Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/SdC-pobewd1EGsR7bGMVZXr3hto.roa
File: SdC-pobewd1EGsR7bGMVZXr3hto.roa (raw, json)
Hash identifier: AK7s2ojZRfAk3CfwP4Ml8oBIWoYaHoiVdXJjUGOAm2c=
Subject key identifier: 49:D0:BE:A6:86:DE:C1:DD:44:1A:C4:7B:6C:63:15:65:7A:F7:86:DA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4E2A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/SdC-pobewd1EGsR7bGMVZXr3hto.roa
Signing time: Thu 02 May 2024 19:23:59 +0000
ROA not before: Thu 02 May 2024 19:23:59 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20010 (0x4e2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 2 19:23:59 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=49D0BEA686DEC1DD441AC47B6C6315657AF786DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:42:71:84:2f:8b:f9:a2:89:75:1a:6e:24:3c:
16:43:3d:56:d0:53:c3:97:47:2f:a5:0c:13:37:bd:
0f:35:d3:48:f8:e5:8b:a3:36:43:43:39:64:64:cf:
e1:90:ff:8f:81:5b:7d:de:78:81:a3:e5:fe:2e:65:
23:0f:1a:4b:5a:ab:75:e2:c4:8b:32:a7:57:68:cb:
74:da:c6:ca:61:ed:16:f3:69:3b:b1:ae:27:d7:6d:
68:47:fd:92:a3:5a:2d:ba:62:32:37:4e:72:cc:14:
cc:28:99:b4:37:c4:c4:35:db:b3:f1:5d:72:f1:50:
42:08:14:74:3f:21:73:fd:72:2b:76:70:20:2e:24:
f7:eb:cf:00:59:df:d7:41:6b:ff:1e:d7:d0:bd:92:
95:ba:b1:34:50:b9:d7:1c:89:0c:80:91:70:4c:51:
fc:6a:78:6a:71:b8:61:b6:37:5f:ad:63:77:e1:30:
93:a1:72:be:90:1d:c2:e6:5d:3e:6c:4b:d3:3f:e9:
a1:c3:c3:0b:81:a7:06:48:b6:3c:d4:3f:c4:2f:06:
e9:e9:5d:ab:c7:73:5e:8c:f4:43:a3:35:3d:31:00:
2b:02:ed:2a:18:18:c7:24:cb:08:a7:d8:79:b5:a5:
6a:f2:57:aa:f0:11:5a:af:46:b3:ff:37:eb:75:2d:
7d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D0:BE:A6:86:DE:C1:DD:44:1A:C4:7B:6C:63:15:65:7A:F7:86:DA
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/SdC-pobewd1EGsR7bGMVZXr3hto.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3e:0a:98:c4:d5:d9:03:c1:92:18:70:ce:01:4c:96:eb:1d:46:
84:b1:78:13:96:b7:50:f2:b1:2f:a5:56:0c:d6:85:c9:7e:c9:
4c:2e:b6:3f:94:0e:f7:60:af:71:66:23:b8:f9:4e:69:a1:16:
b8:20:6e:4d:37:e0:6b:b5:c9:92:42:f1:9f:3f:f5:a4:4e:b4:
c9:ab:52:c9:cb:60:77:8a:ff:c9:5c:5f:90:04:3d:3a:52:8b:
bc:1f:ad:7f:b1:cc:57:6d:cb:cd:e7:f5:5c:e8:c1:32:e7:c1:
a8:33:bd:87:02:07:c8:21:77:1c:5f:e0:27:75:5c:29:99:a5:
3f:87:57:47:b4:2f:4f:61:0d:54:f5:ad:64:fa:9e:a5:aa:69:
f8:90:52:a3:4e:93:9d:2b:d5:bd:64:90:1c:f7:7c:2d:03:69:
cb:53:cb:ba:47:b4:06:01:c3:d5:ab:db:7e:8b:4a:30:43:ca:
84:aa:13:14:12:e6:39:46:cd:70:e4:04:65:62:ef:73:27:5c:
f4:db:2e:d5:4d:da:15:49:5a:c3:12:af:ba:e1:3c:2f:ce:59:
bb:ab:25:74:97:ce:33:b2:6c:94:cc:f5:50:b4:f6:63:23:de:
14:b1:f2:c4:fb:22:0c:9a:a7:ab:ff:ad:e9:fd:48:5c:3f:cd:
ea:a2:8e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 22:37:14 2025 by rpki-client