Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/XY7LLDL1-C4TICDqTcKUzcGK1cg.roa
File: XY7LLDL1-C4TICDqTcKUzcGK1cg.roa (raw, json)
Hash identifier: fNrkKsUbQcI6NiveFRzRiaAYYDKrX5vcncHgKKG6It8=
Subject key identifier: 5D:8E:CB:2C:32:F5:F8:2E:13:20:20:EA:4D:C2:94:CD:C1:8A:D5:C8
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 35B3
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/XY7LLDL1-C4TICDqTcKUzcGK1cg.roa
Signing time: Sun 31 Mar 2024 04:22:10 +0000
ROA not before: Sun 31 Mar 2024 04:22:10 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13747 (0x35b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 31 04:22:10 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5D8ECB2C32F5F82E132020EA4DC294CDC18AD5C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9d:1c:23:db:6f:95:43:09:24:9a:0b:f4:a3:
cf:eb:70:51:19:1c:d2:e5:d7:0e:ae:55:ca:6e:84:
30:3b:bc:a4:87:ab:39:9c:fe:d0:19:f4:48:2d:c6:
ae:f2:96:e3:e1:9a:75:57:06:56:b6:c8:47:88:ba:
0c:24:69:f5:39:cd:69:1b:44:a6:05:f1:bf:60:8c:
c9:7f:fe:77:cc:ba:28:f3:ec:e8:2a:05:21:c7:36:
80:6a:10:ca:f5:46:6f:31:c9:1b:07:8f:30:86:b1:
6f:6e:56:fe:7f:26:74:85:31:58:3f:35:8d:9b:7f:
03:11:bd:7f:f5:c4:d2:36:5b:28:c7:91:10:80:fd:
88:7d:b3:db:81:8f:b6:e4:2d:61:f1:7a:e9:87:71:
67:8a:57:b2:7f:f8:63:69:9e:3b:7c:98:72:b5:88:
f7:fd:ed:48:79:ad:7f:79:69:95:45:d8:0b:02:db:
04:ee:95:8d:96:57:1e:3e:3d:e6:3a:1f:61:0c:45:
10:ec:3f:ec:99:a3:23:52:03:7b:84:54:c3:af:89:
99:fa:b4:5b:d0:20:d5:ee:cb:d6:b4:b9:dd:74:b6:
10:c4:38:eb:30:79:24:5e:16:4a:c9:65:8b:22:5f:
49:21:06:4e:ff:73:ec:e8:28:d3:0a:99:29:24:23:
27:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8E:CB:2C:32:F5:F8:2E:13:20:20:EA:4D:C2:94:CD:C1:8A:D5:C8
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/XY7LLDL1-C4TICDqTcKUzcGK1cg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
66:12:0f:af:e9:53:66:0c:07:30:09:4b:ad:bc:b1:0f:e1:40:
15:56:06:db:ab:51:88:06:e9:c4:66:bd:af:bf:1e:65:8b:8d:
91:22:1b:65:19:85:99:85:bd:24:24:52:ee:7b:b8:81:3a:2f:
eb:22:6f:78:98:69:91:77:82:80:1a:76:e1:89:79:47:b6:6b:
9a:9b:20:5d:c6:8e:4f:fa:16:74:3a:2c:e4:46:d0:74:72:7b:
54:8d:13:4d:cb:71:72:a5:7a:27:4e:8a:d5:ec:1e:d2:7c:07:
b5:4d:14:39:8d:59:a8:32:ae:21:73:9a:f4:22:e7:c1:08:2e:
57:69:2a:0c:c7:4e:cb:98:10:67:65:b2:97:c4:12:25:07:76:
f6:92:0f:93:17:34:ac:18:c8:14:6e:fb:3b:1c:3f:fc:af:6c:
6d:9e:4c:44:0a:44:f2:9a:a3:e9:b2:9b:2d:bf:d0:44:fe:6c:
b6:ff:53:f8:ce:75:7b:bc:ba:a8:f6:15:35:d4:5c:51:2c:20:
fb:24:5c:86:aa:ba:f3:dc:8a:b3:29:6a:e8:23:62:58:2c:6d:
bf:95:d0:66:31:9a:e6:1a:11:ec:e3:99:64:bc:09:7f:3b:1e:
2f:c9:17:36:07:af:1e:4c:da:65:d8:3c:77:45:4e:90:f4:f4:
4b:24:88:8f
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICNbMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDAzMzEw
NDIyMTBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDVEOEVDQjJDMzJGNUY4
MkUxMzIwMjBFQTREQzI5NENEQzE4QUQ1QzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDfnRwj22+VQwkkmgv0o8/rcFEZHNLl1w6uVcpuhDA7vKSHqzmc
/tAZ9Egtxq7yluPhmnVXBla2yEeIugwkafU5zWkbRKYF8b9gjMl//nfMuijz7Ogq
BSHHNoBqEMr1Rm8xyRsHjzCGsW9uVv5/JnSFMVg/NY2bfwMRvX/1xNI2WyjHkRCA
/Yh9s9uBj7bkLWHxeumHcWeKV7J/+GNpnjt8mHK1iPf97Uh5rX95aZVF2AsC2wTu
lY2WVx4+PeY6H2EMRRDsP+yZoyNSA3uEVMOviZn6tFvQINXuy9a0ud10thDEOOsw
eSReFkrJZYsiX0khBk7/c+zoKNMKmSkkIydBAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUXY7LLDL1+C4TICDqTcKUzcGK1cgwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1hZN0xMREwxLUM0VElD
RHFUY0tVemNHSzFjZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAGYSD6/pU2YMBzAJS628sQ/hQBVWBtur
UYgG6cRmva+/HmWLjZEiG2UZhZmFvSQkUu57uIE6L+sib3iYaZF3goAaduGJeUe2
a5qbIF3Gjk/6FnQ6LORG0HRye1SNE03LcXKleidOitXsHtJ8B7VNFDmNWagyriFz
mvQi58EILldpKgzHTsuYEGdlspfEEiUHdvaSD5MXNKwYyBRu+zscP/yvbG2eTEQK
RPKao+mymy2/0ET+bLb/U/jOdXu8uqj2FTXUXFEsIPskXIaquvPcirMpaugjYlgs
bb+V0GYxmuYaEezjmWS8CX87Hi/JFzYHrx5M2mXYPHdFTpD09EskiI8=
-----END CERTIFICATE-----
Generated at Sat May 17 19:42:14 2025 by rpki-client