Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ROu9IKA3PAYdfz6kjAovNXpnT4M.roa
File: ROu9IKA3PAYdfz6kjAovNXpnT4M.roa (raw, json)
Hash identifier: 0RL6anxJvYAOd+JSsAk9u8IJkoBS/S1jles6AYDAe9g=
Subject key identifier: 44:EB:BD:20:A0:37:3C:06:1D:7F:3E:A4:8C:0A:2F:35:7A:67:4F:83
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3321
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ROu9IKA3PAYdfz6kjAovNXpnT4M.roa
Signing time: Wed 27 Mar 2024 18:22:02 +0000
ROA not before: Wed 27 Mar 2024 18:22:02 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13089 (0x3321)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 27 18:22:02 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=44EBBD20A0373C061D7F3EA48C0A2F357A674F83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:88:da:86:76:14:94:f4:3b:db:a1:99:d2:c9:
97:37:b5:bb:53:39:9d:3d:36:e6:fc:b3:50:8c:0a:
23:3b:26:18:35:e1:fd:ed:9c:9a:2e:72:7d:18:35:
c2:fb:8a:62:c1:df:12:53:92:56:4f:c2:83:92:d9:
05:16:11:fb:f1:05:b7:ac:58:c1:12:1f:50:ac:e8:
17:f4:91:7f:51:65:59:62:47:47:72:60:bf:74:b0:
d3:1c:ea:0a:a0:a3:6c:d4:96:28:92:8f:db:c0:76:
84:23:5b:84:8f:35:82:07:ec:71:90:7c:a8:5b:5c:
b9:1d:15:c8:bf:03:25:cd:87:74:71:c6:7e:07:ef:
f1:f4:a7:5a:e2:57:bb:59:10:55:0d:76:2a:95:21:
0d:bb:c1:49:c9:a7:cf:0e:55:6a:53:93:94:9d:5c:
c1:24:bc:54:de:7b:6a:2a:1a:9d:22:0b:d9:61:e0:
64:f6:fc:0d:1e:0d:9f:cb:90:b0:8c:98:d8:e7:75:
e5:37:69:7e:0d:1d:f2:34:c2:2c:ff:f1:f0:2a:3e:
99:7a:20:0d:92:04:19:e1:63:d6:94:c5:83:a9:6b:
d5:46:26:ed:fa:9e:21:73:55:5d:20:d5:9b:28:af:
ba:7a:16:88:a2:29:06:62:17:80:bf:1b:c6:e6:ec:
1a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EB:BD:20:A0:37:3C:06:1D:7F:3E:A4:8C:0A:2F:35:7A:67:4F:83
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ROu9IKA3PAYdfz6kjAovNXpnT4M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
a3:94:ff:4f:6d:f2:8e:cf:1b:1f:9e:1a:ae:0e:cd:c6:98:f5:
2b:2c:1b:e8:ba:3f:4a:03:15:c7:eb:7f:78:88:87:f1:39:49:
17:ed:e9:fd:e2:a3:c9:d7:b6:cb:60:9c:8c:1d:ab:d6:49:dd:
c1:20:64:5e:b2:d3:f9:5e:aa:4e:0d:2e:49:79:b8:a0:dc:64:
90:85:31:48:d3:8d:ef:91:fb:74:24:da:e4:45:2f:4c:ac:c0:
c5:1a:9d:90:ae:79:a0:c9:6b:c3:0d:e3:15:4f:23:4e:84:8e:
81:32:18:d0:81:09:b6:52:f2:3c:e5:16:f3:43:54:d5:04:3d:
45:b4:bf:73:c9:56:a5:c8:89:3e:47:61:1e:7e:0a:ea:63:02:
68:36:b9:b6:e2:40:16:22:0d:ff:42:ec:7e:36:4f:d7:f6:82:
97:36:ea:46:fa:62:b3:80:0d:1d:86:51:2e:b7:9f:41:6a:21:
be:a0:02:60:00:4c:fb:c7:a9:86:f3:ae:58:4c:6f:b4:83:61:
8b:4e:15:c5:6b:e0:f5:6c:05:b3:ae:b8:ac:34:ab:ab:ba:77:
26:e2:6a:3e:51:c3:74:cc:32:f2:a0:37:34:18:c6:cd:93:41:
6d:bc:e6:04:9d:d9:2a:3a:37:3e:a7:18:24:fd:40:b5:c6:b6:
56:67:94:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 01:05:48 2025 by rpki-client