Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/K3q7PcbEHGWvyvyzImfo40o1jis.roa
File: K3q7PcbEHGWvyvyzImfo40o1jis.roa (raw, json)
Hash identifier: SpFCkMI1ciRIeU8xZm3K0HYuqkUkcQ/YwJx5ZRytf9M=
Subject key identifier: 2B:7A:BB:3D:C6:C4:1C:65:AF:CA:FC:B3:22:67:E8:E3:4A:35:8E:2B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3F21
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/K3q7PcbEHGWvyvyzImfo40o1jis.roa
Signing time: Fri 12 Apr 2024 18:22:49 +0000
ROA not before: Fri 12 Apr 2024 18:22:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16161 (0x3f21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 12 18:22:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2B7ABB3DC6C41C65AFCAFCB32267E8E34A358E2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5d:3b:7e:02:48:0f:91:81:f4:65:36:e0:85:
d2:e0:17:b9:dc:3a:c8:29:56:a8:ff:99:7e:4a:a0:
24:16:c7:c5:60:e2:bf:7d:6d:f9:20:66:90:b1:05:
99:c8:4b:eb:4a:f1:8e:c1:f1:56:84:6b:57:b4:6b:
d2:39:0a:7d:ce:33:51:c8:ec:71:01:cd:b5:72:ec:
00:5c:f1:b3:50:9a:f9:c3:bd:dc:3d:a0:b2:df:a5:
54:4f:c6:c0:1e:d6:0d:d1:12:a6:6a:10:86:a7:bd:
ff:52:01:f4:1f:35:68:fd:cc:fe:b3:a8:b7:b8:38:
84:2a:da:8f:3f:f5:30:83:4b:e8:4e:c4:a2:c6:46:
50:9e:ce:a7:fd:34:24:ef:22:1d:ce:87:30:7b:2e:
fd:8b:4b:18:8d:b7:65:26:5d:eb:9d:ea:55:78:75:
6e:d6:50:88:cc:0f:c8:f1:8e:11:a3:00:26:6d:27:
bc:b1:60:77:29:5d:c9:39:9e:63:db:b8:5e:16:83:
99:ce:fe:f2:2c:5d:72:15:b7:be:95:31:e9:3a:0c:
c3:97:8c:e1:49:ac:4c:0e:c0:68:b9:3c:e8:c2:c9:
13:cd:10:0a:d2:34:09:6b:f2:29:59:8e:22:93:d4:
e1:fb:84:05:a9:13:ca:7d:e5:5c:9f:3a:29:5a:39:
9f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7A:BB:3D:C6:C4:1C:65:AF:CA:FC:B3:22:67:E8:E3:4A:35:8E:2B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/K3q7PcbEHGWvyvyzImfo40o1jis.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
94:5c:73:3c:db:e3:16:bd:f5:93:f0:fa:52:76:64:71:43:4f:
89:8f:b0:5d:1e:2d:f2:80:a9:ea:b3:98:97:79:21:95:c9:27:
fa:eb:fc:9c:6b:b4:05:a7:54:3b:c8:40:0c:3f:cb:6d:f9:32:
3b:93:20:2c:df:2e:b1:bf:f6:52:b6:4c:13:2d:64:d2:ed:53:
d8:5c:37:b2:cc:7e:14:88:23:c8:c9:b9:2b:21:7e:a1:4a:af:
98:8a:0d:6d:de:2c:2d:7a:4f:dc:e5:92:3f:de:08:e0:6a:3f:
e6:f0:56:ab:48:e3:74:05:33:6e:e5:e8:21:16:e8:91:7c:ff:
2b:ba:76:ee:d4:3f:59:dd:e3:64:5b:bd:7f:af:11:10:e9:a7:
ff:dc:d9:f7:3e:72:e0:ad:c1:04:3a:e2:e4:45:fa:3c:66:f4:
4d:b3:b0:c3:bc:b7:02:72:78:58:2b:3b:bc:d6:fe:95:35:88:
3b:1a:ea:47:0f:7f:07:46:d4:8c:e9:59:8e:bf:6d:5d:8b:05:
0f:48:97:1a:74:58:ec:89:b2:2c:14:38:ff:8c:00:8d:24:ce:
39:0d:bc:23:e0:69:47:d7:c5:48:e5:1b:89:39:c7:4f:0b:f2:
9e:3d:1b:d3:b9:58:02:16:e7:53:96:23:84:44:a9:61:f8:e3:
90:9c:c6:d2
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICPyEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTIx
ODIyNDlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDJCN0FCQjNEQzZDNDFD
NjVBRkNBRkNCMzIyNjdFOEUzNEEzNThFMkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDWXTt+AkgPkYH0ZTbghdLgF7ncOsgpVqj/mX5KoCQWx8Vg4r99
bfkgZpCxBZnIS+tK8Y7B8VaEa1e0a9I5Cn3OM1HI7HEBzbVy7ABc8bNQmvnDvdw9
oLLfpVRPxsAe1g3REqZqEIanvf9SAfQfNWj9zP6zqLe4OIQq2o8/9TCDS+hOxKLG
RlCezqf9NCTvIh3OhzB7Lv2LSxiNt2UmXeud6lV4dW7WUIjMD8jxjhGjACZtJ7yx
YHcpXck5nmPbuF4Wg5nO/vIsXXIVt76VMek6DMOXjOFJrEwOwGi5POjCyRPNEArS
NAlr8ilZjiKT1OH7hAWpE8p95VyfOilaOZ8VAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUK3q7PcbEHGWvyvyzImfo40o1jiswHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0szcTdQY2JFSEdXdnl2
eXpJbWZvNDBvMWppcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAJRcczzb4xa99ZPw
+lJ2ZHFDT4mPsF0eLfKAqeqzmJd5IZXJJ/rr/JxrtAWnVDvIQAw/y235MjuTICzf
LrG/9lK2TBMtZNLtU9hcN7LMfhSII8jJuSshfqFKr5iKDW3eLC16T9zlkj/eCOBq
P+bwVqtI43QFM27l6CEW6JF8/yu6du7UP1nd42RbvX+vERDpp//c2fc+cuCtwQQ6
4uRF+jxm9E2zsMO8twJyeFgrO7zW/pU1iDsa6kcPfwdG1IzpWY6/bV2LBQ9Ilxp0
WOyJsiwUOP+MAI0kzjkNvCPgaUfXxUjlG4k5x08L8p49G9O5WAIW51OWI4REqWH4
45CcxtI=
-----END CERTIFICATE-----
Generated at Fri Jun 20 10:04:31 2025 by rpki-client