Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/djHSD-0840DKFYKh4zE4zfMwl8Q.roa
File: djHSD-0840DKFYKh4zE4zfMwl8Q.roa (raw, json)
Hash identifier: qmYAE4wirxMLxCeIoeIhUpL/G0yV4kGz7ugFhUYnOdI=
Subject key identifier: 76:31:D2:0F:ED:3C:E3:40:CA:15:82:A1:E3:31:38:CD:F3:30:97:C4
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4351
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/djHSD-0840DKFYKh4zE4zfMwl8Q.roa
Signing time: Thu 18 Apr 2024 08:22:59 +0000
ROA not before: Thu 18 Apr 2024 08:22:59 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17233 (0x4351)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 18 08:22:59 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7631D20FED3CE340CA1582A1E33138CDF33097C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:51:31:a4:58:b7:d3:6f:4c:18:f2:f5:3b:ef:
8c:cf:a5:f5:d7:ce:de:9a:5d:cd:48:7c:80:27:71:
9a:15:c5:fa:9b:08:96:57:27:fb:96:48:39:72:7d:
61:6c:2d:46:b4:fa:6d:35:95:57:51:9d:2b:17:1f:
34:01:e9:30:d6:42:a8:34:c7:b1:29:e4:9f:d3:3c:
eb:aa:0a:46:f8:de:2c:97:c8:f1:54:3b:1f:74:a0:
5a:de:3a:dd:58:f8:55:db:ac:96:f7:de:c2:35:46:
ef:9e:9a:1a:3b:88:d6:5d:d7:24:4f:05:fc:9c:a8:
e4:1c:d0:1c:5c:c6:32:71:23:7f:ac:fa:01:2b:66:
45:5a:23:b5:dd:44:77:f0:1e:43:aa:16:33:31:c7:
77:d4:de:c2:19:41:08:55:29:9b:fc:5e:80:21:61:
e7:0c:81:65:bd:33:0d:db:32:af:7c:ca:13:9d:0d:
37:cb:99:6b:99:08:ca:23:13:cf:2d:6d:0b:aa:9f:
68:4c:20:12:9f:c5:ac:03:f5:0d:b6:75:47:2b:82:
c4:c7:59:60:ae:a6:2a:10:98:9e:65:1e:b8:1e:74:
41:e6:a5:eb:05:e5:4b:5b:73:ed:eb:a1:55:ed:23:
1f:b7:77:55:0f:1f:a5:bf:0a:31:db:11:91:3b:e4:
c8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:31:D2:0F:ED:3C:E3:40:CA:15:82:A1:E3:31:38:CD:F3:30:97:C4
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/djHSD-0840DKFYKh4zE4zfMwl8Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
29:1d:21:52:61:d9:cb:04:fc:3b:db:89:6c:dd:6a:08:67:d1:
c1:a2:63:f3:ed:9a:b8:4f:c6:80:c3:5e:1f:33:0b:1d:40:dd:
07:b7:af:65:60:34:f8:f7:4d:f2:9e:f4:c6:1c:77:d9:91:26:
ac:4c:e7:ee:f6:e1:25:df:97:5f:63:80:73:55:70:74:0e:7a:
a5:45:5e:8f:86:ef:67:72:4b:c7:36:4d:79:03:6e:1b:c6:9f:
91:0a:f4:ad:b3:98:bc:94:d7:5e:45:58:01:9d:be:02:65:9c:
f6:dd:59:32:6c:5d:ed:3e:22:16:d2:aa:2b:85:9f:28:e6:6a:
7f:8e:9c:b0:4f:ec:55:dd:7f:69:ac:85:1c:31:07:b2:7b:5f:
15:85:97:6f:23:18:b2:a3:6f:80:27:3e:b8:89:72:1c:e2:29:
85:0f:29:95:34:62:e6:af:0c:4a:33:8e:a9:0e:7a:56:04:ca:
92:0e:0e:11:74:a7:55:37:92:07:0b:7c:76:9a:ac:46:c5:99:
61:e0:e7:15:a1:f0:54:10:6a:b9:d2:b7:09:9d:c6:4a:45:c0:
69:da:0d:9b:60:67:00:31:39:77:e7:cf:b0:0b:e8:96:b0:66:
43:a0:51:90:65:43:54:8e:31:e3:71:3c:c2:51:ae:21:48:4f:
eb:93:89:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:37:44 2025 by rpki-client