Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/9BlJZj82TH6VZWiqW1JjlE3IOHU.roa
File: 9BlJZj82TH6VZWiqW1JjlE3IOHU.roa (raw, json)
Hash identifier: qqGW+mc35QgrKfOXqR9BIR/nFhP2/Nq0dYQP86FXRAU=
Subject key identifier: F4:19:49:66:3F:36:4C:7E:95:65:68:AA:5B:52:63:94:4D:C8:38:75
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4FAD
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9BlJZj82TH6VZWiqW1JjlE3IOHU.roa
Signing time: Sat 04 May 2024 19:54:02 +0000
ROA not before: Sat 04 May 2024 19:54:02 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20397 (0x4fad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 4 19:54:02 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F41949663F364C7E956568AA5B5263944DC83875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f7:c0:c7:40:bd:cb:d0:b7:17:ce:85:c3:39:
53:52:56:5d:5b:4a:6e:56:82:5c:07:37:61:e0:23:
e5:bd:db:07:38:95:c0:36:d6:f6:a4:c5:12:66:e1:
70:51:81:f9:c5:2c:53:b3:1d:85:71:a0:b8:11:fe:
2e:84:77:d2:bd:53:f7:8a:d9:10:a8:9b:85:22:2d:
95:76:43:97:75:bc:33:7a:50:82:5c:d4:c8:46:17:
60:53:64:83:41:ca:62:09:46:c1:1a:e5:38:a0:99:
e1:11:32:56:29:d1:49:ec:2d:31:3d:f0:b5:8b:88:
18:6f:e4:e8:5b:50:91:db:aa:cd:e1:21:f1:37:d0:
92:f1:cb:25:51:86:ee:11:9a:a4:35:95:13:31:77:
3d:61:5e:a5:e6:12:5a:49:85:b6:7e:9c:be:30:63:
0a:3a:f5:2a:26:67:44:d5:89:e2:be:f7:03:0d:36:
11:64:0c:50:1f:a9:f1:5a:25:f0:25:cb:20:2d:62:
1b:34:8b:56:04:44:24:9d:b9:49:f5:9e:5f:a1:fd:
42:be:14:5e:88:9e:40:f9:be:38:8e:98:e4:25:99:
23:b9:fc:01:55:22:9a:40:00:40:ef:ef:9e:58:9a:
6e:86:0f:29:80:e0:34:9a:3a:78:3f:7a:d3:ce:f3:
9f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:19:49:66:3F:36:4C:7E:95:65:68:AA:5B:52:63:94:4D:C8:38:75
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9BlJZj82TH6VZWiqW1JjlE3IOHU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
60:e5:b3:a9:41:1d:6d:c1:3e:f0:ac:76:db:1d:55:4a:11:0a:
6c:b5:34:21:46:7f:64:bb:40:80:e6:d2:61:57:28:67:10:e5:
4e:ee:a8:aa:f4:e1:3f:4c:77:44:e7:cb:02:2d:35:97:15:17:
dc:24:e5:0a:a3:a4:4b:26:38:a0:67:03:17:7b:76:3f:59:f9:
27:83:2a:64:73:03:53:d9:0c:5b:e0:53:28:f0:af:0d:7e:dd:
08:22:a8:5a:c4:3d:16:c7:29:a3:b6:eb:d6:c6:a4:60:5b:d3:
f5:7b:35:8a:10:91:7c:34:1b:54:32:5a:cb:d2:30:c3:b8:84:
bf:2f:7f:d3:f9:3b:f1:c7:12:13:50:d3:1d:8a:a9:42:a8:3c:
36:ba:97:15:50:0e:ff:f3:72:58:42:33:6a:78:2e:30:42:fd:
02:13:0a:0f:d3:91:d6:d5:10:3f:57:66:ac:fa:5b:58:96:c9:
18:fa:83:b2:e7:d7:3b:87:26:8d:ce:a4:05:be:71:78:30:64:
93:0e:15:03:32:02:08:63:c5:0c:61:ea:87:df:54:74:c0:99:
8b:68:e7:c3:93:4a:80:9a:56:39:15:60:d9:a8:f9:9b:e0:e3:
08:71:0e:61:e6:84:02:1c:9e:89:d9:f6:77:e8:d6:c7:e1:5e:
36:de:db:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 00:24:36 2025 by rpki-client