Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/gWIC2B3LYWIgFWBukzPDx6nKVRE.roa
File: gWIC2B3LYWIgFWBukzPDx6nKVRE.roa (raw, json)
Hash identifier: opQ1wxE/neJ2TGoBnyfu4NDEwKbKpYoGCmvIhCZzux8=
Subject key identifier: 81:62:02:D8:1D:CB:61:62:20:15:60:6E:93:33:C3:C7:A9:CA:55:11
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5186
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/gWIC2B3LYWIgFWBukzPDx6nKVRE.roa
Signing time: Tue 07 May 2024 06:53:52 +0000
ROA not before: Tue 07 May 2024 06:53:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20870 (0x5186)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 7 06:53:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=816202D81DCB61622015606E9333C3C7A9CA5511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:40:35:88:7b:a7:d5:46:fd:2c:cf:0f:ac:15:
d2:d9:e6:25:09:4e:03:52:3b:97:b2:2a:16:26:2f:
8f:74:3b:c6:71:f5:c0:21:b8:de:79:d7:27:bc:ab:
1d:ef:e5:13:da:d2:91:11:70:82:39:c2:ad:2e:19:
ae:1d:08:fe:9a:83:52:bc:ae:4c:8a:10:29:0c:32:
3f:c8:f4:54:a4:56:51:f3:80:75:d4:4c:4b:f6:86:
e7:7f:44:d3:a9:00:40:9b:a9:c6:66:e2:0f:84:4b:
7c:9a:11:52:e5:48:f4:c5:7c:e5:f9:a0:65:a6:1e:
2c:cb:d8:49:5b:d8:2c:17:c6:0a:44:38:5c:0f:bb:
5f:df:bd:84:cf:74:04:4c:7c:ef:fc:86:b3:aa:b3:
13:fe:ca:7d:d5:5e:af:a3:a8:f1:1d:1e:8d:10:d3:
69:72:82:c2:70:ff:b6:e8:30:04:e9:e6:94:9c:95:
a1:bc:e9:54:8e:62:ab:b9:17:88:79:9e:b8:bb:25:
6d:25:f8:2d:e1:e5:25:3c:fb:4b:96:13:20:22:f9:
4e:06:c2:0e:de:03:61:a5:36:a0:d5:eb:fc:cd:5c:
27:f0:24:24:8b:b4:8f:6d:14:b7:3b:5f:31:b2:7c:
cf:cb:5b:61:2e:92:4a:04:ed:33:76:be:6d:48:b1:
e3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:62:02:D8:1D:CB:61:62:20:15:60:6E:93:33:C3:C7:A9:CA:55:11
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/gWIC2B3LYWIgFWBukzPDx6nKVRE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
47:98:10:6f:42:06:44:f8:41:ce:32:3f:c3:93:8f:5c:60:3e:
8e:37:bc:5d:33:4b:05:38:00:a4:dd:37:7f:dd:e7:43:1b:45:
08:8b:1d:a9:c2:e8:3e:c2:c0:5d:1b:b6:7f:38:26:59:5e:63:
71:a3:af:7c:63:46:95:21:80:80:99:b0:3b:81:8f:a1:18:fd:
7f:fc:4e:4d:23:c0:80:33:1b:69:ca:b8:ac:bf:3c:c7:c2:03:
7c:80:12:48:2c:33:c0:be:17:80:f7:8c:7d:7b:0a:b3:01:28:
c2:92:78:4d:1e:cb:9b:5f:e4:d9:f3:46:78:9f:46:9a:7a:bc:
6a:76:1f:d0:d0:55:23:cc:fd:a3:d1:dd:fd:83:f0:d1:88:01:
de:50:b7:3d:b9:e5:fa:cb:66:52:ce:eb:3a:37:2d:ae:6d:ea:
01:90:90:7b:e3:5f:e8:99:03:d1:c7:c7:f7:76:84:7c:c5:c2:
51:24:5d:e0:fa:1a:28:db:52:86:53:e5:cc:c2:f7:da:65:fe:
e9:67:68:41:4b:74:44:21:c7:c5:c9:9d:b2:3c:73:09:e6:05:
2d:b6:d8:cc:7e:72:f3:37:dd:9e:0f:c1:45:b7:ad:df:fc:39:
dd:2c:6d:84:c6:d2:64:13:48:83:94:b0:a8:2c:c7:e2:72:33:
f2:c7:8c:e9
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICUYYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDcw
NjUzNTJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDgxNjIwMkQ4MURDQjYx
NjIyMDE1NjA2RTkzMzNDM0M3QTlDQTU1MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3QDWIe6fVRv0szw+sFdLZ5iUJTgNSO5eyKhYmL490O8Zx9cAh
uN551ye8qx3v5RPa0pERcII5wq0uGa4dCP6ag1K8rkyKECkMMj/I9FSkVlHzgHXU
TEv2hud/RNOpAECbqcZm4g+ES3yaEVLlSPTFfOX5oGWmHizL2Elb2CwXxgpEOFwP
u1/fvYTPdARMfO/8hrOqsxP+yn3VXq+jqPEdHo0Q02lygsJw/7boMATp5pSclaG8
6VSOYqu5F4h5nri7JW0l+C3h5SU8+0uWEyAi+U4Gwg7eA2GlNqDV6/zNXCfwJCSL
tI9tFLc7XzGyfM/LW2EukkoE7TN2vm1IseMHAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUgWIC2B3LYWIgFWBukzPDx6nKVREwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2dXSUMyQjNMWVdJZ0ZX
QnVrelBEeDZuS1ZSRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAR5gQb0IGRPhBzjI/w5OPXGA+jje8XTNL
BTgApN03f93nQxtFCIsdqcLoPsLAXRu2fzgmWV5jcaOvfGNGlSGAgJmwO4GPoRj9
f/xOTSPAgDMbacq4rL88x8IDfIASSCwzwL4XgPeMfXsKswEowpJ4TR7Lm1/k2fNG
eJ9Gmnq8anYf0NBVI8z9o9Hd/YPw0YgB3lC3Pbnl+stmUs7rOjctrm3qAZCQe+Nf
6JkD0cfH93aEfMXCUSRd4PoaKNtShlPlzML32mX+6WdoQUt0RCHHxcmdsjxzCeYF
LbbYzH5y8zfdng/BRbet3/w53SxthMbSZBNIg5SwqCzH4nIz8seM6Q==
-----END CERTIFICATE-----
Generated at Sun May 18 02:11:30 2025 by rpki-client