Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/hMZtZw8hQFmJGppGHf_N8H9D66g.roa
File: hMZtZw8hQFmJGppGHf_N8H9D66g.roa (raw, json)
Hash identifier: +pg3om6QDWpmaxwmq7rphKdl4PPdfeal53Du9NVC0rA=
Subject key identifier: 84:C6:6D:67:0F:21:40:59:89:1A:9A:46:1D:FF:CD:F0:7F:43:EB:A8
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4891
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/hMZtZw8hQFmJGppGHf_N8H9D66g.roa
Signing time: Thu 25 Apr 2024 08:23:19 +0000
ROA not before: Thu 25 Apr 2024 08:23:19 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18577 (0x4891)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 25 08:23:19 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=84C66D670F214059891A9A461DFFCDF07F43EBA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:76:18:6d:ed:7e:88:65:94:6c:df:df:61:76:
ab:31:b3:76:d7:60:7d:ed:37:00:d9:c3:62:20:52:
d0:57:aa:96:37:76:09:b4:b8:87:d1:16:b9:7a:b6:
cf:c1:96:d2:65:9f:31:3f:b8:e2:15:a4:6f:5b:20:
73:34:e4:c6:4c:06:a7:f7:4d:42:c4:c8:bf:b5:16:
86:19:53:17:b3:37:95:60:bc:b6:db:77:80:54:3a:
59:7f:6a:4b:b1:5e:3d:a2:c7:57:3d:52:90:5c:21:
a8:0f:81:94:57:ee:56:bc:8b:2d:7f:fd:89:17:66:
74:3e:6b:7d:e4:43:93:51:38:69:92:79:de:37:f7:
6c:ad:cd:40:6c:d6:51:14:0a:4d:a4:eb:69:59:e3:
37:b9:93:0b:8f:53:38:a3:79:48:96:ea:80:4e:68:
0a:44:d5:74:d8:23:79:e8:d2:98:ff:a4:c0:e2:8c:
95:e8:1f:0f:0a:4f:d7:ab:97:a7:ca:33:65:87:c8:
ce:06:ac:95:a0:5a:5a:82:ab:3a:1e:9e:a4:5d:73:
45:cb:37:f1:0c:41:b3:7d:40:77:93:c5:c7:ac:72:
c2:07:dd:a7:64:22:59:d7:be:f8:b0:52:73:6b:01:
7a:46:70:4a:a7:93:56:07:e3:cd:1e:fc:50:86:2e:
a6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C6:6D:67:0F:21:40:59:89:1A:9A:46:1D:FF:CD:F0:7F:43:EB:A8
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/hMZtZw8hQFmJGppGHf_N8H9D66g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
10:b3:4f:d3:a1:01:43:74:4d:f0:55:f7:66:28:1b:d7:1f:e7:
04:ed:e2:0a:20:44:06:32:a6:f7:ad:82:e7:0b:e4:a7:be:5e:
8c:88:6d:96:a0:54:8c:b5:fa:2c:15:02:37:5b:c1:31:7c:d5:
ac:cf:d6:0d:27:2c:b9:c1:92:00:2e:c9:fa:06:99:39:b2:dd:
c9:ee:93:12:81:f4:98:cc:13:96:bb:aa:1f:38:0e:4e:78:35:
01:eb:cc:41:fe:54:f8:63:63:46:f0:e1:57:84:3e:8c:ae:2c:
c7:8d:5c:56:d7:87:87:89:0e:23:76:93:91:42:b2:f6:45:5a:
87:f0:68:be:4c:2b:48:90:b8:46:d4:dc:3d:ba:2b:b8:ec:64:
23:ca:84:cf:0a:82:75:27:3a:b5:5c:31:89:81:7d:d2:c5:9b:
b8:f3:37:e9:0c:bd:a0:3d:bc:ca:a5:57:1d:dc:c0:f4:00:04:
63:be:c9:59:0d:07:3c:05:7f:51:bb:f4:23:00:cf:1b:13:a2:
0a:81:70:c7:b0:06:a4:9d:a4:e3:43:b2:aa:c6:13:4d:74:25:
95:bf:26:b9:7f:fe:13:84:a2:83:1e:ba:fc:d6:56:ba:cf:92:
eb:3d:95:1c:ae:79:75:63:d6:99:37:f2:85:65:9d:14:75:04:
43:92:ca:bd
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICSJEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MjUw
ODIzMTlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDg0QzY2RDY3MEYyMTQw
NTk4OTFBOUE0NjFERkZDREYwN0Y0M0VCQTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvdhht7X6IZZRs399hdqsxs3bXYH3tNwDZw2IgUtBXqpY3dgm0
uIfRFrl6ts/BltJlnzE/uOIVpG9bIHM05MZMBqf3TULEyL+1FoYZUxezN5VgvLbb
d4BUOll/akuxXj2ix1c9UpBcIagPgZRX7la8iy1//YkXZnQ+a33kQ5NROGmSed43
92ytzUBs1lEUCk2k62lZ4ze5kwuPUzijeUiW6oBOaApE1XTYI3no0pj/pMDijJXo
Hw8KT9erl6fKM2WHyM4GrJWgWlqCqzoenqRdc0XLN/EMQbN9QHeTxcescsIH3adk
IlnXvviwUnNrAXpGcEqnk1YH480e/FCGLqYfAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUhMZtZw8hQFmJGppGHf/N8H9D66gwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2hNWnRadzhoUUZtSkdw
cEdIZl9OOEg5RDY2Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBABCzT9OhAUN0TfBV
92YoG9cf5wTt4gogRAYypvetgucL5Ke+XoyIbZagVIy1+iwVAjdbwTF81azP1g0n
LLnBkgAuyfoGmTmy3cnukxKB9JjME5a7qh84Dk54NQHrzEH+VPhjY0bw4VeEPoyu
LMeNXFbXh4eJDiN2k5FCsvZFWofwaL5MK0iQuEbU3D26K7jsZCPKhM8KgnUnOrVc
MYmBfdLFm7jzN+kMvaA9vMqlVx3cwPQABGO+yVkNBzwFf1G79CMAzxsTogqBcMew
BqSdpONDsqrGE010JZW/Jrl//hOEooMeuvzWVrrPkus9lRyueXVj1pk38oVlnRR1
BEOSyr0=
-----END CERTIFICATE-----
Generated at Sun May 18 04:48:47 2025 by rpki-client