Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/oYcl1Gxh_Up3tSadbjVr8lHpZnI.roa
File: oYcl1Gxh_Up3tSadbjVr8lHpZnI.roa (raw, json)
Hash identifier: 7v0/LjZRmXFx/FB10mXscsaBYZ3yI7K4ElCu9kRDW7c=
Subject key identifier: A1:87:25:D4:6C:61:FD:4A:77:B5:26:9D:6E:35:6B:F2:51:E9:66:72
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 492A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/oYcl1Gxh_Up3tSadbjVr8lHpZnI.roa
Signing time: Fri 26 Apr 2024 03:23:20 +0000
ROA not before: Fri 26 Apr 2024 03:23:20 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18730 (0x492a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 26 03:23:20 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A18725D46C61FD4A77B5269D6E356BF251E96672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:95:9a:0e:02:53:79:4f:06:04:a3:29:1a:df:
df:8d:29:75:71:d8:7b:35:2a:07:ed:4e:86:bd:24:
4b:e0:5d:e1:51:24:92:d6:d3:67:68:b8:e7:f4:96:
ad:c3:26:a8:f9:3b:ea:6d:69:0c:e5:ca:a9:51:36:
5b:ca:aa:47:6e:c1:36:a9:6d:38:90:e5:33:16:84:
7a:f3:d1:d7:5f:50:92:7f:bc:53:08:60:9e:48:55:
6a:63:39:44:74:2d:88:96:02:0e:d5:e7:b1:33:44:
20:f8:79:bb:ad:cd:18:ef:90:ff:6c:54:b9:c6:7a:
29:9c:bc:03:59:60:ca:7c:ae:e0:31:80:60:88:47:
3c:67:09:90:e0:45:33:95:5f:00:a5:1b:35:4a:09:
99:95:5f:47:cf:21:79:f7:c6:8c:7d:a6:97:19:b0:
ea:fc:31:2e:71:ef:0a:27:e3:07:51:8b:b5:4f:34:
ac:f5:3e:4d:60:eb:2c:6b:31:67:f7:af:22:63:05:
e2:ba:ca:78:f2:c9:f6:24:43:e6:cd:b7:6f:14:c1:
e5:70:91:8c:45:4e:a1:f2:20:ee:34:9f:17:61:d9:
e0:c0:bb:47:66:b6:73:87:74:3f:01:13:5a:a4:2b:
1e:dc:4c:e5:1b:6d:c5:9e:c8:49:82:1e:01:72:e4:
b8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:87:25:D4:6C:61:FD:4A:77:B5:26:9D:6E:35:6B:F2:51:E9:66:72
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/oYcl1Gxh_Up3tSadbjVr8lHpZnI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
12:ac:21:0e:d9:f2:a6:46:6b:c8:52:f0:84:dd:9a:58:d6:ab:
8a:ae:63:b7:16:f4:bf:e2:05:ea:be:ac:8d:8e:b6:ba:af:2c:
5d:c5:be:5a:b6:42:a3:14:98:ef:64:9d:c2:41:5c:db:b0:bd:
93:bc:59:e9:0a:4a:f3:22:23:5b:bf:fe:62:7f:c2:57:b3:63:
bc:c3:5d:a9:28:53:e1:e0:47:e4:1a:aa:26:c4:fe:6b:94:0d:
d5:ad:34:29:d1:ff:d0:91:63:30:a7:07:e5:63:0d:dd:3d:3d:
c0:af:e0:7c:ec:27:ce:a0:5a:4c:c9:25:5c:06:f9:26:92:ac:
a1:97:e8:d2:50:49:3c:f5:0d:f6:42:10:03:6b:cb:1e:2d:42:
e6:38:98:ee:ec:f0:17:c1:d2:27:d1:02:3f:ae:39:dd:af:02:
8a:98:45:bc:3b:75:e6:0e:73:2a:13:ad:34:a6:42:e7:d6:05:
a7:30:21:26:a9:e7:1b:e3:56:8b:4a:ac:8a:55:df:06:e6:85:
4f:c6:df:96:22:72:25:eb:8f:16:a3:63:49:c6:8c:c1:25:94:
a6:86:43:36:e6:f2:9a:6d:11:2d:8d:2f:62:3e:4c:3e:71:06:
f8:4e:d1:95:31:0e:e9:f3:c0:1c:bb:c0:cf:38:68:d8:8c:ee:
20:31:ea:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 13:40:06 2025 by rpki-client