Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/T7xSwtMqPm1jw_YnKuEQ-RChwcs.roa
File: T7xSwtMqPm1jw_YnKuEQ-RChwcs.roa (raw, json)
Hash identifier: whQE+mDV/V3VkEKyOKfwgCH4QN3dvWzdHV6jfmBm8oo=
Subject key identifier: 4F:BC:52:C2:D3:2A:3E:6D:63:C3:F6:27:2A:E1:10:F9:10:A1:C1:CB
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4ED5
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/T7xSwtMqPm1jw_YnKuEQ-RChwcs.roa
Signing time: Fri 03 May 2024 16:53:47 +0000
ROA not before: Fri 03 May 2024 16:53:47 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20181 (0x4ed5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 3 16:53:47 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4FBC52C2D32A3E6D63C3F6272AE110F910A1C1CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1d:97:6e:21:07:bf:59:43:11:67:7a:11:19:
4b:8b:14:88:66:2f:46:5a:91:eb:19:0c:26:61:d0:
48:3d:84:4e:51:22:5e:3c:93:b4:71:2e:fe:2e:78:
84:14:fd:73:59:e9:df:a5:d8:84:64:98:0c:ee:89:
cc:eb:91:d3:11:e8:74:19:b7:63:aa:fb:5d:af:c0:
aa:35:c6:d7:93:7b:38:10:b3:76:45:14:de:ef:ff:
04:4b:19:21:a4:d1:3e:dc:da:64:9c:6b:bf:cd:21:
ad:fc:e8:5e:a1:aa:91:6e:b5:d1:d0:e2:87:4a:3d:
91:c2:8b:71:3c:be:20:66:d1:a6:9f:a7:cd:19:a5:
c5:62:34:6e:89:56:75:59:da:19:22:32:38:a5:02:
22:71:96:e5:df:56:92:ec:1e:2b:1b:5b:28:58:96:
54:61:55:14:64:09:00:1a:f8:bd:09:82:3f:27:5c:
26:7a:dd:53:a2:48:17:e1:2a:e9:4c:b7:3f:e2:56:
66:68:e5:3d:80:9d:e6:66:27:7a:db:87:f4:d0:7e:
d6:d8:76:61:89:61:7f:88:d2:a9:c5:f5:f2:a5:28:
b7:a9:3b:a8:cd:49:9b:c8:1e:34:3f:e1:c1:d9:4c:
75:9f:42:52:09:55:80:8a:4a:2f:62:05:0e:c2:de:
72:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BC:52:C2:D3:2A:3E:6D:63:C3:F6:27:2A:E1:10:F9:10:A1:C1:CB
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/T7xSwtMqPm1jw_YnKuEQ-RChwcs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
8e:4b:c7:52:f1:43:fd:82:f6:5d:77:c1:b3:98:16:e7:9d:35:
7a:95:5c:1d:8c:eb:e1:b8:3f:1b:b5:6b:8b:10:bd:a2:37:ed:
e6:ac:58:4f:b8:cf:4d:1b:9c:97:03:69:54:d7:48:1b:33:49:
d0:cb:14:a0:77:94:cd:09:b5:d9:47:b4:94:ef:7a:2b:6a:fd:
6f:66:e0:7e:38:de:de:75:98:d5:3c:69:43:e8:87:51:33:3d:
f3:0c:34:05:01:f1:6d:25:fa:f4:99:1e:2b:47:98:62:d4:52:
0e:2d:ee:75:eb:ee:43:fe:77:b5:ae:c2:41:fc:8b:6e:2f:b7:
0f:41:c7:f7:16:5f:18:c4:e2:7f:51:9f:fc:ed:7e:9e:88:9b:
88:bc:5f:fe:70:dc:a2:28:d7:27:43:dc:ff:79:59:93:06:a7:
35:57:cf:28:45:c5:a5:34:b4:f7:71:8f:9a:d7:43:ff:b5:d8:
fd:1d:2c:9a:84:c4:50:d8:1e:f8:3f:d6:84:ef:3a:02:0e:10:
ac:02:70:79:61:a7:cd:12:5d:2a:0f:11:d6:d6:9b:ea:60:05:
3b:7a:24:81:61:19:1b:24:85:d4:6b:42:7b:a9:85:15:2c:dd:
96:a8:27:e9:f7:7c:cc:58:ee:57:d7:a4:80:0d:3d:1a:df:90:
5c:78:8e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:40:01 2025 by rpki-client