Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/qlzRsYTCCXPzV0rvMFb5Es-r8_w.roa
File: qlzRsYTCCXPzV0rvMFb5Es-r8_w.roa (raw, json)
Hash identifier: 1qN2otFKANQHTq7sFMDflmicsajRL8UM0WO77bPdcxk=
Subject key identifier: AA:5C:D1:B1:84:C2:09:73:F3:57:4A:EF:30:56:F9:12:CF:AB:F3:FC
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4B46
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qlzRsYTCCXPzV0rvMFb5Es-r8_w.roa
Signing time: Sun 28 Apr 2024 22:53:29 +0000
ROA not before: Sun 28 Apr 2024 22:53:29 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19270 (0x4b46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 28 22:53:29 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=AA5CD1B184C20973F3574AEF3056F912CFABF3FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7b:83:a0:c8:ca:e0:1c:8c:9f:02:9a:2f:a5:
ca:a9:a6:81:8b:6a:db:bd:27:03:86:f0:a3:d1:dc:
dd:5a:dd:80:20:21:bb:69:9a:c4:74:48:75:e8:55:
3a:10:4b:2a:b2:39:c7:68:d1:a8:80:a5:eb:3d:19:
86:5e:31:f7:6c:14:20:74:99:c0:12:3d:fa:98:86:
0d:b7:c1:78:dd:7c:d1:47:e3:20:67:bf:df:cd:08:
9b:87:18:17:65:ab:4b:9a:16:f8:df:a7:02:59:7c:
1f:c3:4c:56:20:4c:2d:ab:5f:55:05:8b:97:75:92:
02:b8:1c:f8:04:b0:61:b0:25:dc:78:88:79:00:5f:
62:91:56:77:a5:8f:cd:83:76:e3:98:32:77:f1:11:
f8:13:23:87:5e:a9:11:4a:07:5e:72:c8:68:3e:f0:
6c:f3:5c:d4:e3:c8:5f:cc:9f:04:32:88:54:e1:25:
20:c9:40:c9:43:8f:f1:32:0c:a8:fb:28:05:5c:fa:
b2:09:5f:00:1e:78:df:bf:0d:b6:03:4d:e0:2d:d0:
54:0c:2c:c4:66:0b:f7:5b:92:26:95:32:20:a1:7c:
d5:e5:fe:47:65:6c:cb:0f:00:a3:85:19:73:d2:1b:
6a:47:e2:6f:87:94:be:ec:ff:e6:b0:b2:dc:74:02:
73:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5C:D1:B1:84:C2:09:73:F3:57:4A:EF:30:56:F9:12:CF:AB:F3:FC
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qlzRsYTCCXPzV0rvMFb5Es-r8_w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
77:a7:f3:e0:42:fa:24:f5:6b:83:cb:70:e6:98:ed:18:7b:05:
fd:e9:40:8f:27:ef:fb:df:06:7d:fc:f8:fe:0f:5f:bb:8e:9a:
2c:aa:a3:8e:9a:3b:f4:27:ab:e6:10:f8:fe:e7:2d:09:83:0b:
98:91:62:f5:64:1c:a1:0f:13:ac:73:71:ae:e5:00:c0:47:a8:
4c:69:02:2d:ac:fd:d4:91:ad:61:4b:1a:1e:36:3f:0d:3e:75:
ea:47:b5:64:6e:b8:54:d3:ad:94:9b:30:25:c0:e5:72:10:1d:
a4:8f:51:35:f0:8f:9e:bd:ff:2a:7f:3b:8c:b0:a9:6f:0a:a3:
bb:d9:6c:03:8e:47:dc:2d:25:53:da:5d:b1:84:f7:21:46:dc:
88:59:63:67:b9:86:b0:0e:58:3f:8f:b7:af:0b:36:c1:c7:a6:
bb:a1:49:8a:b2:5e:b7:76:9f:ea:b4:7e:a3:38:de:88:7f:c3:
88:df:3a:4f:23:55:b7:03:3b:88:32:ca:c7:33:8c:e5:a7:ca:
c0:14:8b:44:2c:b4:fb:f1:a5:6f:36:cb:65:39:01:59:39:03:
aa:00:e0:b4:8b:21:3c:7b:7b:71:b0:aa:47:55:26:7a:f2:bb:
52:cb:72:d3:62:ab:53:f7:d7:06:0d:39:f7:e6:ef:81:a5:00:
84:d1:14:13
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICS0YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0Mjgy
MjUzMjlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEFBNUNEMUIxODRDMjA5
NzNGMzU3NEFFRjMwNTZGOTEyQ0ZBQkYzRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3e4OgyMrgHIyfApovpcqppoGLatu9JwOG8KPR3N1a3YAgIbtp
msR0SHXoVToQSyqyOcdo0aiApes9GYZeMfdsFCB0mcASPfqYhg23wXjdfNFH4yBn
v9/NCJuHGBdlq0uaFvjfpwJZfB/DTFYgTC2rX1UFi5d1kgK4HPgEsGGwJdx4iHkA
X2KRVnelj82DduOYMnfxEfgTI4deqRFKB15yyGg+8GzzXNTjyF/MnwQyiFThJSDJ
QMlDj/EyDKj7KAVc+rIJXwAeeN+/DbYDTeAt0FQMLMRmC/dbkiaVMiChfNXl/kdl
bMsPAKOFGXPSG2pH4m+HlL7s/+awstx0AnNzAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUqlzRsYTCCXPzV0rvMFb5Es+r8/wwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3FselJzWVRDQ1hQelYw
cnZNRmI1RXMtcjhfdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAd6fz4EL6JPVrg8tw5pjtGHsF/elAjyfv
+98Gffz4/g9fu46aLKqjjpo79Cer5hD4/uctCYMLmJFi9WQcoQ8TrHNxruUAwEeo
TGkCLaz91JGtYUsaHjY/DT516ke1ZG64VNOtlJswJcDlchAdpI9RNfCPnr3/Kn87
jLCpbwqju9lsA45H3C0lU9pdsYT3IUbciFljZ7mGsA5YP4+3rws2wcemu6FJirJe
t3af6rR+ozjeiH/DiN86TyNVtwM7iDLKxzOM5afKwBSLRCy0+/GlbzbLZTkBWTkD
qgDgtIshPHt7cbCqR1UmevK7Usty02KrU/fXBg059+bvgaUAhNEUEw==
-----END CERTIFICATE-----
Generated at Sat May 17 19:42:16 2025 by rpki-client