Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/wBFolDohYUNgRoPH_67vm3xoMYc.roa
File: wBFolDohYUNgRoPH_67vm3xoMYc.roa (raw, json)
Hash identifier: iOPrwf9aqeSQGoybRis5rwjlhYoq1xE0qmCcOdSOjlM=
Subject key identifier: C0:11:68:94:3A:21:61:43:60:46:83:C7:FF:AE:EF:9B:7C:68:31:87
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 361D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wBFolDohYUNgRoPH_67vm3xoMYc.roa
Signing time: Sun 31 Mar 2024 17:52:10 +0000
ROA not before: Sun 31 Mar 2024 17:52:10 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13853 (0x361d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 31 17:52:10 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C01168943A216143604683C7FFAEEF9B7C683187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:19:c1:5e:50:fb:f7:3f:0e:a2:80:c2:3d:81:
c1:68:04:ff:82:3f:9f:20:c4:bf:ad:be:5f:fc:39:
72:03:c7:f1:e1:69:69:bb:76:b6:70:3e:79:09:aa:
24:87:c8:3c:53:eb:0f:8c:f9:02:db:9d:88:fe:96:
ee:67:96:73:f4:30:35:b4:81:ed:5b:2d:23:e1:3e:
bb:8f:dc:b0:01:9a:c6:a6:7c:5e:db:e8:2b:c8:02:
10:e5:4b:c5:f8:35:98:93:fa:a7:13:32:7b:67:73:
6f:ff:53:5c:5d:b4:aa:22:89:95:9e:f3:ce:7d:25:
1a:a3:e9:c0:dc:f0:ce:14:ac:42:6a:30:25:36:9c:
b9:0c:c7:b2:dd:82:a3:6d:b7:e7:d1:2d:a2:ed:36:
76:f7:1c:fe:6a:38:da:4e:e7:c8:2c:c6:ec:f7:c4:
ce:14:af:ce:2c:6a:72:95:75:2e:8e:0b:45:97:60:
e3:7f:f0:42:b1:1e:c5:d8:16:e2:c2:c0:e5:dd:bf:
0e:2d:91:c4:45:80:0f:cf:3b:55:f9:32:14:7d:5b:
8a:5f:d5:05:36:2e:be:06:8d:13:d4:07:ba:7d:92:
02:e0:c0:20:eb:b4:c5:c1:ca:b5:c5:c4:c1:b6:4c:
23:b1:2f:2f:c6:9b:b6:78:73:5f:ea:32:bd:28:8d:
f6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:11:68:94:3A:21:61:43:60:46:83:C7:FF:AE:EF:9B:7C:68:31:87
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wBFolDohYUNgRoPH_67vm3xoMYc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
54:fb:c1:6c:2b:4c:27:48:80:93:0a:a2:0d:29:38:46:03:c3:
89:8c:09:94:31:6a:db:22:1c:a6:e2:4c:77:1a:0f:4b:00:b7:
17:82:91:2c:1d:86:23:53:b0:b8:b8:9b:f7:ea:a7:93:6f:8e:
26:9d:d7:62:53:1d:63:c1:ec:c8:c5:03:89:be:62:be:37:52:
4c:aa:bb:f2:5b:5c:2e:42:b1:c8:94:fd:3c:e1:c2:a6:e7:06:
a0:50:61:bd:f5:3c:c2:01:b0:d7:a8:0c:63:b6:33:ec:8c:86:
15:cd:2a:b1:1e:36:de:a7:d6:ad:e5:ef:bb:ac:ff:b5:ae:84:
ee:9b:e5:62:06:31:9e:50:ce:cc:d4:84:a1:59:af:fe:ad:e3:
32:ce:99:4e:aa:a8:2e:9f:ad:5b:e7:8f:92:6f:10:5a:e0:d9:
67:f9:09:67:c3:2a:75:a5:31:b7:9c:85:1b:25:3e:3c:9f:8a:
7f:2f:f7:79:03:3a:94:7a:27:f5:b0:f3:06:af:50:d2:dc:6d:
19:61:36:de:d0:01:6c:df:f1:39:62:ba:5f:f7:bd:eb:a1:8f:
cc:1e:31:4e:9c:70:6e:3c:45:84:cb:75:03:8b:5a:dc:39:1d:
ec:32:0b:13:d1:db:f8:0a:d3:01:0d:ab:be:f9:0e:8a:5c:2c:
16:14:d7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 01:54:38 2025 by rpki-client