Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/VTUohLnEOhg50G5sGjL1N8TH8jM.roa
File: VTUohLnEOhg50G5sGjL1N8TH8jM.roa (raw, json)
Hash identifier: pVsACLdaoMysIj7U/tG4QWdf1jZsFodTOOBa6THfM1E=
Subject key identifier: 55:35:28:84:B9:C4:3A:18:39:D0:6E:6C:1A:32:F5:37:C4:C7:F2:33
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 561B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VTUohLnEOhg50G5sGjL1N8TH8jM.roa
Signing time: Mon 13 May 2024 09:24:08 +0000
ROA not before: Mon 13 May 2024 09:24:08 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22043 (0x561b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 13 09:24:08 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=55352884B9C43A1839D06E6C1A32F537C4C7F233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:07:42:88:17:53:47:23:87:61:c8:30:96:73:
44:0e:ad:16:9f:fc:ab:75:cc:7a:f7:2b:92:d2:d1:
00:0d:e0:89:e1:28:20:f2:52:3b:95:37:8a:a6:dc:
3f:f5:61:e2:7f:c5:a5:d7:89:be:b4:bf:f9:62:b9:
39:e7:b1:cd:92:02:1c:3a:80:76:a0:af:e5:76:22:
22:df:3d:7f:d5:6e:58:48:b1:3d:b6:4e:c0:7c:62:
ff:1d:12:31:49:03:77:5d:dd:61:8a:b9:8c:00:5f:
90:e4:ec:72:9c:1e:97:c7:97:fe:e3:b3:18:f1:df:
e0:cb:6f:0c:4c:4b:b7:23:9b:06:e3:52:0b:78:a8:
96:97:be:4a:e6:65:d1:ba:e2:70:7e:eb:96:f9:96:
06:34:d0:7c:1e:ad:88:8b:48:68:22:cf:1d:cd:06:
75:a0:3b:f0:07:96:d7:47:6c:75:1d:df:fd:ff:8b:
30:69:a5:bc:76:36:ae:b6:08:7c:e8:52:db:68:4c:
95:3f:b0:c4:49:3d:48:ea:11:36:5e:51:30:3b:9c:
6f:2a:7c:f5:f7:fe:90:a3:61:cf:f4:f6:f8:a1:d9:
21:1b:0d:b4:b2:29:de:8a:c4:a7:9d:ac:0e:06:b3:
6c:ec:92:56:80:ae:f8:f7:6a:c5:8d:5e:a1:20:51:
6c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:35:28:84:B9:C4:3A:18:39:D0:6E:6C:1A:32:F5:37:C4:C7:F2:33
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/VTUohLnEOhg50G5sGjL1N8TH8jM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
74:e3:62:21:0c:bf:32:b4:39:3b:4c:ca:b6:7f:c8:31:92:fc:
c9:5a:7d:a1:f3:26:f8:b2:b3:da:43:5c:ed:a4:2d:38:ee:d4:
7c:75:52:03:30:6d:84:ff:ab:73:f0:28:73:24:6e:5d:96:f3:
f5:c7:6b:30:c5:80:31:cc:82:0a:38:91:bd:e0:ad:f5:4d:01:
15:b6:a5:3c:af:6a:6a:10:94:32:1a:ad:4b:af:ee:9a:86:74:
c6:6d:72:14:4e:d4:fa:f7:75:30:76:71:3c:f3:88:25:a8:21:
eb:d0:bd:3d:0c:bb:7c:3c:f7:9f:b1:a0:81:eb:57:b5:7b:b9:
eb:5a:0b:92:49:33:a8:ac:21:d4:46:1b:dc:9f:32:b1:ba:55:
85:fe:d1:7f:2a:05:62:dd:3b:e8:bf:85:31:1d:6c:df:b4:4b:
b8:18:87:40:b5:71:d2:91:c3:09:ef:54:bb:19:d6:8f:34:91:
d8:2e:5b:f7:05:11:67:03:be:ca:7c:c8:d9:5e:9d:85:4d:20:
04:35:6c:18:c6:64:27:d8:e3:7d:b0:b5:2f:83:b1:ae:33:5b:
08:ee:0f:d4:d3:86:a8:b3:56:e8:35:c0:0a:da:9e:38:4a:e8:
ab:d9:db:a8:55:2d:f1:05:14:5d:b0:33:94:15:ff:27:7a:60:
e3:a5:14:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 17:46:15 2025 by rpki-client