Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/U8fyHheBWD3RYTAgxf7EO5Ffri0.roa
File: U8fyHheBWD3RYTAgxf7EO5Ffri0.roa (raw, json)
Hash identifier: a++5I8tjxOeJtI4rOWtnjm03/waO1HklqeTBMj/JzoM=
Subject key identifier: 53:C7:F2:1E:17:81:58:3D:D1:61:30:20:C5:FE:C4:3B:91:5F:AE:2D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 550D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/U8fyHheBWD3RYTAgxf7EO5Ffri0.roa
Signing time: Sat 11 May 2024 23:54:09 +0000
ROA not before: Sat 11 May 2024 23:54:09 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21773 (0x550d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 11 23:54:09 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=53C7F21E1781583DD1613020C5FEC43B915FAE2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:48:f5:53:ec:5c:3a:12:ab:57:78:79:6d:b4:
54:a9:7d:a8:64:82:3a:17:81:87:4a:1a:6a:65:97:
6e:26:5a:43:24:79:3d:af:70:b8:e2:5d:04:1d:13:
aa:f3:b5:ae:64:10:21:dd:32:03:26:61:f4:e6:7d:
00:0e:65:8d:83:80:e5:a3:42:f3:a7:60:21:92:23:
78:4d:59:ce:a9:40:8f:31:c3:ef:29:d1:01:8a:a7:
d3:19:d8:c7:14:13:19:f3:99:eb:65:2e:d6:4e:ec:
dc:9f:c8:cf:44:35:8e:a3:7c:14:90:62:40:e5:d9:
f3:3e:90:99:61:44:e8:92:4e:28:1a:69:51:02:75:
26:77:ac:50:a2:96:bb:f4:62:d9:e2:c6:f4:76:46:
b3:25:3c:dc:26:c3:c1:eb:33:f7:28:5d:47:2f:0a:
fd:82:b7:ad:53:c3:d3:5a:16:46:e2:96:43:ec:a5:
23:5a:41:32:c7:5c:88:c9:ac:d8:df:1d:ca:ae:56:
e0:ef:57:5b:86:46:ff:dd:cd:f2:3a:c5:47:ca:b9:
53:4f:f3:c3:1e:fc:b9:2f:fb:b0:06:82:fe:57:f4:
ba:43:23:13:e9:de:fd:d7:b5:4d:98:08:9d:c1:e2:
72:e5:a9:5a:2d:40:df:37:0d:8f:d8:90:b5:26:24:
ad:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C7:F2:1E:17:81:58:3D:D1:61:30:20:C5:FE:C4:3B:91:5F:AE:2D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/U8fyHheBWD3RYTAgxf7EO5Ffri0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
13:a9:b0:a4:5b:35:53:14:75:6f:39:37:ab:9b:41:9b:f5:42:
7f:c5:6a:91:19:de:39:cb:4e:c8:a3:96:67:ee:37:7a:35:ab:
b7:c4:e9:26:e1:5e:8d:4d:4e:2f:51:79:40:58:40:06:bf:5c:
d4:6f:9a:89:4e:17:45:37:d0:38:08:8a:34:41:0b:67:a7:e2:
e0:f2:c3:db:d9:bb:71:5e:60:96:1d:05:d7:a1:bf:0e:b4:ab:
4b:0a:57:2b:07:cb:01:83:30:18:d3:e2:cd:c5:b1:29:03:da:
cb:22:51:7f:76:16:9c:fa:77:70:d6:eb:b6:a5:9d:2f:90:82:
fe:4e:ca:3f:dc:63:fe:2f:51:3b:0e:72:3c:e1:1c:cb:3d:7f:
af:f9:08:5b:38:30:ef:2d:e2:6d:30:d1:f3:72:44:66:6b:16:
48:be:ea:38:0a:3a:b2:c1:4b:27:a0:bc:0f:cf:28:a1:a4:80:
72:bc:3e:16:78:33:79:24:6a:8c:b0:b2:67:0f:cc:d5:0c:75:
99:9b:7c:42:0b:85:44:ed:1f:7d:da:01:75:43:a3:a7:20:59:
ca:56:ba:17:2d:b2:93:e7:b1:28:0b:59:49:43:21:1c:a5:42:
37:c2:ae:48:51:e0:f4:f5:e6:9a:f0:82:6d:14:3e:6a:25:71:
0e:28:10:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 10:35:49 2025 by rpki-client