4:05:c1:3b:c5:66:e6:97:dd:
1a:2b:1f:ac:9f:4c:f6:e2:65:d7:d7:23:38:94:62:74:f7:22:
7b:30:d4:7a:81:a7:0a:60:3e:63:13:16:99:28:a8:a1:f0:74:
d3:27:6e:c0:6d:ee:2e:ea:14:08:96:d6:79:95:19:56:5f:16:
ca:1b:52:47:99:68:22:0f:fa:fe:7f:a3:00:23:fd:d2:07:0f:
b1:fc:0a:df:7c:a4:1a:ec:b2:7d:ff:e1:eb:fb:f7:12:51:8c:
c8:d5:39:c8:d8:d8:f5:b3:21:98:0e:00:ec:17:f0:14:3e:60:
fc:89:b8:dd:6c:b4:c8:cd:1a:7d:f9:98:0b:1a:2d:ef:ee:4c:
30:16:ba:5f:f5:0b:11:7f:ab:a1:dc:df:3b:96:b4:2e:70:e3:
1f:19:7d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:48:04 2025 by rpki-client