Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/433iotOSw4vxuIYItZvK2Ik7crw.roa
File: 433iotOSw4vxuIYItZvK2Ik7crw.roa (raw, json)
Hash identifier: qhVXne7K2PSCRTPskVIKGWL4vwZTC/j6hAoIIpCm6U8=
Subject key identifier: E3:7D:E2:A2:D3:92:C3:8B:F1:B8:86:08:B5:9B:CA:D8:89:3B:72:BC
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 426F
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/433iotOSw4vxuIYItZvK2Ik7crw.roa
Signing time: Wed 17 Apr 2024 03:52:58 +0000
ROA not before: Wed 17 Apr 2024 03:52:58 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17007 (0x426f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 17 03:52:58 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E37DE2A2D392C38BF1B88608B59BCAD8893B72BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d1:05:1c:e8:34:e8:4f:b9:c5:5f:82:91:aa:
5f:f0:af:45:92:f1:bb:22:65:ad:6f:b5:73:34:5b:
6e:ae:8c:61:4e:ea:c2:c7:af:09:de:54:df:02:37:
4f:0b:a6:a0:20:90:f9:3f:94:14:0c:57:f1:91:4d:
91:cd:05:aa:4b:1b:ab:2e:e6:01:43:c2:5d:22:de:
bc:79:05:55:0d:09:0a:f6:3b:1a:b8:bc:9b:90:4c:
e3:4e:e2:d6:23:1c:1d:93:fd:52:49:8e:7d:03:a8:
b1:12:18:f4:76:0e:9f:8f:b8:2d:fe:7f:24:7d:8f:
8b:14:d2:c4:a9:3a:d8:fa:ad:f0:1a:a6:06:34:46:
da:7a:5a:af:54:5a:8c:0a:d7:d2:fb:8a:52:80:f0:
84:dd:f3:05:a0:6f:33:f5:b3:c9:2b:89:45:6d:59:
39:24:bd:f2:b8:54:c8:b9:fe:ef:b6:0b:eb:b6:99:
8d:4e:ff:e9:74:ad:a1:cd:28:25:4e:1c:46:c3:e1:
06:74:4a:10:a9:20:52:b0:68:1d:5e:32:b8:0f:cd:
72:54:b7:bc:29:b2:f3:81:8f:91:18:5b:66:63:62:
12:b8:7c:cc:4b:b1:f5:b9:16:a0:a8:87:47:92:62:
c9:44:7d:90:f1:1c:14:a4:11:58:42:30:5d:b8:4c:
3e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:7D:E2:A2:D3:92:C3:8B:F1:B8:86:08:B5:9B:CA:D8:89:3B:72:BC
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/433iotOSw4vxuIYItZvK2Ik7crw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
16:c8:38:ec:ae:13:d0:91:af:20:9b:4a:91:3f:62:0a:39:f4:
a2:2e:a4:5b:80:71:c9:bd:5f:8e:1c:e7:47:d4:da:43:ac:5a:
bf:d5:10:a7:30:bc:fd:19:58:ef:36:fa:92:31:ad:ae:6f:df:
32:84:72:1c:1f:eb:da:64:77:0d:79:e5:7a:d0:5e:97:2c:5b:
47:a2:55:b0:4d:eb:dc:28:e0:7a:c3:23:7e:c0:60:4d:0a:db:
37:fa:5c:b0:70:59:cc:71:86:11:32:e1:b4:3a:40:50:c4:47:
c9:ea:e8:bf:a0:98:e4:9d:a3:82:80:b4:a1:1a:9b:89:59:60:
2c:95:76:d3:10:61:9d:3e:c1:ea:e7:5e:00:1d:2d:58:b8:71:
67:4e:5a:91:5a:f6:07:37:aa:e5:7f:9c:ec:33:ec:c4:87:4b:
fb:86:b9:03:ce:b0:ee:18:bf:5a:f3:56:62:fc:bf:e4:2b:c5:
0b:f0:97:8e:3d:6d:1f:e1:35:37:1e:12:63:8d:6b:67:43:d2:
16:39:3f:ae:4c:b4:b1:e1:59:71:32:f3:e8:d0:77:69:88:dd:
4d:01:79:fe:7b:af:09:4b:ae:3e:f0:ed:82:5b:a7:56:89:cd:
58:10:e7:f3:ea:cd:ee:85:0d:76:30:71:50:16:5d:e9:f7:32:
83:ed:c7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 16:54:36 2025 by rpki-client