Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/GTuW-CS69EIv3pkN092ZrIcP_qk.roa
File: GTuW-CS69EIv3pkN092ZrIcP_qk.roa (raw, json)
Hash identifier: VcGGjTjEDmPJfHJJbqmvNEn++t5YuMNGH5FajF6R86M=
Subject key identifier: 19:3B:96:F8:24:BA:F4:42:2F:DE:99:0D:D3:DD:99:AC:87:0F:FE:A9
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4EDA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/GTuW-CS69EIv3pkN092ZrIcP_qk.roa
Signing time: Fri 03 May 2024 17:23:57 +0000
ROA not before: Fri 03 May 2024 17:23:57 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20186 (0x4eda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 3 17:23:57 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=193B96F824BAF4422FDE990DD3DD99AC870FFEA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7a:89:3f:6a:8d:23:47:4c:00:d4:40:5f:02:
f2:a7:c5:fc:e0:fd:78:2f:0f:d4:b1:73:db:7f:d6:
b1:0d:e9:a7:e0:75:e8:ab:d7:48:00:c1:25:ee:75:
18:21:50:e1:b7:81:d8:67:83:0b:ba:f3:ee:c3:b5:
d5:21:7a:0f:e1:61:69:ae:f1:2c:33:a5:af:e4:a9:
f5:66:a2:cb:d5:f5:7d:e7:8f:7e:44:cf:44:65:c3:
f0:91:35:72:eb:08:36:a5:29:a8:d8:20:8e:ae:e9:
2d:f3:c1:e4:80:11:74:9c:ed:52:45:d1:7c:1b:23:
e1:f3:d8:de:c6:9e:fb:03:54:99:02:b1:39:36:c9:
bc:46:1e:17:49:1e:b4:f3:63:3d:fe:95:d8:ee:22:
da:60:7b:01:e7:82:2a:b8:3a:d8:7b:65:66:b5:f5:
09:c2:f0:c0:c4:bd:ec:7f:6e:ca:62:51:a4:cc:11:
57:fd:13:3e:cb:e8:71:86:22:dd:ca:b6:d3:58:5c:
73:90:04:bf:66:96:f6:0c:0d:f8:8d:36:bb:60:b2:
64:5e:36:94:08:8e:90:bd:ca:4f:2f:d2:ec:a0:5b:
3d:ea:06:30:31:96:3e:3c:dc:ce:2a:cc:5a:b3:53:
bf:19:94:9f:f0:7d:e4:d9:07:dc:00:c1:e5:e1:68:
b6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3B:96:F8:24:BA:F4:42:2F:DE:99:0D:D3:DD:99:AC:87:0F:FE:A9
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/GTuW-CS69EIv3pkN092ZrIcP_qk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8a:56:b2:d1:36:02:eb:e6:28:36:b0:a7:3d:c3:3b:22:a2:f2:
f7:85:59:d1:94:5f:31:88:e1:d7:f5:a3:1f:90:61:2f:9a:8d:
15:e9:77:f4:4a:d2:11:60:a2:76:e4:bd:73:a0:34:e2:1e:89:
bb:94:aa:1b:a9:b5:5e:65:d8:aa:ac:28:00:2e:b6:32:92:a7:
fa:39:99:a3:e7:a2:c3:8a:7c:07:a0:66:07:6a:86:6a:33:a4:
ed:f8:7a:29:30:71:27:17:0d:9d:9b:6f:72:07:2f:c4:df:8f:
79:30:71:4f:a9:d6:ef:46:3d:f2:65:33:e9:97:47:20:2c:ad:
a0:f4:00:bf:dd:76:1f:1b:50:80:ea:40:8c:bb:5d:2e:48:ee:
f0:75:38:74:34:24:9b:a6:da:c8:4c:4c:b3:af:31:30:c7:54:
9e:45:8a:8f:27:d9:6a:36:f6:95:9d:26:ca:30:10:d2:b0:81:
f1:ca:21:1b:ba:45:be:de:3a:60:1e:21:fb:af:3d:d6:6b:15:
50:dd:21:73:c6:f4:77:48:5f:e5:c7:6c:49:23:4a:7b:9d:0d:
ad:79:58:81:41:6e:11:d0:be:e3:77:a7:a4:15:d1:0a:a9:c2:
a6:e8:ac:6a:e6:b0:5f:a9:c2:19:84:08:11:36:3f:11:2b:fc:
58:34:0e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 10:36:14 2025 by rpki-client