Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/aJAAFszaWgnwusCaxy5JcwayeDc.roa
File: aJAAFszaWgnwusCaxy5JcwayeDc.roa (raw, json)
Hash identifier: ogN+HX8ZuIYiXi/xJV++jEBKQI5rxyvZU0qz/gEw30E=
Subject key identifier: 68:90:00:16:CC:DA:5A:09:F0:BA:C0:9A:C7:2E:49:73:06:B2:78:37
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5063
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/aJAAFszaWgnwusCaxy5JcwayeDc.roa
Signing time: Sun 05 May 2024 18:24:03 +0000
ROA not before: Sun 05 May 2024 18:24:03 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20579 (0x5063)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 5 18:24:03 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=68900016CCDA5A09F0BAC09AC72E497306B27837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:20:d0:4b:91:4d:b2:dd:1e:70:74:e9:0e:da:
b6:6e:dc:b3:25:a2:a1:e4:db:cb:c0:fe:3a:c2:14:
5d:19:6a:c9:3c:38:dd:53:21:ab:f6:a3:fe:fc:ad:
ea:94:86:95:2d:04:f4:4b:15:2a:cf:03:57:f8:44:
c0:d7:da:1b:16:38:8e:a4:c3:05:be:b8:e6:00:03:
ef:9a:8e:18:63:bc:24:1a:12:c0:74:c1:f7:2f:d5:
10:cc:d1:0d:40:cc:37:14:5e:ba:ef:0a:3e:61:9f:
9c:da:8f:78:c6:7a:4b:24:c0:26:eb:7a:39:89:b0:
86:5c:64:b1:4c:b4:86:95:1b:6c:fc:23:f4:45:d3:
32:c2:6a:98:16:47:db:89:ee:50:1b:7d:d5:c1:49:
ab:10:5b:97:fe:a3:d3:f1:d5:d9:3a:fe:3d:36:aa:
0b:69:c3:be:24:e1:37:9b:15:fb:6e:d5:c0:b1:84:
dc:d0:1e:ac:01:62:c2:6b:de:8d:4c:26:a8:a3:57:
e5:75:0b:92:57:c2:01:2b:64:dc:a0:4a:55:cc:03:
3f:79:c8:55:87:61:64:7f:33:69:79:ea:51:19:a9:
fd:cd:7a:e5:2d:3a:00:6c:6d:92:89:49:66:3d:80:
9c:c2:6c:01:3e:72:d9:50:20:2e:95:db:92:ce:d3:
c1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:90:00:16:CC:DA:5A:09:F0:BA:C0:9A:C7:2E:49:73:06:B2:78:37
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/aJAAFszaWgnwusCaxy5JcwayeDc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
4e:3c:6e:bb:1b:9b:e1:1f:04:f5:33:62:da:3b:07:ee:43:ac:
e2:38:94:ec:d8:bb:b4:c1:a9:21:e4:6b:63:1f:c5:f0:2d:f2:
b0:f4:d4:a7:40:a9:88:dc:3f:3c:89:3a:b8:3e:85:70:dc:82:
bf:42:ce:52:cb:3f:d1:dc:9b:15:9d:a2:5d:5d:d8:f8:c3:21:
fc:70:71:3b:fb:17:54:25:82:e1:be:bf:fc:1c:8c:53:79:68:
cc:4b:70:2a:ef:b3:c7:c7:db:43:bd:74:a3:41:8e:92:bd:89:
4e:b4:15:73:29:5c:b4:44:9f:07:c9:82:87:ac:97:3c:75:f6:
e4:8b:76:b2:97:9a:6a:5d:a9:ce:dd:9d:de:d3:bd:b1:7b:1c:
24:d2:bd:df:01:ea:c5:2c:b2:73:79:58:24:6a:27:15:28:3d:
6b:ea:62:0e:73:37:47:69:72:38:fe:e0:07:ac:2c:5e:a0:2f:
1c:87:80:61:35:2e:19:19:e7:a1:46:ee:f1:c3:8a:d4:f4:79:
2c:5e:65:2e:5f:30:09:6a:7c:ea:e8:b4:6b:ee:f1:98:c4:3a:
b7:cd:04:cf:b4:fa:57:37:e4:0e:da:9b:db:42:de:7d:26:41:
94:de:3d:cf:56:8e:e0:97:96:1d:bb:e0:78:af:54:f1:b6:ed:
91:fe:42:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 02:02:47 2025 by rpki-client