Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/_kSAAbD7-ateoBQ3LRCqcBvEOho.roa
File: _kSAAbD7-ateoBQ3LRCqcBvEOho.roa (raw, json)
Hash identifier: x4gcAAI6sk1AApaYpAug6q2ELdazpUsLVIKZsdRTftM=
Subject key identifier: FE:44:80:01:B0:FB:F9:AB:5E:A0:14:37:2D:10:AA:70:1B:C4:3A:1A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5017
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_kSAAbD7-ateoBQ3LRCqcBvEOho.roa
Signing time: Sun 05 May 2024 08:54:00 +0000
ROA not before: Sun 05 May 2024 08:54:00 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20503 (0x5017)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 5 08:54:00 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FE448001B0FBF9AB5EA014372D10AA701BC43A1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fb:0a:18:ef:6e:92:19:32:14:cb:99:36:a9:
d1:d2:b9:ff:28:da:86:38:f2:cb:c0:52:36:a9:3f:
16:fc:a6:de:4a:6a:d4:2d:bb:53:90:7a:55:18:c9:
94:d9:f9:27:5c:6e:ef:8f:e2:83:6a:5c:73:b6:ec:
6c:f0:f3:d3:4f:93:61:a1:25:62:ea:d4:09:45:df:
6d:ad:03:de:c8:fa:8a:c4:49:a9:72:83:df:13:60:
96:c8:07:c7:ca:f0:86:02:81:97:15:f5:82:bf:d3:
4e:cb:0e:ec:04:cd:15:35:1f:41:85:f3:6a:5e:13:
68:78:d5:68:e4:0f:4c:f0:eb:4f:97:0a:9c:1e:12:
35:46:98:40:ee:3b:f3:ef:63:9d:93:25:79:21:07:
6e:2a:a7:da:1d:71:ee:ce:06:6d:52:d4:e2:c7:f0:
f5:f3:41:99:2e:a9:f4:e2:18:87:e9:cd:65:ce:a3:
ab:6e:bd:2a:96:9b:26:14:69:d8:9a:21:57:64:ae:
23:70:e1:b7:c4:2f:51:0e:1e:ec:8a:bd:d1:c0:aa:
81:37:2b:94:59:88:7b:6e:a7:a7:1c:4e:f1:cc:06:
b2:a5:6b:58:99:a5:b1:22:27:e5:4b:83:d0:c3:34:
26:7f:22:ff:a7:30:3f:33:9c:6b:c0:10:ef:72:72:
4a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:44:80:01:B0:FB:F9:AB:5E:A0:14:37:2D:10:AA:70:1B:C4:3A:1A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_kSAAbD7-ateoBQ3LRCqcBvEOho.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
21:cd:93:95:5b:41:31:85:1c:d3:bd:eb:fd:32:02:c8:9c:64:
14:53:eb:3a:1e:2c:58:eb:bc:1d:65:de:f4:d5:7c:bb:f8:8b:
ad:3d:46:52:72:76:ed:fa:24:7a:3d:64:44:dd:d7:78:48:f7:
0e:1a:1d:81:6f:c2:95:e0:e0:c6:c4:80:a6:64:ba:f6:3f:b5:
71:c3:67:9e:e0:7a:a0:3f:77:98:5c:1d:6f:c6:75:13:b3:e7:
7e:60:0a:bf:91:11:6d:ab:c6:d3:1e:32:3d:6a:9d:39:1e:c3:
24:db:0b:40:3a:f1:48:d3:0f:6b:2a:6e:03:9c:92:1e:a0:18:
99:de:fa:ad:67:ff:45:6b:2e:e3:e8:7b:20:f9:57:06:f1:d5:
e2:b9:04:54:e8:e4:b3:6d:d1:9d:07:d4:79:df:80:c0:22:e9:
49:5b:79:fa:7c:16:23:86:ea:40:95:23:2f:e1:22:cc:4d:e7:
3d:b8:1f:30:d4:c9:30:93:ee:f3:1a:57:be:0c:de:ad:b7:a6:
f5:e7:f5:cc:ca:9d:ec:9c:e8:7d:31:d7:d9:30:07:62:14:5d:
d0:10:67:b4:db:50:c5:8c:02:a0:2b:c0:4c:c9:1f:c5:f2:df:
fa:24:85:32:01:72:3c:e0:45:e5:1d:e8:47:fa:ef:88:f9:f0:
0c:47:ed:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 21:30:23 2025 by rpki-client