Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Awg-YUao5qnDgTRk7W9ipt5ZWZA.roa
File: Awg-YUao5qnDgTRk7W9ipt5ZWZA.roa (raw, json)
Hash identifier: CVBIeW4WTTsgS/T2Mo5+LbtuU8+9rtjaUjvR+83RAnY=
Subject key identifier: 03:08:3E:61:46:A8:E6:A9:C3:81:34:64:ED:6F:62:A6:DE:59:59:90
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4C73
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Awg-YUao5qnDgTRk7W9ipt5ZWZA.roa
Signing time: Tue 30 Apr 2024 12:23:34 +0000
ROA not before: Tue 30 Apr 2024 12:23:34 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19571 (0x4c73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 30 12:23:34 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=03083E6146A8E6A9C3813464ED6F62A6DE595990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:71:c5:35:10:b8:5b:24:c4:6f:bd:6d:c2:de:
49:03:bb:2e:6a:68:60:03:18:18:38:79:b1:be:b6:
11:4c:8d:52:a2:a8:3f:dc:19:d2:6f:54:c0:39:11:
b8:51:e0:9b:32:d6:0b:43:0c:f4:98:e2:89:a8:ad:
90:b7:e9:23:4a:6d:1f:64:22:35:4a:f3:ed:a7:ce:
46:fd:68:b7:7d:05:55:49:f1:61:73:b8:3c:9c:c1:
05:7c:e2:7e:9b:65:0e:6f:74:4a:7c:ce:7f:ee:1b:
08:e1:45:52:d5:cd:cf:ca:c8:87:46:28:78:36:1b:
d4:c8:fc:b4:83:f2:7f:e1:29:70:31:10:41:51:c9:
47:67:0c:81:8e:3d:4a:1e:97:50:08:03:ee:06:61:
d5:2d:43:30:db:6f:db:ea:ac:77:2a:bd:2a:3d:28:
e2:f0:f8:fb:c6:86:60:19:2f:4c:73:e7:13:03:7f:
e3:6e:b5:6e:ab:39:af:5d:bf:c8:b6:11:7d:49:9f:
03:d7:48:78:7f:44:89:b4:83:1b:83:0d:03:2b:25:
34:2a:c3:b2:d7:99:c9:f8:c0:f9:b6:f2:34:7c:c4:
66:42:e8:6f:0c:40:11:c9:bd:c3:51:fe:04:c2:6d:
af:12:4c:0b:98:65:32:25:e0:71:99:c0:db:67:46:
70:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:08:3E:61:46:A8:E6:A9:C3:81:34:64:ED:6F:62:A6:DE:59:59:90
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Awg-YUao5qnDgTRk7W9ipt5ZWZA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
0f:fa:85:e2:83:dd:f9:36:8a:29:ff:8f:9d:65:89:88:99:5d:
9f:a0:73:4c:be:95:67:4a:9f:a2:51:e2:4a:b2:4b:45:63:ed:
fb:53:0e:7e:79:5b:bf:8b:74:8d:d2:0d:85:5e:73:9e:1b:38:
05:b0:8c:55:65:21:ee:fa:8a:bf:59:1c:56:ab:49:06:7d:65:
92:cc:92:31:8b:3f:0d:60:7d:8d:a9:ad:60:c5:ca:cc:61:01:
43:9f:6a:1a:6b:75:7d:75:49:4b:4d:44:c3:03:46:55:73:45:
0e:32:52:a0:1b:9d:2d:08:42:73:17:c9:16:c4:1f:71:80:ea:
0b:40:92:5e:98:08:61:f2:7f:c9:79:57:e4:a4:90:a1:39:87:
41:10:da:6e:a1:5c:03:62:16:ef:70:60:dc:1b:e7:ff:b7:23:
3f:c3:73:11:d1:7e:9d:3d:d0:76:8a:33:86:69:9d:78:2b:c5:
7f:65:3f:3f:4d:03:8f:94:ac:d1:07:81:ed:2e:e7:d0:a6:60:
da:f3:a5:7b:d5:4f:9b:27:89:40:96:59:7d:c5:5a:46:eb:55:
66:98:6e:79:cd:19:bd:48:bd:5f:f0:a2:60:d8:ab:94:4d:af:
df:39:c9:76:b8:bc:03:55:eb:f7:ea:ae:b4:b7:43:31:8d:6d:
06:95:17:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 18:37:54 2025 by rpki-client