Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/yC1yC3SvBLxjBPakk44uOJhf8HY.roa
File: yC1yC3SvBLxjBPakk44uOJhf8HY.roa (raw, json)
Hash identifier: oPZY7B2HhwnhVJkcBqhl7CgA7y/kYZ4SJZdxqmrvZ+w=
Subject key identifier: C8:2D:72:0B:74:AF:04:BC:63:04:F6:A4:93:8E:2E:38:98:5F:F0:76
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4EB3
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/yC1yC3SvBLxjBPakk44uOJhf8HY.roa
Signing time: Fri 03 May 2024 12:23:44 +0000
ROA not before: Fri 03 May 2024 12:23:44 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20147 (0x4eb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 3 12:23:44 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C82D720B74AF04BC6304F6A4938E2E38985FF076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1b:ed:e3:1a:c6:25:40:27:f2:33:0a:75:d2:
79:72:7c:82:fc:e8:d8:27:7c:88:4d:ba:fb:42:34:
ec:0e:ee:ba:96:a8:9e:70:2b:63:68:f4:01:ef:66:
c7:b1:a2:3f:e3:f4:82:00:77:ee:b0:94:69:e3:b7:
42:23:b3:7d:7f:39:b5:6a:85:b5:35:e1:89:04:75:
fe:61:8b:e3:c2:f2:8a:7a:e1:27:0c:ae:dc:96:7b:
6e:4e:71:95:b9:3e:bf:e5:bc:02:31:c6:41:aa:54:
c1:a6:af:1f:e2:89:60:91:ba:d2:de:b5:40:0d:6f:
47:11:38:00:78:ec:e0:72:af:30:c2:89:b7:42:f3:
89:29:52:36:e0:2d:6e:61:ea:32:8e:fe:f0:63:0b:
f6:58:02:ab:c9:d3:a8:1e:8b:95:8f:68:c2:61:e4:
78:6d:37:fb:01:16:84:98:bf:23:85:4a:70:3b:d7:
79:ce:a8:f3:5c:c6:dd:98:87:6c:9e:d3:2c:f1:1d:
7a:88:b0:60:a6:e0:67:da:49:32:1c:72:70:0a:62:
23:0a:7e:65:bc:91:51:71:83:ce:15:5e:3d:91:ba:
78:4c:95:9b:b5:e7:79:92:51:10:1c:08:63:77:92:
57:08:e6:5e:95:c0:15:73:7f:af:d5:c2:9d:69:f4:
7f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:2D:72:0B:74:AF:04:BC:63:04:F6:A4:93:8E:2E:38:98:5F:F0:76
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/yC1yC3SvBLxjBPakk44uOJhf8HY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
6b:93:29:5d:91:b3:39:3c:33:cf:3f:b7:e7:9a:82:e0:c6:11:
a4:1d:5b:13:93:b0:07:d6:50:92:d4:ea:30:8b:e0:c4:3f:17:
ad:e8:a4:9d:6c:e1:8a:23:54:6f:6a:d4:1e:4b:0a:73:1f:df:
c0:11:ca:32:d5:25:63:06:dd:cd:34:ef:06:8f:69:77:a8:ab:
ca:41:cf:72:07:e0:19:69:4a:bb:c9:de:54:d3:33:20:0b:ca:
16:c9:e8:d9:b9:45:14:1e:3d:40:ed:df:b4:fc:6b:65:2e:d0:
af:35:74:00:20:fe:4c:6d:4f:a8:91:1c:4a:5a:86:c4:d6:61:
09:8e:f4:8b:7a:46:c6:16:90:a7:56:26:77:4c:c4:ec:07:92:
0d:8a:99:4d:bf:ea:54:76:0c:05:38:82:cf:df:f9:1d:d5:29:
22:4d:83:d3:6b:a7:f1:73:73:43:e8:01:ec:be:0f:4d:57:eb:
1a:65:92:0e:d4:ab:94:17:82:ed:e2:70:e3:19:54:d4:76:f7:
9e:59:03:8d:cb:e9:e7:20:47:f2:4d:0f:3e:89:2e:d8:a8:d9:
cf:8f:cc:f8:9c:9a:7d:29:e6:93:53:f8:9b:67:11:bd:12:78:
28:01:11:93:ae:a7:dd:5c:db:94:4f:29:d3:7f:a6:dc:27:f1:
48:87:67:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 07:30:58 2025 by rpki-client