Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/nQZ3HPgDxYiMwo1BrA2BvQqj_pY.roa
File: nQZ3HPgDxYiMwo1BrA2BvQqj_pY.roa (raw, json)
Hash identifier: QlFo/dd7ej4rMecpx4W3prYabQa+1tmsRGS9++xqUXc=
Subject key identifier: 9D:06:77:1C:F8:03:C5:88:8C:C2:8D:41:AC:0D:81:BD:0A:A3:FE:96
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4ADA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nQZ3HPgDxYiMwo1BrA2BvQqj_pY.roa
Signing time: Sun 28 Apr 2024 09:23:40 +0000
ROA not before: Sun 28 Apr 2024 09:23:40 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19162 (0x4ada)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 28 09:23:40 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9D06771CF803C5888CC28D41AC0D81BD0AA3FE96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:37:c0:a5:f0:f3:47:d4:63:2b:5e:8c:4c:dd:
7c:8b:df:74:74:d6:6c:d7:f0:d4:12:c2:10:49:cd:
ac:fe:36:22:d1:88:23:36:1f:73:9c:2b:6d:e6:48:
d6:23:82:2f:56:1f:d2:1c:bc:e0:e7:ec:d7:d2:a9:
d1:bb:4b:ed:d4:81:27:b7:e7:de:5e:18:27:dd:db:
17:c3:cc:2e:7c:d8:70:8e:dd:ba:06:d8:3a:f1:0b:
a0:53:a4:e2:2c:04:e2:68:35:ea:a6:98:f9:66:cd:
8b:41:12:d5:97:b2:c4:7c:ee:a9:d4:e6:16:d6:d0:
37:57:13:b3:ee:b8:4f:47:9e:4a:d5:76:8a:b4:1f:
9f:c3:25:08:c3:4b:01:3a:72:d6:36:dd:35:04:82:
f5:11:ea:58:c0:0a:c9:c0:48:63:e3:da:a2:6a:56:
19:51:6c:d8:81:d8:79:1c:72:b7:61:40:ce:12:6d:
3d:45:e5:c4:48:54:6c:c3:bb:7f:9b:1b:46:56:93:
35:50:b5:87:c8:98:f7:37:a7:6e:9c:b5:9e:7a:a7:
5d:0f:c5:12:0b:87:7c:c6:bd:cf:05:70:2e:11:ad:
e4:1e:83:f8:55:c6:4f:89:da:9b:83:53:6d:3d:8c:
4f:89:62:6c:0a:9e:29:07:5f:52:98:07:c3:15:a1:
0f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:06:77:1C:F8:03:C5:88:8C:C2:8D:41:AC:0D:81:BD:0A:A3:FE:96
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nQZ3HPgDxYiMwo1BrA2BvQqj_pY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
32:e2:19:7e:5e:7f:f6:1a:3e:21:26:86:5f:ca:86:63:73:55:
9c:cb:be:54:f0:ab:69:79:96:ce:e3:d8:d8:5d:e7:ae:d6:4f:
8b:86:e3:1e:25:f7:c0:86:22:e1:a6:00:fb:8e:55:f6:75:fa:
b3:f5:13:e2:ff:72:dd:53:12:78:13:6b:85:80:e1:ed:65:aa:
ce:22:23:ba:9c:94:36:fe:dd:f4:04:30:91:7b:38:09:09:97:
79:83:ee:ce:db:9a:96:a3:c2:c5:24:be:6a:0f:23:57:3c:8c:
df:37:82:4a:b2:7a:ca:45:72:80:fa:6e:30:79:dd:41:96:63:
12:60:b2:24:3e:2c:bd:3d:a1:fa:73:a5:56:2f:a9:26:c2:3b:
4b:65:22:2f:63:0c:27:7d:28:c1:1e:74:d6:a7:5a:e1:82:09:
a3:0d:29:9f:c6:ba:13:7b:3d:36:7a:bf:a8:57:ca:1c:9b:cc:
18:a3:ab:f8:af:68:9f:8d:3f:07:8e:d8:78:1b:4c:e9:d2:d5:
8e:cc:df:74:9e:59:53:7d:1e:5a:19:1b:3a:ef:c6:9b:77:19:
3b:45:5b:a0:12:ef:8f:71:7d:d7:7e:5c:c0:b4:de:e1:55:a1:
c5:1e:b9:98:dc:5c:99:33:25:af:15:92:2a:de:83:0e:06:70:
52:c8:d7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 12:22:35 2025 by rpki-client