Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ZXEGEVzN7IePk2MbWOUKwCR8VsY.roa
File: ZXEGEVzN7IePk2MbWOUKwCR8VsY.roa (raw, json)
Hash identifier: jykw0iFatgo/nl2DxId9Xw2tB9uEP4W/w1Zmce8gYPk=
Subject key identifier: 65:71:06:11:5C:CD:EC:87:8F:93:63:1B:58:E5:0A:C0:24:7C:56:C6
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4E8F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ZXEGEVzN7IePk2MbWOUKwCR8VsY.roa
Signing time: Fri 03 May 2024 07:53:56 +0000
ROA not before: Fri 03 May 2024 07:53:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20111 (0x4e8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 3 07:53:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=657106115CCDEC878F93631B58E50AC0247C56C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:08:cb:61:9a:2d:07:61:21:95:e6:b4:b3:c4:
dc:c4:c6:1d:d5:c9:01:1d:4f:09:e3:fb:67:c0:88:
a9:14:22:2c:2b:cd:33:49:89:67:3f:e7:72:4a:cd:
64:c9:92:15:05:f2:a4:5c:d4:9a:5b:bb:3b:ce:40:
7d:de:f2:70:48:15:c2:d9:13:56:77:f2:19:98:c8:
23:31:12:fa:35:83:e1:f4:18:25:1e:8d:5d:a4:b9:
82:65:3a:ac:99:21:c2:a7:7d:33:64:2a:de:27:ed:
ac:21:4e:b9:cc:d7:a9:bc:67:34:b4:81:9b:d4:ce:
6e:dd:40:78:51:de:b2:52:50:04:01:3f:41:2c:0c:
f3:7f:04:3a:1e:40:7e:63:99:ea:29:7e:8d:a5:0a:
dd:79:83:dc:f0:05:4d:5e:71:9e:3b:be:4a:79:8d:
6a:5b:09:77:94:f2:7c:6f:03:2e:d6:95:d7:fd:45:
e2:a9:a0:ca:7d:60:86:fe:15:ad:e4:ed:a9:ea:73:
35:c2:b4:b5:5d:78:28:cc:d2:2e:a6:2c:43:11:48:
91:c8:df:90:25:75:4c:ab:40:06:60:2b:b2:37:86:
4c:2c:12:20:54:9f:eb:fc:4c:84:19:0b:61:3b:3a:
4e:d7:2b:ba:79:f1:d2:c0:0e:98:d3:04:43:46:14:
d3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:71:06:11:5C:CD:EC:87:8F:93:63:1B:58:E5:0A:C0:24:7C:56:C6
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ZXEGEVzN7IePk2MbWOUKwCR8VsY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
18:89:2e:33:a3:c0:d5:30:e3:6a:d0:52:78:0f:e9:67:8f:65:
21:1a:41:93:a3:66:bd:95:aa:79:34:5d:50:03:19:8c:d5:40:
cd:97:b7:36:ac:3e:eb:40:a0:d1:bd:cc:79:91:bb:74:68:f8:
89:77:94:5c:76:ba:a8:4a:13:04:19:e7:37:4f:1c:43:df:76:
04:0a:e6:1b:21:03:51:62:6e:0e:f6:22:a2:c4:00:0f:fb:c8:
c5:91:9a:4a:5d:d3:73:a0:c8:28:e7:dc:4e:8a:45:8b:98:f7:
d2:32:7f:4d:73:34:38:31:ac:90:a5:a6:01:9f:17:29:75:e4:
62:be:12:a0:7b:14:5b:0f:8a:d2:dc:83:98:73:ca:39:b2:24:
c8:70:5e:e1:97:d5:5a:1b:ba:0f:f4:d2:d9:0f:49:e6:48:69:
0a:61:d6:3d:d4:14:d1:30:0a:2f:b2:ec:2e:ac:f4:b9:16:aa:
b6:04:cf:50:4a:4f:fc:66:d8:82:b3:f6:df:a2:17:af:c2:c0:
76:ee:ce:f3:04:7c:bc:af:c3:2c:80:74:42:66:2d:fa:41:50:
33:0c:27:60:dc:54:cc:81:db:be:98:2e:2a:d0:86:72:35:8a:
e7:27:ca:cd:15:54:37:d5:26:36:9e:d8:35:4f:e0:bd:a7:30:
dc:eb:73:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:54:07 2025 by rpki-client