Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/A7Lw_K3pk4qXaif-vYtmbj8xqK0.roa
File: A7Lw_K3pk4qXaif-vYtmbj8xqK0.roa (raw, json)
Hash identifier: 5HMJXbcaXC7BBCCa8ZphwdjfvGHVZQCv/OS4yGJARUM=
Subject key identifier: 03:B2:F0:FC:AD:E9:93:8A:97:6A:27:FE:BD:8B:66:6E:3F:31:A8:AD
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 35ED
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/A7Lw_K3pk4qXaif-vYtmbj8xqK0.roa
Signing time: Sun 31 Mar 2024 11:52:18 +0000
ROA not before: Sun 31 Mar 2024 11:52:18 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13805 (0x35ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 31 11:52:18 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=03B2F0FCADE9938A976A27FEBD8B666E3F31A8AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:01:5f:1f:ea:56:b0:54:9b:53:d1:89:05:3f:
8a:7f:a4:52:d1:ac:02:20:0f:af:99:08:68:e5:56:
19:12:72:f7:63:62:a5:eb:8f:11:cb:d3:58:f2:94:
aa:e9:5d:73:00:3d:0e:54:f0:d0:d2:1e:27:d6:d2:
60:df:df:d3:a4:fd:3b:4d:8d:a9:65:92:ba:a3:4b:
b9:18:cf:54:36:45:3e:16:d5:6e:91:c4:f5:05:4f:
05:5c:33:31:69:0b:e9:f0:bb:73:2c:c0:82:2a:4a:
39:57:ca:68:21:e2:be:09:9b:e7:3c:36:9f:28:4b:
99:a9:29:d9:9f:90:cf:70:21:8d:33:85:26:94:0b:
ff:00:59:7f:28:eb:b2:5e:8e:93:88:da:7e:ae:d6:
43:97:85:cc:68:0a:f8:5d:d7:e2:6c:ea:5b:d2:12:
e3:83:cc:cb:19:c5:a2:64:de:0b:98:e7:40:6a:83:
6e:d5:c8:58:ea:2b:1d:45:31:01:18:32:f0:7d:d8:
d2:52:04:01:03:07:4c:ea:b3:08:ea:5f:b0:82:a2:
3b:5e:ca:b7:57:eb:92:e3:fa:04:9c:d9:69:43:a1:
19:1e:62:4b:6f:fb:df:bf:86:6e:50:23:8a:4b:be:
ee:5e:2b:27:42:6a:92:52:4f:c7:72:70:1c:20:a8:
fa:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B2:F0:FC:AD:E9:93:8A:97:6A:27:FE:BD:8B:66:6E:3F:31:A8:AD
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/A7Lw_K3pk4qXaif-vYtmbj8xqK0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
71:2c:b1:71:36:e4:af:63:ed:e4:f8:56:f1:eb:33:90:c2:45:
89:87:69:03:ed:1c:b2:43:cd:7a:8d:6b:4e:a5:64:35:6d:c0:
e4:1e:4b:57:e6:51:9b:3b:bc:eb:4c:d3:de:c9:3f:79:fe:9d:
d2:b5:d7:c1:20:4b:15:11:11:07:78:30:f0:48:04:f0:cb:41:
bc:de:69:35:6d:62:fe:c7:4c:c2:ef:1f:ba:64:47:71:43:bf:
9c:76:0b:da:03:d0:f6:8a:cd:39:b0:53:0d:1a:89:42:10:9d:
98:1f:a4:09:90:b9:c6:49:d4:05:94:6d:c5:54:47:26:d3:4b:
83:1e:f8:e3:dd:41:79:2d:c4:7f:3d:76:2a:50:37:ef:b6:67:
6d:72:c3:56:94:a3:09:a2:6e:cf:5e:f0:12:77:1d:04:96:61:
d8:0b:8f:7f:26:97:c8:06:dd:92:fd:22:68:a7:ee:4d:41:69:
66:9b:b2:86:72:0e:68:30:da:9e:85:60:1a:76:05:39:12:44:
dc:9e:f1:74:2e:fb:81:2c:c6:76:ff:7e:58:c5:c2:64:cd:1d:
d6:ac:88:5f:7c:20:0d:3c:ce:a6:7e:c8:61:20:e7:ba:0a:ca:
7d:db:54:ba:33:4e:b5:86:95:91:27:52:3b:17:8a:4f:b3:f1:
f0:06:fb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 02:19:55 2025 by rpki-client