Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/piFXiR7b0vzgVzNFO7P5601UBV4.roa
File: piFXiR7b0vzgVzNFO7P5601UBV4.roa (raw, json)
Hash identifier: +9TnN+2WDs4kLYsBrPlyiLtGgZYB1RaUvIacVyXdtFE=
Subject key identifier: A6:21:57:89:1E:DB:D2:FC:E0:57:33:45:3B:B3:F9:EB:4D:54:05:5E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4EE9
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/piFXiR7b0vzgVzNFO7P5601UBV4.roa
Signing time: Fri 03 May 2024 19:23:54 +0000
ROA not before: Fri 03 May 2024 19:23:54 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20201 (0x4ee9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 3 19:23:54 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A62157891EDBD2FCE05733453BB3F9EB4D54055E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e5:af:d9:9b:71:5d:97:b8:87:e9:e7:45:87:
7a:e7:38:21:55:64:37:f2:f3:ee:82:18:e7:1f:ae:
4f:d0:ef:cb:56:b2:f7:cf:69:13:c1:fc:d6:f2:3b:
44:a2:ef:18:cf:bd:a4:e0:55:a0:38:f3:df:34:a8:
ad:6b:2e:2d:9f:ee:89:db:7a:67:b7:96:dd:13:bd:
f1:3d:d5:e5:5f:34:f1:67:80:de:10:90:45:25:ae:
f4:7e:57:b9:af:05:d7:17:80:c6:8b:e3:cc:39:da:
b0:43:84:2b:dc:6b:9c:e7:be:f9:94:ef:5f:9f:83:
ea:fa:d3:16:60:de:e9:3b:e8:24:a4:f8:31:fc:d6:
d5:aa:4e:0d:b0:d2:6a:25:e1:4e:98:55:b1:81:95:
57:93:59:4a:2e:9f:c0:2b:19:aa:f0:14:c0:af:ba:
0d:7e:95:62:08:ae:c4:1a:f9:97:41:02:13:39:c9:
b1:64:63:9e:c6:3d:33:fd:d8:a2:6f:c9:22:10:9c:
bf:75:4e:9b:1a:40:b8:4d:4d:d1:6f:c9:88:6e:f8:
37:b6:25:4a:dc:33:a4:8b:d5:16:85:07:33:ff:5d:
c2:0b:ef:86:01:6d:d8:37:fd:07:7e:5c:c2:c1:ea:
f2:c8:82:90:b4:59:89:db:67:39:90:d1:ce:0b:7c:
0d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:21:57:89:1E:DB:D2:FC:E0:57:33:45:3B:B3:F9:EB:4D:54:05:5E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/piFXiR7b0vzgVzNFO7P5601UBV4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
4a:31:b5:82:92:9d:02:27:9b:84:b6:ea:56:b9:9f:8a:d0:90:
fd:ae:9e:8b:d9:63:76:4b:aa:86:26:9d:87:38:41:e1:1e:92:
ea:13:be:37:5e:33:27:11:63:47:e6:14:a9:17:55:9f:48:8e:
73:b6:1e:ed:84:b8:64:4a:77:90:b6:cc:18:3f:24:4c:d7:e1:
3c:90:7d:f1:92:f3:c1:77:3f:a9:21:32:41:51:87:af:c1:36:
16:03:69:41:ef:c5:89:cd:81:21:7e:f5:fc:f9:d4:0e:20:a5:
83:23:d8:df:5d:4f:6b:df:28:7b:28:22:89:f2:29:f9:f4:5d:
06:b0:83:9f:7c:37:53:b9:a3:df:d8:e5:84:db:b6:7c:e0:fd:
d4:1e:d3:33:fb:eb:d7:09:00:68:2f:b0:8e:57:33:f5:6d:46:
d4:68:df:a4:08:d6:f8:f7:63:59:2c:0c:6a:01:a7:fc:0b:ff:
7f:26:85:ae:2a:d8:30:e2:56:74:93:78:0c:88:6c:d2:32:86:
fd:99:46:ae:90:3c:25:63:2a:71:83:37:84:72:13:e4:e0:72:
1e:f1:9b:ba:2b:73:17:96:03:ec:a2:ae:d7:94:49:1e:db:6c:
1d:b4:8c:93:74:12:cb:dc:67:d7:47:5e:17:68:c6:fe:86:b7:
58:ff:d5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:47:45 2025 by rpki-client