Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ZX2l-FbFvgvbJUr5WMYL8TGaxZI.roa
File: ZX2l-FbFvgvbJUr5WMYL8TGaxZI.roa (raw, json)
Hash identifier: hl+Iafmt18YhQDcIGpJRLrf+AZZ8kYLhvgZsMzkTef4=
Subject key identifier: 65:7D:A5:F8:56:C5:BE:0B:DB:25:4A:F9:58:C6:0B:F1:31:9A:C5:92
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 521B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ZX2l-FbFvgvbJUr5WMYL8TGaxZI.roa
Signing time: Wed 08 May 2024 01:31:52 +0000
ROA not before: Wed 08 May 2024 01:31:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21019 (0x521b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 8 01:31:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=657DA5F856C5BE0BDB254AF958C60BF1319AC592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ed:ae:26:19:72:ef:64:2b:66:f8:b4:7b:d7:
4f:1b:c9:ab:eb:44:f9:9e:58:bc:d4:c1:a3:bd:7b:
b7:28:6f:5a:9c:e9:a3:74:85:23:29:bb:61:7f:7c:
45:7d:46:63:e6:5a:fb:0c:24:9f:c0:9f:91:ec:75:
43:57:cb:0d:60:ec:d6:34:25:c6:f7:53:97:3c:2f:
30:ab:44:09:2d:f4:61:3d:1a:da:88:0a:26:d8:fd:
dc:6f:e4:4e:6f:c6:fe:01:86:5d:55:0c:27:ce:23:
3f:80:09:36:5b:9d:c8:de:ac:a1:ee:7d:0c:26:a3:
76:18:9d:db:cc:1b:04:80:94:8a:c2:68:0f:fe:5a:
4b:20:c6:02:bd:0c:e4:ec:ec:f0:18:49:48:60:0a:
1c:94:17:35:f7:c7:eb:db:96:dd:bb:07:f4:d7:4b:
e5:5d:cc:13:90:9d:f8:c6:eb:d6:fc:25:1e:d3:1f:
13:36:c9:a1:98:64:d9:9f:e8:17:42:1b:7d:ea:96:
e9:18:34:33:48:90:7c:fb:67:a4:e5:33:23:fa:67:
59:b4:75:4b:fc:93:a0:5a:14:8d:bf:3a:1d:7f:db:
12:3e:88:56:04:0d:1c:e6:81:b4:39:44:07:06:f9:
40:6f:1e:df:d7:cb:87:4a:69:ac:28:0d:d6:ad:ef:
b1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7D:A5:F8:56:C5:BE:0B:DB:25:4A:F9:58:C6:0B:F1:31:9A:C5:92
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ZX2l-FbFvgvbJUr5WMYL8TGaxZI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
7c:3c:43:1e:fc:93:52:47:71:19:92:dd:18:d7:b4:db:d7:1e:
c6:04:4f:28:4e:9b:f4:11:05:7e:15:68:2f:62:e2:91:a5:ed:
38:df:00:1f:4d:be:85:22:2b:91:4f:ca:05:d9:2b:88:db:82:
db:b7:fd:37:a3:d3:1b:de:f2:ff:ed:dc:cc:3d:d9:9e:93:86:
56:ce:58:ac:1e:38:af:79:af:95:60:02:ef:f2:2f:98:40:78:
1f:f2:74:e4:6f:1c:3e:de:c8:c9:0e:2b:9a:80:dc:fd:24:92:
2d:08:fb:6b:46:f7:45:82:e3:82:0f:4b:a3:52:fd:19:1a:26:
21:16:f0:9a:54:9a:19:8f:5c:da:3c:d8:27:86:90:7f:db:49:
10:51:b2:77:d5:d2:f6:3a:b0:e0:08:fa:3a:2d:37:dc:1e:ea:
e8:c4:f6:17:d9:4d:64:51:ea:5d:ca:a7:f8:8b:fb:ce:34:fd:
b0:d4:94:3b:62:8f:4e:09:b4:99:9a:38:25:39:ce:d5:27:54:
7e:dd:87:b4:72:04:3f:62:69:c8:09:ac:cd:20:d0:b9:d1:f8:
88:1b:15:c3:47:7f:78:a7:55:5d:0e:e5:f9:74:87:17:c3:ee:
86:f3:97:7a:5f:31:e7:c6:08:81:53:eb:3e:f4:dc:91:71:6d:
b9:b0:29:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 01:51:57 2025 by rpki-client