Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/1Zr78Ck9NUj2V1cYAfq8AwtBBl8.roa
File: 1Zr78Ck9NUj2V1cYAfq8AwtBBl8.roa (raw, json)
Hash identifier: xYILF1InM17reJsvYn/sUHAy5tToym6GylZsHdrderA=
Subject key identifier: D5:9A:FB:F0:29:3D:35:48:F6:57:57:18:01:FA:BC:03:0B:41:06:5F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 546B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/1Zr78Ck9NUj2V1cYAfq8AwtBBl8.roa
Signing time: Sat 11 May 2024 03:24:26 +0000
ROA not before: Sat 11 May 2024 03:24:26 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21611 (0x546b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 11 03:24:26 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D59AFBF0293D3548F657571801FABC030B41065F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:eb:e5:fc:58:35:30:1c:1f:d0:81:64:f1:37:
57:94:85:a6:c6:a8:75:65:75:8f:b8:22:33:53:d7:
13:42:22:b8:b7:fe:9d:29:92:f2:15:f8:9d:d2:f3:
30:bf:44:02:7e:ff:00:d2:37:0d:07:95:f8:83:50:
c2:2f:02:c2:37:37:72:66:26:34:80:6d:ce:1c:e7:
b5:ed:9f:c6:ae:2e:4e:28:df:05:63:0d:10:47:0f:
2e:dc:8c:8c:c6:23:ae:44:0b:7b:be:00:4c:f8:d0:
88:db:fd:13:b6:1e:36:b5:fd:e1:93:c4:88:02:a1:
d6:7b:32:c2:e5:d0:38:05:c0:a6:58:91:87:16:68:
38:12:4c:ec:b3:28:e4:bc:d7:c6:72:4e:b1:7f:b5:
a8:4e:be:35:c9:22:a6:fc:66:61:ab:13:53:c1:c8:
a0:20:a2:32:7f:07:16:ae:0a:f5:af:f9:cd:80:df:
64:51:ba:9f:de:b4:1f:02:fe:f5:3e:2f:67:65:56:
41:f6:c0:ee:c1:5b:1f:8a:d1:1b:41:30:b7:6a:27:
07:92:46:70:48:e2:b1:a5:48:af:e8:13:ad:f0:1c:
31:b0:36:d2:d9:26:ba:76:aa:80:9e:da:2c:47:1c:
c1:36:90:ca:c6:f8:99:44:5e:2e:3d:20:c7:a0:05:
1c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9A:FB:F0:29:3D:35:48:F6:57:57:18:01:FA:BC:03:0B:41:06:5F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/1Zr78Ck9NUj2V1cYAfq8AwtBBl8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
7b:fc:f7:43:9e:86:60:bd:de:01:df:d3:e2:07:ad:93:5a:89:
46:12:de:83:34:a9:ce:d7:d7:ab:25:30:17:38:63:20:34:bd:
18:f7:b6:2e:25:e9:45:f3:5a:1f:42:fc:93:d6:44:26:10:c4:
26:c2:67:5c:c0:20:af:7f:1b:ff:5d:4a:25:fe:85:8f:bf:62:
ab:f4:30:12:0f:61:f2:0d:d8:6b:5b:02:86:8e:7f:e0:4b:9e:
cc:3f:6d:79:a0:20:81:19:81:94:33:62:d6:61:f7:1c:95:f0:
aa:3b:14:54:89:49:30:58:e2:7a:0f:a3:98:9d:f3:af:5c:c8:
b5:4f:95:ad:35:21:85:74:af:c6:9f:3b:c0:15:0a:77:40:54:
8d:fd:b1:a9:36:62:18:3e:d0:db:28:99:73:1e:c3:6e:1e:32:
c7:77:a9:3e:a6:5b:8f:03:cf:43:6e:d9:05:8b:51:a3:93:bc:
a5:4a:21:9f:86:58:f2:73:6e:01:14:8c:5d:f6:14:73:32:a4:
21:db:29:f4:7a:b3:d2:47:38:83:ae:02:71:ac:0f:93:8d:63:
39:dd:07:d4:28:b1:c5:42:54:fb:47:f1:21:c4:db:e9:25:09:
17:f4:7c:0d:7a:6e:41:9f:53:0b:f7:20:c1:2a:62:e9:a2:ce:
b5:cb:e0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 16:48:34 2025 by rpki-client