Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/_MLyIBGaDh-49lbzN3XMyzM8ao0.roa
File: _MLyIBGaDh-49lbzN3XMyzM8ao0.roa (raw, json)
Hash identifier: si2XEfqqNhsfbYaGn+DnBEhT/VqaN7YtJFHdQbEbiek=
Subject key identifier: FC:C2:F2:20:11:9A:0E:1F:B8:F6:56:F3:37:75:CC:CB:33:3C:6A:8D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 53F9
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_MLyIBGaDh-49lbzN3XMyzM8ao0.roa
Signing time: Fri 10 May 2024 13:24:00 +0000
ROA not before: Fri 10 May 2024 13:24:00 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21497 (0x53f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 10 13:24:00 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FCC2F220119A0E1FB8F656F33775CCCB333C6A8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:96:48:aa:c5:7f:2c:3c:bd:5a:2b:ae:17:2c:
50:09:e5:6a:e4:d4:37:46:9a:b9:9b:00:98:5c:a9:
a9:79:6b:9c:1d:2b:14:97:11:f8:c5:bf:16:74:7f:
3e:63:49:ed:20:8b:fb:6b:3b:dd:e7:b9:35:35:3c:
54:9c:06:8f:87:86:93:35:12:4a:a5:65:9e:53:9a:
64:4c:0f:1c:f9:ba:59:9f:76:19:01:76:b9:f7:b0:
89:2e:e9:41:34:fc:fb:77:0e:6c:17:56:9f:19:13:
a0:53:4e:ba:71:51:e2:23:f9:7e:f2:d8:2f:7e:34:
28:69:ba:78:db:0f:66:cd:81:0c:ef:7e:2d:8d:59:
ee:35:6e:e6:0c:75:00:81:96:66:89:61:7b:fc:cc:
2c:e5:1b:f5:e3:ef:dd:1a:81:fe:5a:87:bd:b6:f8:
fe:81:f4:98:84:25:21:17:87:90:c9:32:dc:31:0e:
55:5d:95:50:dc:af:ae:8d:cd:10:7a:65:81:0c:e2:
44:68:54:a2:7a:6a:12:a9:6c:ad:bb:e2:ef:07:4a:
6e:21:9a:aa:4d:0c:82:fd:ff:07:d7:72:a2:98:df:
a3:ce:fc:27:2d:a9:0d:d2:28:bd:7e:57:6e:c5:31:
a7:30:3b:15:a6:90:89:f7:f2:5a:3c:f1:37:c8:9e:
61:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C2:F2:20:11:9A:0E:1F:B8:F6:56:F3:37:75:CC:CB:33:3C:6A:8D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_MLyIBGaDh-49lbzN3XMyzM8ao0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
7f:29:4e:9d:75:26:3c:c1:b4:c7:fa:cc:54:f8:5e:8e:54:76:
ba:91:a7:0b:e9:2a:80:5a:d4:a5:d8:ae:71:7e:84:99:8d:b1:
22:e8:1d:9b:b6:65:74:47:87:1d:3b:a6:d9:f2:08:45:d9:fe:
2e:90:55:c7:34:33:20:c8:45:f1:ca:c8:bb:6f:0b:3a:a1:a4:
99:ad:66:1d:c2:68:fa:b0:19:d5:ca:c8:b9:8d:b4:69:b1:5e:
ea:9b:93:bd:d1:55:84:93:df:10:d3:46:bb:9a:a5:c1:da:17:
df:d3:92:fd:3d:06:e6:79:cf:f0:e7:b3:e2:76:57:a3:a8:6f:
9a:22:52:bf:e0:38:96:d5:6b:9c:cb:a7:7f:16:1c:55:5b:90:
58:b6:aa:84:18:74:b2:f1:f5:0d:d2:d3:b0:f6:07:97:35:fc:
da:05:9a:62:8d:31:3a:83:19:d2:ad:62:81:24:7f:4b:9f:28:
97:5b:e4:70:18:81:70:ee:fa:5f:e0:69:67:98:10:fa:66:ea:
e3:ec:c6:5a:b2:15:b5:01:77:80:ea:6f:ea:d6:3a:b1:b3:50:
8f:80:50:34:56:ba:fb:30:2d:36:50:58:c7:e2:26:c4:14:d4:
59:3e:77:e2:67:1a:55:4b:47:d8:bd:16:54:23:d8:68:b1:6d:
82:e6:92:47
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICU/kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MTAx
MzI0MDBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEZDQzJGMjIwMTE5QTBF
MUZCOEY2NTZGMzM3NzVDQ0NCMzMzQzZBOEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDilkiqxX8sPL1aK64XLFAJ5Wrk1DdGmrmbAJhcqal5a5wdKxSX
EfjFvxZ0fz5jSe0gi/trO93nuTU1PFScBo+HhpM1EkqlZZ5TmmRMDxz5ulmfdhkB
drn3sIku6UE0/Pt3DmwXVp8ZE6BTTrpxUeIj+X7y2C9+NChpunjbD2bNgQzvfi2N
We41buYMdQCBlmaJYXv8zCzlG/Xj790agf5ah722+P6B9JiEJSEXh5DJMtwxDlVd
lVDcr66NzRB6ZYEM4kRoVKJ6ahKpbK274u8HSm4hmqpNDIL9/wfXcqKY36PO/Cct
qQ3SKL1+V27FMacwOxWmkIn38lo88TfInmFDAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQU/MLyIBGaDh+49lbzN3XMyzM8ao0wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L19NTHlJQkdhRGgtNDls
YnpOM1hNeXpNOGFvMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAH8pTp11JjzBtMf6
zFT4Xo5UdrqRpwvpKoBa1KXYrnF+hJmNsSLoHZu2ZXRHhx07ptnyCEXZ/i6QVcc0
MyDIRfHKyLtvCzqhpJmtZh3CaPqwGdXKyLmNtGmxXuqbk73RVYST3xDTRruapcHa
F9/Tkv09BuZ5z/Dns+J2V6Oob5oiUr/gOJbVa5zLp38WHFVbkFi2qoQYdLLx9Q3S
07D2B5c1/NoFmmKNMTqDGdKtYoEkf0ufKJdb5HAYgXDu+l/gaWeYEPpm6uPsxlqy
FbUBd4Dqb+rWOrGzUI+AUDRWuvswLTZQWMfiJsQU1Fk+d+JnGlVLR9i9FlQj2Gix
bYLmkkc=
-----END CERTIFICATE-----
Generated at Sat May 17 23:52:49 2025 by rpki-client