Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ZuGiTRf12Q3FxuVMK4E2Ogi4I8s.roa
File: ZuGiTRf12Q3FxuVMK4E2Ogi4I8s.roa (raw, json)
Hash identifier: aaZjxOnBgzdlH3UsaSutSWDpdjEj/muLZtxG4JmN9oo=
Subject key identifier: 66:E1:A2:4D:17:F5:D9:0D:C5:C6:E5:4C:2B:81:36:3A:08:B8:23:CB
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5756
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ZuGiTRf12Q3FxuVMK4E2Ogi4I8s.roa
Signing time: Wed 15 May 2024 00:54:10 +0000
ROA not before: Wed 15 May 2024 00:54:10 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22358 (0x5756)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 15 00:54:10 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=66E1A24D17F5D90DC5C6E54C2B81363A08B823CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:35:21:4a:62:19:8c:d2:13:3a:00:0b:fc:66:
69:d4:9e:6b:f8:26:2a:d8:ef:11:34:68:3b:37:17:
fd:29:b1:85:03:c8:b8:fe:aa:71:0e:ed:82:ac:84:
29:d3:dc:8a:78:d6:26:d1:83:2a:fd:6a:84:f4:c5:
0b:01:ce:3b:2f:5d:b4:c0:60:1f:bf:85:47:ed:bd:
19:6a:fd:6c:9b:18:3e:55:a8:96:9d:47:7a:a3:74:
61:a7:99:d7:09:00:e1:37:ea:25:7f:78:91:06:f3:
32:84:58:6a:e4:5b:20:d2:55:20:3a:b3:86:a2:54:
91:2d:30:65:d5:05:f0:80:5a:b7:87:4f:1a:45:a3:
87:58:cb:d5:bd:b9:da:1b:61:20:43:e1:7c:30:57:
36:e6:71:29:dc:11:ee:fb:f2:37:08:19:ad:b7:58:
b9:7d:13:96:b0:6b:98:3b:2c:b7:ef:c6:b3:42:1f:
97:9b:43:44:97:2c:ec:50:7e:45:5f:43:b1:38:65:
43:31:e1:cb:54:42:fe:42:fd:30:4b:0e:df:be:0c:
58:28:3b:ed:56:9a:20:7d:2b:a6:c7:33:22:9d:42:
d2:5c:62:23:1a:66:b4:c1:4d:96:c4:00:2b:93:3b:
ca:d9:17:23:5c:01:70:79:18:c5:ea:0c:19:43:aa:
f2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E1:A2:4D:17:F5:D9:0D:C5:C6:E5:4C:2B:81:36:3A:08:B8:23:CB
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ZuGiTRf12Q3FxuVMK4E2Ogi4I8s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
87:0e:d8:77:69:0b:8a:e3:c1:fc:e2:15:9b:93:e7:2f:af:0e:
a0:5c:32:fd:bf:a9:b5:9d:19:68:ab:7f:56:95:16:42:8c:8b:
97:3c:e5:44:64:62:0b:8b:90:a2:d4:11:91:2b:1a:97:03:42:
34:fe:51:df:0e:a2:9a:f8:73:0f:c0:92:4e:5c:50:bb:20:69:
e6:c5:92:29:b1:71:97:77:ef:ff:ac:43:1f:cc:78:5d:3a:23:
b7:91:39:ed:cd:b8:9d:4e:92:26:95:de:b6:09:05:ea:71:b1:
fd:3e:7a:df:55:28:18:2d:f9:18:dd:a8:f2:c5:d7:a6:4c:53:
08:6b:7e:72:f8:c8:a7:99:f2:46:fe:63:f2:72:57:f0:83:08:
f1:8a:31:57:16:20:6d:25:b2:f7:42:2b:65:b6:e9:db:dd:12:
80:6d:cb:67:13:5f:a2:64:6a:a7:d9:c8:a5:4c:c3:31:ef:0b:
2b:46:b4:02:b7:58:56:88:9a:84:f5:0b:04:bc:eb:5a:48:d0:
d3:39:8c:62:05:15:99:3e:f3:dc:09:e1:f4:e9:8b:c7:a6:f5:
ef:57:25:29:c4:81:85:36:c8:05:96:0d:df:b6:1e:28:9b:d4:
b3:99:72:f4:61:78:ed:91:f1:52:67:81:45:0a:51:71:30:75:
8b:ea:63:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:34:14 2025 by rpki-client