Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/AWOcCuGfQ5dudttF1dMeOc7Dnt0.roa
File: AWOcCuGfQ5dudttF1dMeOc7Dnt0.roa (raw, json)
Hash identifier: 9Nf7N60w6EsMIrCYtF9J1Gio3AXeX+n+8+FVd0uJYeA=
Subject key identifier: 01:63:9C:0A:E1:9F:43:97:6E:76:DB:45:D5:D3:1E:39:CE:C3:9E:DD
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 408B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/AWOcCuGfQ5dudttF1dMeOc7Dnt0.roa
Signing time: Sun 14 Apr 2024 15:22:53 +0000
ROA not before: Sun 14 Apr 2024 15:22:53 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16523 (0x408b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 14 15:22:53 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=01639C0AE19F43976E76DB45D5D31E39CEC39EDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bf:19:9d:28:63:b7:bb:73:88:64:64:b0:91:
7d:7a:a0:2b:ca:c6:a2:f8:af:b6:5e:80:66:f4:76:
cf:05:73:2c:0e:f5:c6:b3:60:e3:b2:2c:d1:7f:16:
d7:6d:b2:34:3c:f9:65:e0:04:95:da:4f:d9:75:69:
25:c2:a5:11:6b:5e:52:17:c5:98:02:59:e8:7f:8f:
29:7d:d1:94:bc:b4:f0:b0:e5:85:a5:10:96:eb:e1:
bd:85:ee:f9:b8:33:9e:b3:36:c5:d7:9c:ec:58:01:
48:05:fc:c5:ce:28:ff:d2:1c:d4:de:b7:70:c0:6b:
42:bb:ca:62:13:7e:0b:59:56:c8:05:3a:c4:6b:26:
c5:85:43:c5:1b:99:89:88:02:b1:ea:c6:ae:93:9e:
d3:27:f3:86:eb:b4:f3:ca:ef:bb:75:0e:ab:4b:64:
ff:69:fa:54:50:17:78:d8:df:fe:78:96:cc:66:76:
28:d8:a3:36:c4:4a:85:4c:01:85:1c:3e:a8:a0:43:
39:e4:7a:09:69:0a:1a:14:34:59:1e:c8:4b:7f:41:
fd:f8:8f:1f:f2:41:39:6b:82:27:64:a6:b0:ba:25:
f0:ac:1a:4b:8c:0a:11:0c:b7:e9:26:49:6c:e1:7c:
e0:f8:8a:ae:ec:f2:6a:e5:75:a8:25:09:aa:59:2c:
97:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:63:9C:0A:E1:9F:43:97:6E:76:DB:45:D5:D3:1E:39:CE:C3:9E:DD
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/AWOcCuGfQ5dudttF1dMeOc7Dnt0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
9e:d9:83:25:3f:54:e3:0f:e4:40:ea:af:37:a8:5a:21:b0:05:
f7:35:c7:e5:29:51:54:7f:b7:3e:37:ad:26:5f:0e:08:91:02:
00:6a:59:c9:a2:21:17:f8:02:6a:c4:c7:fc:a3:15:79:bb:b4:
6c:b9:68:64:2b:68:cf:6c:5b:14:a5:b4:89:22:21:98:bf:48:
3d:d8:73:99:2a:8f:8d:fc:d2:3e:bc:ec:b8:3b:2a:05:27:2d:
0a:25:f4:8a:f3:ba:0d:a9:3e:3c:6c:cd:eb:78:35:fe:4a:fe:
9e:2b:e7:62:64:ea:72:35:0b:2a:ac:ac:83:14:25:e0:a8:ad:
eb:12:01:c7:0c:e0:c3:45:19:3e:cf:e2:8b:45:56:f7:31:ca:
b5:26:20:28:98:4d:22:f9:39:a8:70:5d:66:68:fc:56:bd:80:
f3:2c:07:b1:e6:26:40:00:9f:8b:bc:23:cb:ed:ca:ae:a3:5b:
e3:93:8c:92:11:a9:d8:07:e3:c1:62:0d:ab:0c:b4:8d:6f:24:
b5:d7:54:57:e8:c1:cc:62:47:fe:4b:01:be:c6:f2:80:ae:eb:
75:90:89:c7:ff:84:53:4b:c9:f6:30:02:7f:b3:61:64:4b:b2:
ab:f2:8b:c9:00:7a:7c:f9:ea:6b:d8:97:ae:f7:5c:2b:1f:19:
1e:5b:52:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 13:39:18 2025 by rpki-client