Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/sGs8PTleP2Zd94zh49bwy066YDw.roa
File: sGs8PTleP2Zd94zh49bwy066YDw.roa (raw, json)
Hash identifier: GDYP8r4VBxjEtdnhSEpDaMxVd5ENhMoK1mN8NWRonZ4=
Subject key identifier: B0:6B:3C:3D:39:5E:3F:66:5D:F7:8C:E1:E3:D6:F0:CB:4E:BA:60:3C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5535
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sGs8PTleP2Zd94zh49bwy066YDw.roa
Signing time: Sun 12 May 2024 04:54:10 +0000
ROA not before: Sun 12 May 2024 04:54:10 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21813 (0x5535)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 12 04:54:10 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B06B3C3D395E3F665DF78CE1E3D6F0CB4EBA603C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:43:57:9f:51:89:a8:73:5a:77:ff:ea:f8:56:
a5:38:e1:b6:bf:ed:1f:39:94:db:6e:4f:28:ab:6b:
74:50:af:c3:16:33:b9:0f:af:06:0f:3c:c0:a8:b3:
5d:90:19:7b:c0:46:27:22:d0:2d:a8:84:4b:39:2d:
b7:5f:06:2c:f8:56:a0:15:d9:82:47:61:43:94:e7:
4a:1a:ed:29:8a:68:ee:a5:2b:29:6a:40:cb:68:d2:
a2:81:d9:b0:8d:68:05:9c:1a:6c:67:9b:ee:26:be:
2b:48:60:a3:dd:72:5f:cc:d0:12:db:78:c1:28:9b:
ac:7f:da:d4:0e:ef:0b:81:00:15:f8:98:f8:9e:50:
c3:6d:c5:d7:7a:db:17:95:73:9a:11:99:b2:78:dd:
82:23:3a:6e:de:f3:0c:39:1f:59:86:d9:c4:c6:63:
cb:9b:b0:84:19:bd:40:7a:b8:55:5d:22:04:b3:f8:
c8:1e:a1:b7:45:69:5e:6f:ad:92:7a:42:62:79:b8:
5c:6a:8a:4d:9b:ec:0c:31:92:31:79:67:ca:c0:46:
75:2f:82:73:b6:bb:f3:48:06:17:a2:e8:69:5f:7a:
6b:d9:ec:ac:75:f2:5d:cb:2c:de:8c:cd:66:9c:a1:
cb:77:09:6f:d4:d1:4d:af:88:3d:e4:82:27:ae:17:
40:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6B:3C:3D:39:5E:3F:66:5D:F7:8C:E1:E3:D6:F0:CB:4E:BA:60:3C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sGs8PTleP2Zd94zh49bwy066YDw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
9b:82:d1:de:23:cd:f8:3c:af:29:9e:fb:3a:8b:66:8a:cf:9c:
35:27:96:da:55:79:df:e6:1f:88:70:ed:ea:5f:e5:3d:c9:54:
1f:d4:be:e5:cc:8d:08:c8:99:d5:c6:e9:d2:9b:96:da:17:c3:
8f:f7:de:a5:c3:cb:e8:f5:50:49:7c:6c:c9:24:2a:59:30:5a:
79:ef:44:29:3e:df:45:93:d0:a3:9e:3e:a8:47:c0:21:c3:e9:
60:0c:b5:7e:c5:c7:99:cf:3e:0f:74:a5:11:56:e3:7c:9c:97:
44:9d:5e:02:a2:8e:c3:c6:52:b7:8c:ae:02:b8:8b:03:d5:12:
27:81:64:96:ba:8b:87:c7:fa:88:0d:53:3a:27:67:45:6b:58:
47:ae:16:f7:45:05:ca:a7:d4:68:5a:41:5a:2f:a0:d0:1c:81:
f3:77:b5:b3:d8:9d:85:ae:52:4b:7c:86:a9:00:54:cb:72:7c:
75:ea:07:67:07:b8:e5:b3:72:09:c8:3d:94:8e:7f:fe:20:dd:
c5:9a:a3:51:ee:11:01:81:1a:9c:20:7e:8b:6c:38:30:a7:b2:
85:03:ee:22:aa:1f:9a:6e:be:68:29:b7:f4:e3:2a:a6:cb:eb:
d3:bc:47:7a:ab:fe:8f:a4:36:35:b4:83:6e:2f:21:79:1a:7f:
92:05:a3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 02:03:58 2025 by rpki-client