Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/pmmuOxQc-mPzJwIJN5eZz10T5sc.roa
File: pmmuOxQc-mPzJwIJN5eZz10T5sc.roa (raw, json)
Hash identifier: ok8WVcRHx7qQkBqFRW3sii27TABQNpmt7GKt9vCcaCI=
Subject key identifier: A6:69:AE:3B:14:1C:FA:63:F3:27:02:09:37:97:99:CF:5D:13:E6:C7
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 40EB
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/pmmuOxQc-mPzJwIJN5eZz10T5sc.roa
Signing time: Mon 15 Apr 2024 03:22:52 +0000
ROA not before: Mon 15 Apr 2024 03:22:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16619 (0x40eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 15 03:22:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A669AE3B141CFA63F3270209379799CF5D13E6C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:58:b1:f4:39:81:24:72:c8:2f:0d:75:37:de:
0d:b7:ef:52:85:7c:be:ad:e7:ab:06:1e:72:ef:87:
66:e6:6e:90:0f:34:05:94:a1:c8:38:ee:6c:8c:ac:
a4:74:0b:1e:11:64:00:a1:53:2d:8e:59:43:67:1d:
7c:36:18:40:dc:4c:04:0b:14:7c:43:ca:84:8d:9c:
fd:0b:fd:2d:6c:65:5f:3e:d8:04:8f:93:02:ab:c5:
14:9e:bd:83:34:01:8e:78:f6:fb:e3:d6:12:a1:30:
6e:f4:f0:31:53:58:08:30:11:1b:2a:5b:7f:f4:1e:
5d:ea:ea:ac:d7:06:9c:08:02:31:bb:9d:8e:9a:5c:
a4:86:8f:74:22:18:ca:1d:a0:48:bb:fc:80:0b:50:
1d:e7:b9:01:a1:c5:3f:bd:1b:5e:2c:88:54:b3:1a:
b5:98:67:2b:5c:ad:3a:46:5f:3c:a9:60:4d:c5:5a:
7c:aa:21:4f:46:24:79:43:1f:13:f9:9f:8b:e4:98:
8e:82:dc:a3:d7:ba:e6:0f:e8:ac:5f:66:41:ca:3d:
de:2c:ec:20:f3:69:88:35:3b:fd:41:37:e0:96:c4:
ca:76:b7:34:f1:fa:50:32:d5:b9:a0:44:2c:69:46:
55:09:12:c2:fc:4f:a1:3b:02:09:bf:36:9d:2a:b1:
d9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:69:AE:3B:14:1C:FA:63:F3:27:02:09:37:97:99:CF:5D:13:E6:C7
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/pmmuOxQc-mPzJwIJN5eZz10T5sc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
28:cb:ba:a2:b4:e7:bc:be:af:c6:27:08:bb:ad:d4:af:e4:51:
c7:d1:17:63:65:e0:94:29:95:bb:93:7a:9f:e4:ca:c3:83:73:
68:65:4b:30:10:51:96:7f:14:81:53:f3:19:d3:59:80:84:c9:
8a:8a:6d:74:72:3b:2c:85:a6:58:11:23:4b:37:ea:b2:34:ce:
da:34:3a:20:bc:62:eb:f0:1c:81:a0:e8:50:88:7c:8f:3d:d0:
5b:fa:11:51:91:e7:ca:f2:c9:af:fd:4d:e7:05:f5:cf:ad:76:
b7:24:be:ee:d8:c1:ae:1d:30:a1:31:bf:e4:b0:80:c0:0b:c1:
5e:ea:ed:a1:84:4b:f9:91:01:85:ae:87:be:1b:db:97:8b:f4:
68:59:6f:d8:93:f1:41:ea:81:22:a3:ef:45:3a:32:2d:6c:f6:
94:d1:f6:48:51:51:fd:d4:4e:bc:6b:00:aa:0f:b6:32:7d:29:
8f:19:d3:61:21:d6:35:aa:b0:69:fc:4e:02:53:94:8f:59:4e:
75:cf:0b:d6:0b:a9:b3:7f:7a:47:8d:f8:83:93:41:ac:98:35:
9f:9f:13:43:31:de:51:17:ea:74:9d:c3:40:41:f9:5c:64:08:
49:00:2a:69:d3:54:da:0c:5f:fc:4d:b8:f5:fa:23:2d:84:b0:
90:a7:98:b9
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICQOswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTUw
MzIyNTJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEE2NjlBRTNCMTQxQ0ZB
NjNGMzI3MDIwOTM3OTc5OUNGNUQxM0U2QzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXWLH0OYEkcsgvDXU33g2371KFfL6t56sGHnLvh2bmbpAPNAWU
ocg47myMrKR0Cx4RZAChUy2OWUNnHXw2GEDcTAQLFHxDyoSNnP0L/S1sZV8+2ASP
kwKrxRSevYM0AY549vvj1hKhMG708DFTWAgwERsqW3/0Hl3q6qzXBpwIAjG7nY6a
XKSGj3QiGModoEi7/IALUB3nuQGhxT+9G14siFSzGrWYZytcrTpGXzypYE3FWnyq
IU9GJHlDHxP5n4vkmI6C3KPXuuYP6KxfZkHKPd4s7CDzaYg1O/1BN+CWxMp2tzTx
+lAy1bmgRCxpRlUJEsL8T6E7Agm/Np0qsdmdAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUpmmuOxQc+mPzJwIJN5eZz10T5scwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3BtbXVPeFFjLW1Qekp3
SUpONWVaejEwVDVzYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBACjLuqK057y+r8YnCLut1K/kUcfRF2Nl
4JQplbuTep/kysODc2hlSzAQUZZ/FIFT8xnTWYCEyYqKbXRyOyyFplgRI0s36rI0
zto0OiC8YuvwHIGg6FCIfI890Fv6EVGR58ryya/9TecF9c+tdrckvu7Ywa4dMKEx
v+SwgMALwV7q7aGES/mRAYWuh74b25eL9GhZb9iT8UHqgSKj70U6Mi1s9pTR9khR
Uf3UTrxrAKoPtjJ9KY8Z02Eh1jWqsGn8TgJTlI9ZTnXPC9YLqbN/ekeN+IOTQayY
NZ+fE0Mx3lEX6nSdw0BB+VxkCEkAKmnTVNoMX/xNuPX6Iy2EsJCnmLk=
-----END CERTIFICATE-----
Generated at Sat May 17 22:54:28 2025 by rpki-client