Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/yQfAVzIEbHnIlu90jN51ckptCts.roa
File: yQfAVzIEbHnIlu90jN51ckptCts.roa (raw, json)
Hash identifier: Hl8fYrj3v6KPVNsAh6usGveodOrzp1+uO4DTfecxwTM=
Subject key identifier: C9:07:C0:57:32:04:6C:79:C8:96:EF:74:8C:DE:75:72:4A:6D:0A:DB
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 56F5
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/yQfAVzIEbHnIlu90jN51ckptCts.roa
Signing time: Tue 14 May 2024 12:54:28 +0000
ROA not before: Tue 14 May 2024 12:54:28 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22261 (0x56f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 14 12:54:28 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C907C05732046C79C896EF748CDE75724A6D0ADB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:23:a1:93:91:7f:ef:30:3c:42:ab:bc:1d:55:
a0:fa:21:8b:b2:19:36:8a:e5:79:39:05:28:e0:80:
d2:70:37:48:82:fa:3b:60:29:5c:89:8b:89:52:dd:
b8:c2:27:7f:e5:a0:dc:1c:b0:51:4e:b6:62:c0:1c:
ca:24:99:4d:12:76:11:78:38:9f:6e:53:ad:99:43:
74:8e:7b:c9:c3:4d:91:31:45:d8:18:e9:d2:90:33:
49:b2:e8:10:c7:1e:e0:67:be:c7:47:20:3c:4c:2c:
bd:1e:b1:c5:a1:be:0b:f8:5b:34:9f:a0:df:1b:b1:
fd:50:0d:6b:be:6b:11:ad:41:3e:c7:f8:b4:5b:cc:
5b:ed:52:78:b4:51:36:50:eb:ae:bc:e4:9a:90:88:
11:ec:92:6c:f9:d2:4a:bf:f0:c0:e5:24:8c:33:9c:
bf:29:9d:c5:91:d7:ea:73:57:8f:29:4a:72:4d:b1:
54:54:75:36:08:6a:21:57:99:c2:3d:5d:91:f9:d9:
dc:2c:83:71:2f:f4:78:5e:4e:10:6f:b1:d4:7b:18:
78:8d:72:87:34:bb:b8:82:18:82:bf:00:45:52:10:
26:2d:ac:51:02:ad:e4:48:02:ef:37:0c:b7:e4:72:
e9:90:d7:3b:43:b6:d3:1e:d9:e7:b9:ca:34:e2:0d:
78:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:07:C0:57:32:04:6C:79:C8:96:EF:74:8C:DE:75:72:4A:6D:0A:DB
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/yQfAVzIEbHnIlu90jN51ckptCts.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
49:47:24:fa:35:c0:9e:1b:42:70:09:f9:03:7a:95:f7:78:31:
e5:56:a4:e8:d0:91:c8:a9:9e:7b:aa:57:f8:e4:df:10:e1:12:
a9:0c:17:b7:cf:13:81:a7:36:e9:13:f0:30:03:de:bb:bf:10:
53:a1:81:75:e9:35:d3:2a:2c:b7:06:8e:3e:28:1f:9e:10:71:
e7:ec:86:f1:55:24:66:22:00:47:63:a4:9c:74:dd:2b:ea:c7:
3c:62:51:51:70:b3:02:d0:af:bf:7b:0d:f1:32:86:89:3c:1e:
6a:00:8a:1c:6a:7c:49:50:3a:57:01:b3:bd:40:70:35:34:9a:
d6:90:19:e9:f2:e2:f3:df:0c:ce:fb:d2:b8:7b:52:19:d2:88:
f1:cd:63:3f:9d:58:6b:01:23:9a:82:1e:11:3a:03:48:e1:59:
37:ef:ab:b1:68:b7:9d:52:04:e5:e0:c4:c0:81:e5:ca:28:b6:
7d:aa:99:f6:e0:76:a0:cd:f1:c1:f5:0f:39:d6:d5:69:66:0a:
e2:6b:1e:e1:79:cb:e9:95:86:50:09:08:69:43:b7:48:08:ab:
0f:ae:d1:f0:3c:84:f1:b4:5d:a9:2b:30:d5:ff:93:f8:34:e8:
9a:99:59:66:76:ba:b7:76:66:5b:15:93:39:66:b6:26:72:79:
51:4a:19:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 02:02:53 2025 by rpki-client