Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/6XC-yNi2wK1ojvwBAdisd8tarUQ.roa
File: 6XC-yNi2wK1ojvwBAdisd8tarUQ.roa (raw, json)
Hash identifier: RJtvEySc5jcZsawcqoOgEXzNaHxyRAmYKXZVU27g9ec=
Subject key identifier: E9:70:BE:C8:D8:B6:C0:AD:68:8E:FC:01:01:D8:AC:77:CB:5A:AD:44
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 354D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6XC-yNi2wK1ojvwBAdisd8tarUQ.roa
Signing time: Sat 30 Mar 2024 15:52:08 +0000
ROA not before: Sat 30 Mar 2024 15:52:08 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13645 (0x354d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 30 15:52:08 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E970BEC8D8B6C0AD688EFC0101D8AC77CB5AAD44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ce:be:fc:00:4d:56:c7:2d:a8:ce:aa:90:fb:
9d:31:ba:47:a0:a6:a3:3f:cb:c5:25:0b:c7:1b:6b:
f6:1f:ca:62:db:80:70:4d:9f:a3:ad:a1:67:5e:e9:
39:98:4b:fa:13:c1:76:15:78:7f:70:cc:fb:ce:88:
4e:c3:30:d1:b7:44:b1:47:8c:89:98:25:7e:3a:d2:
c3:bd:0d:c7:58:24:b0:e4:88:04:9d:59:cc:25:2c:
b7:3b:b7:56:86:50:48:47:4e:92:28:ce:68:48:ef:
ec:cf:2c:42:65:3d:35:0c:a9:8a:b2:d8:ec:4e:1f:
88:2c:d1:6b:92:77:b7:07:31:93:17:dc:c9:ec:a8:
0a:9e:c8:f4:7b:d6:b5:35:c2:6e:c8:d4:db:90:98:
e7:29:ea:fb:21:8f:ed:20:28:64:d5:46:e2:9f:5f:
b5:05:c9:5a:9e:1a:17:ea:20:26:93:d7:16:32:d2:
ef:6c:56:f7:8f:82:f3:aa:f2:88:6f:56:34:af:b4:
81:e5:63:a5:55:14:c7:c4:64:cc:78:99:be:23:eb:
64:c1:04:8a:81:67:1a:6f:7c:7d:13:ab:5e:e8:5b:
4e:b2:7b:01:29:c1:ed:13:ea:10:31:d6:6c:e1:15:
ac:a3:0e:4c:c3:57:96:95:8e:af:b5:7d:54:33:00:
e2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:70:BE:C8:D8:B6:C0:AD:68:8E:FC:01:01:D8:AC:77:CB:5A:AD:44
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6XC-yNi2wK1ojvwBAdisd8tarUQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
3e:aa:3a:6c:4a:a2:f6:85:bd:df:85:e6:f9:77:1f:3f:27:ba:
1f:9d:85:06:c9:f8:5a:e5:0a:06:41:d0:df:62:53:06:10:4c:
37:74:77:a9:de:a3:d2:d3:a0:e6:b9:23:ee:be:fa:9f:4d:da:
25:f5:d1:bf:91:39:5f:30:e4:08:14:ba:7f:05:26:40:53:4b:
84:a5:29:c1:40:fd:df:bf:4a:b1:93:c4:8e:64:5b:c4:96:50:
22:16:63:1d:54:ec:69:35:ac:fc:d0:92:14:e4:32:b1:bc:0c:
9c:84:fc:48:bc:53:8b:a9:a1:db:bd:ad:da:bc:83:84:32:be:
2c:bd:6d:ed:6e:5b:d4:d9:39:9c:20:a7:27:ff:fb:db:0b:b5:
76:a6:6f:81:5a:51:ef:f3:cb:79:88:5b:8a:eb:b9:1b:ce:c0:
28:b4:95:cf:53:8b:58:44:6f:ee:11:d1:1a:62:05:67:a0:83:
c7:54:2d:ed:5b:72:3e:f2:d4:b5:b1:93:3d:30:09:71:8c:fb:
d2:07:fc:67:fa:5f:7d:9f:ed:28:19:d0:75:3c:19:f0:51:93:
75:8a:c7:f9:db:41:f9:17:da:2a:f1:37:ff:a2:e1:59:8b:37:
05:18:f5:94:d5:35:10:07:c1:24:6c:b4:a1:87:6c:c6:55:ef:
5d:2f:16:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 16:31:49 2025 by rpki-client