Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/NOV8z4ja5KaDAIFSgO0ZBmXMOCs.roa
File: NOV8z4ja5KaDAIFSgO0ZBmXMOCs.roa (raw, json)
Hash identifier: PNBjM+u2Qc8Qs+ZSOPsF0VA+PvFAsxPiEkwdfsUsDq0=
Subject key identifier: 34:E5:7C:CF:88:DA:E4:A6:83:00:81:52:80:ED:19:06:65:CC:38:2B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4B05
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/NOV8z4ja5KaDAIFSgO0ZBmXMOCs.roa
Signing time: Sun 28 Apr 2024 14:53:25 +0000
ROA not before: Sun 28 Apr 2024 14:53:25 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19205 (0x4b05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 28 14:53:25 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=34E57CCF88DAE4A68300815280ED190665CC382B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:80:e1:1d:94:ee:9e:35:b0:2a:0f:3f:a0:16:
1d:7d:f3:7e:8a:90:1b:e7:8a:81:d3:df:58:ee:22:
8a:8c:c2:1f:2d:0b:ea:0e:fe:4f:d5:0e:a1:10:14:
a4:d9:66:a5:2a:91:d9:60:f0:54:12:af:10:6d:8b:
de:ad:36:15:c3:ed:cc:7f:e0:08:b6:c4:6c:d8:36:
93:b4:37:ac:db:d9:db:24:38:60:f7:17:d8:16:9c:
70:fe:36:6d:bb:66:67:a7:bd:09:09:68:84:65:48:
70:46:56:ca:24:49:82:7f:42:9d:db:de:a1:32:6b:
60:15:50:74:1f:d8:ea:44:17:ab:74:82:b0:7c:2f:
09:59:a9:ef:3a:37:be:12:3b:5c:39:a0:e9:69:89:
63:1a:75:7f:f5:3f:83:89:3b:1f:46:4b:c3:c6:d8:
1d:ab:26:7d:87:78:32:6f:d8:68:21:5f:fb:6c:9d:
4d:f1:c3:f7:d3:24:74:79:d1:ec:26:65:56:64:2a:
fa:32:6d:c5:c0:62:5c:39:b0:4b:6f:cb:d7:28:63:
cd:b3:a8:d3:21:36:72:d4:e4:db:1f:a2:71:fe:3e:
81:0b:92:21:f5:fd:95:b3:ae:65:ef:44:b3:c5:00:
74:aa:c3:49:23:8b:48:c7:7b:bb:85:6a:1c:da:e6:
be:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E5:7C:CF:88:DA:E4:A6:83:00:81:52:80:ED:19:06:65:CC:38:2B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/NOV8z4ja5KaDAIFSgO0ZBmXMOCs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
74:2a:4a:05:9a:5d:ed:44:dc:16:d6:3e:c1:73:83:e7:3c:fd:
7e:31:59:6f:03:e5:70:15:b5:b6:64:bb:58:f3:f0:f2:73:e6:
a0:3d:33:d5:5a:09:cc:6b:bd:92:0e:49:c8:54:d3:3a:7e:c3:
eb:d7:50:4f:b4:ce:54:10:b8:13:bd:c1:43:9e:55:5f:71:a3:
98:9e:b2:d3:ef:f3:17:d0:42:b6:a5:9e:e4:38:08:fe:c0:39:
bf:9f:d2:8f:2a:84:75:2c:58:56:66:cb:17:07:d9:2c:b8:eb:
3f:4d:ed:74:30:19:76:de:26:ee:b6:42:45:1e:35:ca:87:ce:
d4:1f:b5:37:07:c7:42:fa:be:87:3f:09:46:f8:86:b7:58:e4:
9b:73:ec:ed:31:d2:c2:5c:b0:e3:f8:5b:7c:11:3c:3a:10:2a:
70:0b:18:c4:85:3a:b2:66:ad:1c:0e:59:d2:3b:9d:ae:28:69:
4d:13:6e:cc:80:a8:35:7f:75:2b:38:7d:0a:f8:c2:87:2c:45:
9d:ad:52:e6:38:30:db:5b:6f:2c:16:0e:a4:8d:be:d8:53:f0:
51:45:50:e0:bf:dc:7c:87:59:60:11:22:7c:fa:c3:fe:9e:4a:
a4:85:cb:a2:af:26:77:13:35:a9:aa:15:8a:53:93:b2:85:ee:
66:53:1f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 16:29:47 2025 by rpki-client