Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/2JVytRVLUazqkAYLTH7GXQQaWJU.roa
File: 2JVytRVLUazqkAYLTH7GXQQaWJU.roa (raw, json)
Hash identifier: OsqFkGcL7C6yt6kDG7+QFx0RoEWo4T8zQ7YugQ+IcsQ=
Subject key identifier: D8:95:72:B5:15:4B:51:AC:EA:90:06:0B:4C:7E:C6:5D:04:1A:58:95
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 382E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/2JVytRVLUazqkAYLTH7GXQQaWJU.roa
Signing time: Wed 03 Apr 2024 11:52:21 +0000
ROA not before: Wed 03 Apr 2024 11:52:21 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14382 (0x382e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 3 11:52:21 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D89572B5154B51ACEA90060B4C7EC65D041A5895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b2:45:f5:fc:47:6f:76:b7:cc:5e:1d:85:4f:
b6:84:0d:39:40:8f:11:53:b2:0d:55:41:ac:20:73:
38:e0:e9:9c:ee:83:c7:e6:f3:20:d0:a7:22:27:d8:
98:a9:42:28:69:47:fe:39:12:1f:10:4d:30:57:6a:
98:1b:c5:a9:86:5a:09:28:e9:54:93:cf:73:c6:e5:
be:4b:b1:48:16:eb:19:2b:4d:18:3c:41:b8:82:e6:
f6:ed:8e:a7:5f:df:70:12:f7:b6:52:58:c3:50:d5:
00:21:9c:15:85:b7:ad:b6:6c:23:19:46:33:e3:a4:
5f:2a:e9:89:d4:ff:32:7f:fe:ca:ed:3b:91:ef:85:
26:20:19:79:e2:92:e2:cb:b9:cf:c3:03:69:43:f8:
bb:02:59:55:50:3b:ac:9f:f5:24:41:c1:92:91:12:
c0:e5:e9:52:bf:6d:c5:33:20:db:43:b0:ec:e4:6e:
84:73:0b:37:c2:27:d9:aa:e6:21:29:3f:00:a9:80:
18:bd:7a:81:07:c4:0b:83:64:8f:71:0f:70:5e:f8:
e8:29:17:c7:2a:78:42:cc:59:7b:8f:b0:c1:b2:ee:
08:aa:04:c4:fd:d1:08:17:ef:c6:c7:04:b1:69:7d:
f7:48:8c:a6:98:94:0b:ae:25:be:1c:5d:4e:e0:96:
a6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:95:72:B5:15:4B:51:AC:EA:90:06:0B:4C:7E:C6:5D:04:1A:58:95
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/2JVytRVLUazqkAYLTH7GXQQaWJU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
67:c7:ec:7a:8a:36:8c:2e:62:18:a3:4b:0f:ea:24:c9:e7:fa:
56:67:8d:68:8e:51:2b:62:62:fa:25:6c:c0:8e:e5:24:2c:0e:
24:a1:de:b6:b4:78:00:33:07:3a:b9:9b:3b:15:0f:f1:61:f6:
43:71:8e:a2:fe:2b:18:47:76:8d:64:ee:da:ba:ae:99:5a:0e:
cf:55:ad:a6:6f:9c:83:af:7f:56:d7:ea:ca:98:eb:10:0e:41:
0e:41:18:0f:44:c4:28:61:43:ee:38:58:bb:5d:f4:e0:70:26:
22:97:9f:a8:0c:ca:54:2f:02:5b:97:0d:c5:d8:f5:b0:b6:4f:
53:9c:2a:3b:36:aa:6c:f1:44:76:2f:32:41:ba:8f:90:34:70:
00:ec:2f:1b:61:f9:ef:a1:72:d7:e5:f2:38:e3:67:0f:bb:58:
55:f8:c0:a1:54:8d:57:74:7d:79:5c:10:b1:29:27:4a:63:14:
7a:4b:64:08:96:69:bc:2d:c5:67:f8:54:02:9f:82:f7:22:7f:
cf:1f:82:68:d9:33:97:40:d5:f3:56:cc:a7:61:c0:62:40:48:
f6:67:ce:c9:93:56:c7:18:14:f0:9c:aa:e2:ce:d8:e6:6d:e6:
5c:be:01:bc:32:b6:c3:af:dd:43:30:ad:0f:47:ff:31:75:49:
ce:21:4c:fa
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICOC4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDMx
MTUyMjFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEQ4OTU3MkI1MTU0QjUx
QUNFQTkwMDYwQjRDN0VDNjVEMDQxQTU4OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDwskX1/EdvdrfMXh2FT7aEDTlAjxFTsg1VQawgczjg6Zzug8fm
8yDQpyIn2JipQihpR/45Eh8QTTBXapgbxamGWgko6VSTz3PG5b5LsUgW6xkrTRg8
QbiC5vbtjqdf33AS97ZSWMNQ1QAhnBWFt622bCMZRjPjpF8q6YnU/zJ//srtO5Hv
hSYgGXnikuLLuc/DA2lD+LsCWVVQO6yf9SRBwZKREsDl6VK/bcUzINtDsOzkboRz
CzfCJ9mq5iEpPwCpgBi9eoEHxAuDZI9xD3Be+OgpF8cqeELMWXuPsMGy7giqBMT9
0QgX78bHBLFpffdIjKaYlAuuJb4cXU7glqYRAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU2JVytRVLUazqkAYLTH7GXQQaWJUwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzJKVnl0UlZMVWF6cWtB
WUxUSDdHWFFRYVdKVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAZ8fseoo2jC5iGKNLD+okyef6VmeNaI5R
K2Ji+iVswI7lJCwOJKHetrR4ADMHOrmbOxUP8WH2Q3GOov4rGEd2jWTu2rqumVoO
z1Wtpm+cg69/VtfqypjrEA5BDkEYD0TEKGFD7jhYu1304HAmIpefqAzKVC8CW5cN
xdj1sLZPU5wqOzaqbPFEdi8yQbqPkDRwAOwvG2H576Fy1+XyOONnD7tYVfjAoVSN
V3R9eVwQsSknSmMUektkCJZpvC3FZ/hUAp+C9yJ/zx+CaNkzl0DV81bMp2HAYkBI
9mfOyZNWxxgU8Jyq4s7Y5m3mXL4BvDK2w6/dQzCtD0f/MXVJziFM+g==
-----END CERTIFICATE-----
Generated at Sun Jun 22 22:06:53 2025 by rpki-client