Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/fnP8UU5BaWK3rJVejlFPOryxTew.roa
File: fnP8UU5BaWK3rJVejlFPOryxTew.roa (raw, json)
Hash identifier: Dql3IuxvIvdGDT6apZ5KONtqulM5a9huCpTaYYlhSXU=
Subject key identifier: 7E:73:FC:51:4E:41:69:62:B7:AC:95:5E:8E:51:4F:3A:BC:B1:4D:EC
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4A85
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/fnP8UU5BaWK3rJVejlFPOryxTew.roa
Signing time: Sat 27 Apr 2024 22:53:31 +0000
ROA not before: Sat 27 Apr 2024 22:53:31 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19077 (0x4a85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 27 22:53:31 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=7E73FC514E416962B7AC955E8E514F3ABCB14DEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fe:ef:39:a5:5d:3e:6a:8d:5e:e6:cf:a0:70:
fb:a6:fe:fb:03:98:62:ab:16:2f:41:8e:0a:f3:79:
41:e1:0e:be:ce:a7:38:30:5f:59:58:7b:da:78:00:
46:44:37:60:7a:7d:85:b1:86:e6:64:48:15:4d:f2:
8d:53:29:8b:51:48:21:93:da:17:df:98:f2:90:84:
3e:96:b1:d7:4b:7d:99:41:76:03:b6:05:c1:4a:9f:
05:89:89:cc:4f:ef:f7:14:58:69:98:26:95:d2:a8:
58:0d:3d:46:af:d2:df:5a:04:09:ca:98:f8:10:ab:
4e:f7:7c:35:56:97:1b:b2:43:8e:ab:66:c7:de:4b:
f9:f8:a5:71:8f:8b:77:22:3b:7c:06:0d:a0:2a:a7:
90:d6:53:ee:6a:1b:e7:78:b7:70:13:aa:6c:87:1e:
f5:78:a6:af:a5:80:09:b5:34:08:91:b1:86:ae:d5:
f6:6d:51:d4:02:31:4f:f5:de:c8:91:5e:1b:ff:ff:
b3:00:67:66:bb:0a:3a:ad:52:e9:7d:2e:6b:01:07:
4c:69:70:9a:19:bc:76:f9:e6:7d:10:2f:cd:af:05:
ad:ad:2a:ee:67:40:95:cc:94:8b:7b:36:fd:8b:a6:
3c:b9:50:25:b5:ea:a7:ea:54:20:de:ea:e4:88:f4:
f1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:73:FC:51:4E:41:69:62:B7:AC:95:5E:8E:51:4F:3A:BC:B1:4D:EC
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/fnP8UU5BaWK3rJVejlFPOryxTew.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
4a:a5:ee:ee:3b:e0:56:54:0f:ec:6c:e7:cb:51:da:ee:9b:af:
ab:72:c3:bf:31:e4:95:dd:24:68:a6:6d:e1:21:ad:e0:5b:4c:
5f:9d:45:83:5c:80:72:99:67:4b:fb:dc:fc:ce:17:f3:d4:56:
2f:69:a4:d5:e8:ba:2a:27:f1:ec:2c:29:d9:a9:cb:ca:f2:6f:
d2:f4:0a:23:48:d5:34:65:33:b7:f2:68:eb:c5:fb:a9:ca:e1:
db:db:8c:f3:b2:11:52:97:68:cc:12:7e:7e:44:ec:25:ca:d9:
41:a0:4d:4a:e5:c5:af:e6:1b:30:17:df:01:5d:c4:d7:0e:1b:
40:ce:a5:6b:93:68:05:da:40:59:33:42:5a:c7:4e:94:9a:58:
f0:d2:9c:f1:80:6f:9f:9b:86:3a:11:3c:28:67:e7:a6:be:6c:
39:08:2d:a5:2e:57:8a:d5:e8:ba:a1:21:0c:cb:cc:e3:c0:33:
b4:32:79:67:1f:55:31:af:6a:31:c6:fa:e3:59:0a:a7:0c:e0:
fb:3f:09:19:4a:f8:bf:88:1a:19:9a:21:1a:92:4d:1d:87:81:
aa:a6:86:84:a7:09:45:40:f6:7d:27:00:0e:bb:b3:b9:0a:6b:
40:da:a7:a4:3b:13:9a:60:69:81:d2:23:2f:89:68:e3:1d:bb:
ed:12:59:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:53:12 2025 by rpki-client