Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/zWsUFJE3aYiACsBylH0LZVhDhQY.roa
File: zWsUFJE3aYiACsBylH0LZVhDhQY.roa (raw, json)
Hash identifier: gkM6wFsCclJXTUuk86P78MBMKMYpzBlV+QkHqQqvVYY=
Subject key identifier: CD:6B:14:14:91:37:69:88:80:0A:C0:72:94:7D:0B:65:58:43:85:06
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 539D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/zWsUFJE3aYiACsBylH0LZVhDhQY.roa
Signing time: Fri 10 May 2024 01:54:01 +0000
ROA not before: Fri 10 May 2024 01:54:01 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21405 (0x539d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 10 01:54:01 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CD6B141491376988800AC072947D0B6558438506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b7:dd:ae:f1:b6:f8:78:a7:f7:90:de:29:0a:
2b:dc:71:98:0f:c1:38:ef:a6:32:f1:91:09:2a:df:
08:f9:10:91:3b:e0:a6:b7:a1:09:c4:b0:1f:c2:56:
da:a7:17:a7:be:9b:fe:9c:17:65:f3:da:80:c1:23:
43:89:25:39:38:38:ab:1f:f4:37:f8:58:84:b7:97:
fe:69:07:b3:74:e4:36:fa:d5:ed:64:ad:c9:fb:35:
24:75:9f:8f:94:1c:fd:0d:85:55:e1:25:a3:a2:c0:
af:98:12:4b:82:f9:32:b4:29:5e:59:aa:90:a3:a4:
74:cf:5c:6b:b1:08:d8:f8:db:c5:2c:6a:e3:8b:43:
a2:62:76:3c:2d:65:52:f4:95:3f:ae:0f:6e:31:cb:
ec:f3:f3:44:0c:0c:da:0d:d7:b6:42:6f:f8:9e:23:
39:6c:40:f8:dd:84:86:a6:b4:c1:b7:1a:7c:54:5f:
3a:47:5a:0e:ee:aa:cf:e5:94:73:30:cd:13:fa:6a:
87:f7:75:37:bd:b4:b6:6e:97:d4:db:be:8c:b1:48:
91:b9:96:c7:0f:2f:71:71:40:51:c4:5f:89:0d:e7:
39:36:35:35:bb:bc:20:69:67:4e:74:e4:20:ec:14:
9e:82:58:eb:48:d4:1b:57:a5:02:d4:aa:72:fc:c1:
c3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6B:14:14:91:37:69:88:80:0A:C0:72:94:7D:0B:65:58:43:85:06
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/zWsUFJE3aYiACsBylH0LZVhDhQY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
a9:53:8c:8b:9f:77:58:4d:36:f8:48:0d:32:be:4a:7c:13:7a:
6f:26:3b:98:07:90:fd:12:ad:fa:4a:53:68:4e:d5:37:99:97:
01:47:78:dc:34:29:0a:63:8c:82:d6:9c:06:0d:16:c6:3c:6b:
d8:e5:f2:d0:11:2a:9d:d8:53:a5:dd:d0:3c:86:e1:ca:e1:71:
7f:02:2c:d9:81:18:46:4d:13:16:c8:2c:8a:a6:a9:67:7b:2c:
be:9f:bf:e2:3c:e2:3d:a5:c1:f8:ee:b1:63:1a:cf:fa:7e:3d:
73:91:40:2c:46:ed:ad:17:f8:d4:34:f6:40:12:96:0c:cd:4a:
63:df:58:1f:da:a2:7e:01:0e:f6:e6:57:b0:d8:4a:fd:f2:00:
d2:e9:8e:9a:a1:86:37:3e:e7:eb:97:8a:27:3d:56:2b:23:ed:
ed:f5:b6:84:9f:3f:6f:9c:7d:b9:44:3b:d3:c9:52:4a:ac:88:
fc:99:5a:fe:ca:d3:a8:9a:3e:76:78:42:01:a1:96:ab:0e:aa:
bb:4d:68:c0:fd:95:39:4b:44:a5:db:b2:af:2f:ea:6c:f3:09:
83:f2:b2:0e:61:59:61:26:29:ec:43:9d:a7:57:13:b0:97:c2:
a6:fc:a3:65:a8:69:0f:7a:d0:ca:54:b8:af:ae:31:a5:02:20:
35:71:ec:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 23:35:19 2025 by rpki-client