Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/25HcEWkW8nCdN5K-Q7y_5BQSY14.roa
File: 25HcEWkW8nCdN5K-Q7y_5BQSY14.roa (raw, json)
Hash identifier: w0d4wxB+kJymxKRtQC5qGpwwEgABQWkQGyxWNZUmTZc=
Subject key identifier: DB:91:DC:11:69:16:F2:70:9D:37:92:BE:43:BC:BF:E4:14:12:63:5E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4C03
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/25HcEWkW8nCdN5K-Q7y_5BQSY14.roa
Signing time: Mon 29 Apr 2024 22:23:32 +0000
ROA not before: Mon 29 Apr 2024 22:23:32 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19459 (0x4c03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 29 22:23:32 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=DB91DC116916F2709D3792BE43BCBFE41412635E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:60:10:be:e0:4e:d9:68:f3:1c:94:8c:f9:e3:
a0:03:3b:69:5d:81:41:52:52:75:97:d6:c7:a9:9d:
7c:c1:df:53:8f:a9:89:d3:44:9c:7b:ac:57:b8:c1:
53:d3:ce:46:93:d8:96:47:fa:ec:56:c2:6f:f9:71:
a0:d7:a8:40:a1:84:d7:0a:e3:37:aa:2d:4a:2a:fa:
5c:e5:68:8b:fb:76:4f:80:3e:cf:48:37:50:47:17:
50:b3:8d:bf:d7:70:6d:49:5b:da:79:b7:a6:b3:31:
aa:1a:fd:9b:df:f2:6d:a7:5e:f0:4a:df:ba:a8:3a:
89:04:88:f9:6b:0b:d1:f3:43:01:50:f5:1a:e7:33:
df:2f:0d:1a:31:b4:0e:ff:92:64:01:b9:f9:d7:e1:
5f:27:96:df:ed:5d:47:89:36:fa:6a:27:4a:e6:88:
48:3a:da:ae:ba:c9:ff:02:a3:d7:52:8f:2d:b8:1e:
dd:a9:3a:3b:e1:2b:8d:ef:b2:06:1c:6d:fe:d7:f8:
8e:8f:b5:58:f8:8a:12:cd:c7:46:a9:16:6d:d5:84:
77:39:77:d6:f8:5f:8f:56:3e:f0:a8:26:3f:8b:3d:
0d:18:dc:06:b9:84:46:4d:01:c8:7c:42:ab:bf:29:
52:97:08:f9:a0:7b:3e:16:bc:35:cc:c8:45:7c:d6:
38:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:91:DC:11:69:16:F2:70:9D:37:92:BE:43:BC:BF:E4:14:12:63:5E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/25HcEWkW8nCdN5K-Q7y_5BQSY14.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
7e:74:c8:47:a6:8a:d0:e9:2d:27:78:ef:62:2c:bd:22:51:ca:
c4:13:73:83:37:bc:0e:34:7a:32:96:24:ee:bf:d0:e7:1c:82:
15:80:61:ef:6a:f2:03:1a:c9:27:9b:41:37:42:5d:37:1c:d7:
b8:f2:1a:d4:de:bd:13:8a:e5:fa:33:e2:87:e9:b7:84:70:02:
f9:8f:8b:c3:98:a8:38:8a:11:fd:b5:02:8d:36:b4:e8:9d:e7:
49:ff:91:fd:aa:66:fb:b0:2c:fe:3b:fe:b5:ff:d4:3e:0d:fd:
e4:90:87:13:67:61:03:01:6f:e0:34:5a:a3:50:f4:a5:06:72:
fe:3b:af:3a:40:c0:ea:78:e0:0b:db:3b:3d:31:26:bd:cb:24:
2d:e8:3b:0d:05:4b:9e:9d:d3:f7:65:f0:e5:7a:3b:e2:59:e5:
82:21:74:a8:87:71:ae:01:8e:a8:1f:20:11:ff:99:c3:ba:7a:
d9:8b:4c:85:a4:5b:a6:23:8e:8d:14:b7:95:1b:63:69:c7:5f:
81:d2:dd:ea:a2:43:2d:e6:ca:f1:fc:67:b1:e1:5b:b8:25:9e:
cc:22:a6:48:df:65:39:95:38:f6:57:6b:a0:24:fb:cb:3b:e1:
f3:a4:fa:3e:1a:98:19:06:c6:e3:46:33:a4:65:17:e6:c1:30:
fe:9a:a1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 23:03:51 2025 by rpki-client