Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ZmIfzRiyu1rR9GuH8USZftj-xSQ.roa
File: ZmIfzRiyu1rR9GuH8USZftj-xSQ.roa (raw, json)
Hash identifier: FKfMSSqgHxUUe+dD9qWfQ66UNddnuomiyPuat4w2k84=
Subject key identifier: 66:62:1F:CD:18:B2:BB:5A:D1:F4:6B:87:F1:44:99:7E:D8:FE:C5:24
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5442
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ZmIfzRiyu1rR9GuH8USZftj-xSQ.roa
Signing time: Fri 10 May 2024 22:24:25 +0000
ROA not before: Fri 10 May 2024 22:24:25 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21570 (0x5442)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 10 22:24:25 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=66621FCD18B2BB5AD1F46B87F144997ED8FEC524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4c:3b:e3:39:84:23:85:e0:2e:17:c7:52:9c:
8e:3f:52:49:28:84:26:ce:fa:a5:ad:67:9d:9b:bb:
fc:10:68:85:b9:ba:9d:56:d8:86:fa:fc:83:09:13:
eb:e6:6d:d1:ae:e5:b1:94:dc:3c:9c:89:39:12:11:
5b:59:d2:c2:40:d9:c7:dd:c7:57:c1:f2:f7:12:18:
44:0a:04:8e:56:34:ab:43:91:8f:d9:86:9c:46:dd:
b4:f5:90:24:47:53:f9:bd:07:88:77:d8:99:25:78:
d6:1e:fa:c0:5d:d6:a5:ec:c5:12:23:8b:de:55:49:
7f:4b:18:a9:d0:40:50:ce:be:24:95:0e:b3:4c:22:
77:c1:6b:d9:39:2a:fc:56:37:5a:d2:73:07:ba:e0:
78:20:f2:1b:49:d1:3b:af:53:49:72:93:70:cb:54:
bb:1c:8e:24:bf:d2:ed:ce:52:ab:3f:04:10:02:04:
49:29:f2:d9:93:d2:41:7b:c2:a5:9a:ea:44:ed:9d:
53:d1:76:00:d9:48:a5:83:cb:44:fd:06:36:99:c2:
10:09:58:37:1f:be:1a:72:55:d2:26:68:07:63:ac:
c5:9d:07:c9:9c:9f:ca:de:82:8c:57:20:7b:6f:67:
93:b5:a3:4f:2d:85:6a:3a:64:80:a6:8c:e0:b9:72:
94:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:62:1F:CD:18:B2:BB:5A:D1:F4:6B:87:F1:44:99:7E:D8:FE:C5:24
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ZmIfzRiyu1rR9GuH8USZftj-xSQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5a:9c:a1:27:4d:b2:19:66:d3:d6:cf:f8:50:81:fb:b9:fd:c3:
ba:da:9d:3f:e7:f1:1d:d7:8d:8a:69:38:b1:6f:af:f5:d8:97:
fa:18:c9:3a:64:7e:9a:f6:55:8e:83:c2:b8:94:24:74:95:ac:
74:41:6b:85:1e:15:c3:ee:a3:0a:41:d4:9e:13:2a:25:a4:e9:
6e:e4:26:91:bd:0a:f1:b9:90:6d:26:4a:ed:a6:02:47:e9:fc:
49:1a:1e:dc:9a:6e:3d:00:26:c5:ed:e0:ce:6b:b8:f3:a4:16:
90:ad:32:62:f3:ba:6e:46:e3:92:ec:33:9c:22:9d:aa:a0:a5:
96:38:03:eb:a3:ce:5c:c6:a5:df:0f:40:35:9d:2b:da:41:d8:
16:6d:9b:bd:ee:44:ec:6a:c4:ac:71:94:c7:dc:af:d0:3f:2c:
0c:2f:89:d1:6f:61:2c:d9:df:10:3a:35:52:57:8c:69:fc:27:
81:5d:fc:ee:bc:43:ba:29:9e:35:89:a4:81:b0:9a:28:d4:0b:
43:75:d9:0f:d9:f7:fa:37:5f:2d:fb:54:20:9f:13:05:82:64:
21:da:66:b0:62:f1:1c:a4:e2:27:2e:e7:11:47:ba:5d:b5:13:
ec:fa:98:86:29:af:37:2c:66:0a:28:27:e7:3d:d1:cb:e9:54:
fb:ad:fa:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 22:40:10 2025 by rpki-client