Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/92EBLXoAvbxBmIQOCJ3sVagZzKM.roa
File: 92EBLXoAvbxBmIQOCJ3sVagZzKM.roa (raw, json)
Hash identifier: 1mhvbJB8XhiV9xHKundA3dBbkRVQDsaIwgMnJFT/EAY=
Subject key identifier: F7:61:01:2D:7A:00:BD:BC:41:98:84:0E:08:9D:EC:55:A8:19:CC:A3
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 51AE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/92EBLXoAvbxBmIQOCJ3sVagZzKM.roa
Signing time: Tue 07 May 2024 11:53:52 +0000
ROA not before: Tue 07 May 2024 11:53:52 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20910 (0x51ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 7 11:53:52 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F761012D7A00BDBC4198840E089DEC55A819CCA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:23:13:ba:b1:e8:44:7b:1a:04:d8:ef:84:11:
b1:f4:c7:dc:4d:e3:a6:57:49:be:22:e0:ed:99:a4:
16:a3:17:b8:05:f3:b2:08:27:3d:1e:ef:22:96:2f:
4c:e7:17:ab:0f:92:43:e8:26:90:2c:72:e0:79:8c:
f3:55:df:ad:3b:ca:97:c7:3c:a2:fc:b6:2f:ba:ba:
7b:94:e9:86:f2:d3:f4:9c:ae:be:74:37:ac:3e:e5:
ac:7a:ce:15:ea:67:6f:22:7f:ef:87:a5:74:51:c8:
76:a0:50:57:78:d8:4c:73:77:10:a2:cc:90:7f:d9:
16:65:c5:c2:05:00:0f:5d:c4:59:da:ab:1f:46:38:
0d:ae:eb:40:fb:08:7c:2e:89:96:e7:63:99:1f:34:
cb:24:29:e0:62:86:0a:13:2b:b3:30:af:71:14:8b:
b2:69:3f:0f:16:0b:53:d9:3c:85:af:b6:30:23:cb:
05:b4:ec:97:c2:bf:c1:18:95:34:1a:b2:da:e3:40:
f0:e7:9e:2d:1f:46:b9:80:04:04:39:3a:bd:67:12:
3f:8f:87:83:b0:ea:9f:02:8c:a4:8f:47:25:61:ce:
93:85:e9:91:28:87:5b:4e:29:73:f8:32:e9:ae:a8:
2d:ce:7a:76:03:14:29:a5:68:bf:d6:80:b7:b5:74:
17:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:61:01:2D:7A:00:BD:BC:41:98:84:0E:08:9D:EC:55:A8:19:CC:A3
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/92EBLXoAvbxBmIQOCJ3sVagZzKM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a5:1f:6f:eb:1b:26:1e:b6:3f:a7:2f:36:41:2e:85:15:16:77:
83:7c:50:0c:e9:63:f2:9e:88:71:60:dc:88:95:bb:cf:48:ec:
a4:c1:34:e2:c2:17:ad:e2:e4:00:6f:b6:23:80:ae:d1:16:0a:
cb:2c:85:8d:fd:1f:4b:6e:e1:f3:9e:9e:43:98:d9:d5:2c:22:
53:da:eb:2e:7d:78:5a:07:d8:a7:65:51:f5:66:59:fd:89:4b:
af:68:d2:6f:6a:7e:5b:e2:f0:e7:20:22:ce:76:8b:de:8e:a4:
fc:63:04:29:00:81:53:90:4f:16:15:55:8c:66:83:3d:9b:84:
aa:bf:13:25:e3:05:9c:d3:8f:22:6a:c7:8d:88:0a:ae:c1:8c:
64:b5:03:a0:dd:1e:2d:d8:f5:50:11:38:84:0f:b3:50:e9:25:
69:7c:d5:c1:b0:b5:ab:b9:d0:e1:59:0d:4e:00:68:86:b9:06:
26:01:90:5f:48:7c:3b:54:31:db:c0:a7:9d:48:af:e6:b3:1a:
f2:30:d5:21:78:3c:b6:2a:48:db:07:40:e4:34:d3:60:24:ea:
74:f2:c6:3d:07:be:8f:03:63:70:00:df:7e:ea:e3:21:8f:ef:
79:fc:b8:b8:6a:b1:37:6d:2c:13:37:42:1f:fb:7b:d3:4d:e2:
8b:68:8a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 23:22:09 2025 by rpki-client