Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/inx6ed3U_oZ9RtxWIASgILs5I_E.roa
File: inx6ed3U_oZ9RtxWIASgILs5I_E.roa (raw, json)
Hash identifier: I+tORtUdBTmUSv6y8FR1DGcMy3zg+83yEdXkMvTYt7A=
Subject key identifier: 8A:7C:7A:79:DD:D4:FE:86:7D:46:DC:56:20:04:A0:20:BB:39:23:F1
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5745
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/inx6ed3U_oZ9RtxWIASgILs5I_E.roa
Signing time: Tue 14 May 2024 22:54:10 +0000
ROA not before: Tue 14 May 2024 22:54:10 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22341 (0x5745)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 14 22:54:10 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8A7C7A79DDD4FE867D46DC562004A020BB3923F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:18:c4:e5:5a:6d:e4:20:6e:6f:60:fa:1a:24:
3f:9e:8e:84:cc:3b:80:62:36:75:ca:91:ca:8a:e1:
16:b1:d6:f6:b6:80:0c:63:56:10:12:29:45:48:73:
fd:cb:bf:b9:cd:e1:dc:73:b7:53:6d:8e:c4:32:aa:
c1:ef:11:20:7c:39:9f:1b:ae:f6:eb:c9:1a:9e:ed:
ce:81:b9:7b:82:9e:46:62:88:14:e9:0b:57:4a:de:
5f:10:4a:cd:d3:20:57:12:88:08:2f:1a:34:d1:79:
a4:ce:06:4b:81:34:9c:68:fa:be:f9:52:e2:b8:0c:
c0:c2:73:74:f7:85:dc:09:32:08:05:4d:47:66:a7:
96:24:8a:00:f4:db:72:ba:85:df:0e:8c:5b:ea:62:
c9:b6:74:95:3a:e0:35:e5:50:ab:79:6a:fa:39:4e:
a3:bc:d3:1f:18:d0:10:1c:dd:63:f4:8a:58:22:10:
c3:7c:07:3b:b3:d2:b0:75:00:c9:1e:9a:ab:08:48:
5b:2b:d5:9f:ca:38:ac:35:6c:ea:4f:e1:3a:24:28:
5a:b9:fb:46:26:8d:e3:ac:a3:17:d9:df:3b:cd:27:
80:66:09:79:a6:1f:e7:85:b0:f7:63:f1:55:54:88:
68:1f:61:4d:35:9b:9d:07:09:b0:6e:91:39:a6:c7:
a0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7C:7A:79:DD:D4:FE:86:7D:46:DC:56:20:04:A0:20:BB:39:23:F1
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/inx6ed3U_oZ9RtxWIASgILs5I_E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
94:0c:c2:f6:3e:66:7c:c1:d6:8f:68:59:8b:1b:93:f8:4b:9c:
1a:2b:cd:06:0f:86:c4:4b:d8:e9:eb:ff:18:ce:3c:8e:d1:bd:
54:48:8d:64:ef:2f:e2:3d:8e:4c:9a:e7:fb:f3:00:bf:aa:b4:
67:35:7e:b6:7b:f4:7b:6a:2a:7a:08:0b:51:37:9d:9e:e9:2d:
4d:0a:fb:cf:99:86:3e:68:d8:0f:c9:6a:1a:2b:80:0c:7c:78:
56:a1:14:dc:de:5f:13:55:22:bb:db:18:40:e3:dc:41:87:99:
22:ae:af:80:cf:96:0e:67:d2:3d:9c:05:9b:29:41:ed:15:3b:
60:96:37:0b:cd:65:a8:6c:39:cd:42:ee:ed:5c:f3:0d:a9:53:
c4:b7:09:7c:6d:6e:e0:4a:86:91:10:ca:30:20:dd:90:fd:da:
84:1b:b0:ed:4c:e7:e2:22:8c:a6:86:ee:b3:b7:40:da:57:90:
77:32:f2:7f:b8:af:b9:76:25:2c:05:ce:c0:f7:8f:e7:63:25:
b8:1e:09:0a:53:7b:5a:45:33:64:e3:95:24:8e:d7:b3:73:e2:
cf:a2:6a:a4:ae:18:c3:47:b8:69:52:e5:9e:2e:f6:15:b8:32:
e7:60:44:e7:9a:a1:f6:ae:23:07:e1:72:5a:1c:2b:9f:47:e7:
d1:b2:cf:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:37:57 2025 by rpki-client