Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/haO8jVA_Mk6L1B1QBe8P03oyGeA.roa
File: haO8jVA_Mk6L1B1QBe8P03oyGeA.roa (raw, json)
Hash identifier: nige324F9CMv+H+xjxzIsx7O1kG+x0wMItHA9IyH6kI=
Subject key identifier: 85:A3:BC:8D:50:3F:32:4E:8B:D4:1D:50:05:EF:0F:D3:7A:32:19:E0
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 51E2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/haO8jVA_Mk6L1B1QBe8P03oyGeA.roa
Signing time: Tue 07 May 2024 18:23:53 +0000
ROA not before: Tue 07 May 2024 18:23:53 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20962 (0x51e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 7 18:23:53 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=85A3BC8D503F324E8BD41D5005EF0FD37A3219E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a7:76:5a:de:7a:65:df:53:95:fd:c5:d5:e6:
90:30:25:5d:14:72:39:47:83:a9:03:8c:ce:4b:f0:
00:62:3b:13:e5:f6:80:b3:3f:3b:3f:71:34:3e:b1:
6e:de:8b:c7:bf:b9:98:6b:9a:30:81:c4:25:41:59:
a9:5b:b4:5f:e4:06:bc:d7:78:12:0e:a1:34:e4:33:
e8:ba:a3:b0:de:56:6c:6e:ac:6f:f6:de:79:da:66:
68:ed:81:28:a7:5a:da:77:45:0f:f9:d1:ad:5c:7e:
31:2f:a2:e4:96:9d:a1:c3:d7:5c:7a:8e:c4:b3:62:
99:39:f1:cb:b5:ae:ab:02:ee:98:f1:89:00:15:03:
bf:7f:17:67:f1:f8:76:25:5e:2f:d1:d9:b7:c2:87:
78:27:e9:d7:f8:be:f3:41:37:47:f2:97:4e:6e:b2:
5c:84:78:e7:3f:c0:33:f7:60:e5:b5:48:f5:40:d1:
61:fe:3a:67:86:bf:0c:fd:fd:d0:2b:be:06:4c:d9:
00:12:4f:81:76:b2:76:7f:8c:b4:2f:4f:52:73:5f:
84:ce:3b:73:1e:90:36:0c:9a:6a:99:85:fc:7e:aa:
63:63:65:e9:57:df:70:49:4d:59:8c:44:83:03:a9:
c6:67:60:89:36:ae:73:17:55:be:c7:09:8c:fe:ae:
0c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A3:BC:8D:50:3F:32:4E:8B:D4:1D:50:05:EF:0F:D3:7A:32:19:E0
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/haO8jVA_Mk6L1B1QBe8P03oyGeA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5f:91:a7:51:92:78:64:8d:85:91:63:ce:d0:a9:df:c0:59:8d:
13:68:c4:67:a8:63:a4:d2:b3:85:c3:33:ae:a6:f9:44:cd:9f:
1b:e9:81:d7:92:88:c1:1e:19:e0:62:88:4a:ac:32:a0:80:6a:
60:32:b8:4a:b2:a0:0c:f3:55:50:33:6f:6f:75:c3:17:37:be:
49:d7:2c:73:98:a9:59:32:51:88:de:73:c9:34:a9:07:87:1c:
59:81:d9:37:a1:61:0c:c7:3b:61:c0:32:6c:bf:a9:3f:ee:bc:
e5:56:0d:1b:4a:5a:3f:46:f4:99:06:4d:9a:f7:28:06:81:14:
dc:08:99:5f:35:98:17:d5:76:00:48:6d:bd:a1:3d:25:6a:fb:
96:8b:0f:db:99:53:8b:15:4e:57:7a:23:2a:43:99:74:3c:4b:
89:a0:8e:6f:cc:10:69:ec:52:64:52:15:cc:ea:ef:4b:25:24:
3a:63:74:58:fc:37:8b:36:89:b3:8f:f4:2b:99:1f:1b:2f:df:
e7:12:c1:2a:c1:3b:e7:c1:73:94:25:67:49:c2:6d:f0:a6:62:
da:01:c4:8b:51:3c:a8:8b:c4:dd:30:e5:b2:a1:a5:2f:3b:83:
b3:26:92:bf:07:8e:23:7c:b0:88:89:bb:cb:89:67:11:56:a3:
0a:e2:e0:09
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICUeIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDcx
ODIzNTNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDg1QTNCQzhENTAzRjMy
NEU4QkQ0MUQ1MDA1RUYwRkQzN0EzMjE5RTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYp3Za3npl31OV/cXV5pAwJV0UcjlHg6kDjM5L8ABiOxPl9oCz
Pzs/cTQ+sW7ei8e/uZhrmjCBxCVBWalbtF/kBrzXeBIOoTTkM+i6o7DeVmxurG/2
3nnaZmjtgSinWtp3RQ/50a1cfjEvouSWnaHD11x6jsSzYpk58cu1rqsC7pjxiQAV
A79/F2fx+HYlXi/R2bfCh3gn6df4vvNBN0fyl05uslyEeOc/wDP3YOW1SPVA0WH+
OmeGvwz9/dArvgZM2QAST4F2snZ/jLQvT1JzX4TOO3MekDYMmmqZhfx+qmNjZelX
33BJTVmMRIMDqcZnYIk2rnMXVb7HCYz+rgx1AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUhaO8jVA/Mk6L1B1QBe8P03oyGeAwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2hhTzhqVkFfTWs2TDFC
MVFCZThQMDNveUdlQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAX5GnUZJ4ZI2FkWPO0KnfwFmNE2jEZ6hj
pNKzhcMzrqb5RM2fG+mB15KIwR4Z4GKISqwyoIBqYDK4SrKgDPNVUDNvb3XDFze+
Sdcsc5ipWTJRiN5zyTSpB4ccWYHZN6FhDMc7YcAybL+pP+685VYNG0paP0b0mQZN
mvcoBoEU3AiZXzWYF9V2AEhtvaE9JWr7losP25lTixVOV3ojKkOZdDxLiaCOb8wQ
aexSZFIVzOrvSyUkOmN0WPw3izaJs4/0K5kfGy/f5xLBKsE758FzlCVnScJt8KZi
2gHEi1E8qIvE3TDlsqGlLzuDsyaSvweOI3ywiIm7y4lnEVajCuLgCQ==
-----END CERTIFICATE-----
Generated at Sat May 17 22:52:09 2025 by rpki-client