Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/_2ldQf4KUTY7QpCxqWZbTl14wkA.roa
File: _2ldQf4KUTY7QpCxqWZbTl14wkA.roa (raw, json)
Hash identifier: jIVhwhRQeZjQgD08NeqESWqxoUSZWmc/Yf2PZiOO1YU=
Subject key identifier: FF:69:5D:41:FE:0A:51:36:3B:42:90:B1:A9:66:5B:4E:5D:78:C2:40
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4E6E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_2ldQf4KUTY7QpCxqWZbTl14wkA.roa
Signing time: Fri 03 May 2024 03:53:44 +0000
ROA not before: Fri 03 May 2024 03:53:44 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20078 (0x4e6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 3 03:53:44 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FF695D41FE0A51363B4290B1A9665B4E5D78C240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ba:7d:f2:4e:67:98:a7:03:33:d0:d5:4e:ef:
fd:24:b1:5c:69:a7:0b:fd:ea:26:18:4e:f6:73:41:
9b:a2:97:2e:65:9f:79:b8:1c:29:71:5b:71:71:42:
91:b3:39:f2:ad:a2:df:fb:7d:06:bc:a1:a2:be:4f:
7b:b2:35:7c:75:35:c2:40:a0:ab:73:12:80:f5:c8:
be:09:5d:8f:3a:f7:46:0a:7e:84:c7:45:4e:01:c4:
7a:80:22:82:0c:77:cd:18:fc:ce:ef:a9:9d:02:9a:
f9:51:f6:41:82:ab:0d:ef:29:9a:0b:a2:a8:e5:5a:
f9:37:26:06:e2:3e:b9:e4:e1:21:c3:9b:d4:eb:5e:
90:67:2a:fa:03:26:44:e9:15:ec:d4:0f:d7:a6:0e:
8d:82:55:0d:7b:a3:59:48:7c:ba:31:c9:da:14:2f:
1d:8f:3d:83:c3:5c:01:e0:f1:5d:bf:60:15:ea:2b:
9a:9f:15:3e:41:0a:4c:c5:c2:f4:1d:ab:0d:55:f7:
13:ac:f8:b5:bb:29:3a:e8:2d:9f:c3:cf:96:2e:46:
32:25:c8:5b:81:97:9c:88:ae:ba:f5:f2:40:32:72:
6b:28:4f:a4:8e:ef:5a:90:bc:25:92:39:87:7e:59:
a0:94:b8:dd:c8:c3:81:19:b2:66:f8:78:06:81:45:
d8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:69:5D:41:FE:0A:51:36:3B:42:90:B1:A9:66:5B:4E:5D:78:C2:40
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_2ldQf4KUTY7QpCxqWZbTl14wkA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3a:c6:9b:04:93:3c:cd:bb:f8:4f:cb:18:0c:4c:fd:57:f0:1e:
6e:f7:57:1b:0a:d5:12:b3:86:d1:39:90:8a:d7:1f:21:96:0a:
62:15:11:df:91:63:69:b0:6d:58:4f:1e:99:02:7c:cc:4c:24:
9f:90:f0:e7:40:f9:9e:4a:c1:28:19:a9:cf:0c:46:2c:11:3f:
fd:e8:e4:4c:6a:2e:f7:f2:b2:80:61:4c:5e:3d:5f:63:e0:bb:
67:99:08:5c:55:ce:7a:be:a0:13:19:7c:88:41:c1:d1:df:95:
99:73:fd:59:9b:bb:58:84:58:1d:cd:83:e7:dc:95:5d:8e:6a:
b9:a8:f0:a6:f4:33:fa:85:e9:5d:25:28:f5:35:f8:4a:a8:17:
06:f7:6c:be:0d:6a:a6:b0:61:16:37:f6:c6:aa:6e:a6:88:92:
22:53:6d:b1:e9:13:3c:7e:33:8e:4d:5f:4e:2a:54:0f:dd:1a:
36:3f:6c:db:b4:f2:76:20:a8:7f:e6:cf:14:2d:60:10:31:f0:
cb:b5:f9:4b:e4:1c:38:24:86:bf:c5:51:88:3f:6c:68:f4:08:
c3:9f:67:90:e3:62:68:e2:45:10:bd:16:ff:ea:44:87:c5:e0:
0d:3d:5a:ac:e0:b1:36:cd:c7:a8:93:ac:92:8d:2d:74:a9:ea:
8a:b9:3f:45
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICTm4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDMw
MzUzNDRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEZGNjk1RDQxRkUwQTUx
MzYzQjQyOTBCMUE5NjY1QjRFNUQ3OEMyNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBun3yTmeYpwMz0NVO7/0ksVxppwv96iYYTvZzQZuily5ln3m4
HClxW3FxQpGzOfKtot/7fQa8oaK+T3uyNXx1NcJAoKtzEoD1yL4JXY8690YKfoTH
RU4BxHqAIoIMd80Y/M7vqZ0CmvlR9kGCqw3vKZoLoqjlWvk3JgbiPrnk4SHDm9Tr
XpBnKvoDJkTpFezUD9emDo2CVQ17o1lIfLoxydoULx2PPYPDXAHg8V2/YBXqK5qf
FT5BCkzFwvQdqw1V9xOs+LW7KTroLZ/Dz5YuRjIlyFuBl5yIrrr18kAycmsoT6SO
71qQvCWSOYd+WaCUuN3Iw4EZsmb4eAaBRdinAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU/2ldQf4KUTY7QpCxqWZbTl14wkAwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L18ybGRRZjRLVVRZN1Fw
Q3hxV1piVGwxNHdrQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAOsabBJM8zbv4T8sYDEz9V/AebvdXGwrV
ErOG0TmQitcfIZYKYhUR35FjabBtWE8emQJ8zEwkn5Dw50D5nkrBKBmpzwxGLBE/
/ejkTGou9/KygGFMXj1fY+C7Z5kIXFXOer6gExl8iEHB0d+VmXP9WZu7WIRYHc2D
59yVXY5quajwpvQz+oXpXSUo9TX4SqgXBvdsvg1qprBhFjf2xqpupoiSIlNtsekT
PH4zjk1fTipUD90aNj9s27TydiCof+bPFC1gEDHwy7X5S+QcOCSGv8VRiD9saPQI
w59nkONiaOJFEL0W/+pEh8XgDT1arOCxNs3HqJOsko0tdKnqirk/RQ==
-----END CERTIFICATE-----
Generated at Sun May 18 03:32:10 2025 by rpki-client