Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/W6Lu6ZRhhjcVNIjfraRB_VehltI.roa
File: W6Lu6ZRhhjcVNIjfraRB_VehltI.roa (raw, json)
Hash identifier: X1Pqz7okOwRO9+DlZvAjohQ8ZeoAwjc1Iazn8mYr/qQ=
Subject key identifier: 5B:A2:EE:E9:94:61:86:37:15:34:88:DF:AD:A4:41:FD:57:A1:96:D2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 420E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/W6Lu6ZRhhjcVNIjfraRB_VehltI.roa
Signing time: Tue 16 Apr 2024 15:52:57 +0000
ROA not before: Tue 16 Apr 2024 15:52:57 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16910 (0x420e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 16 15:52:57 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5BA2EEE994618637153488DFADA441FD57A196D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:32:d8:c4:02:99:69:44:09:5f:4b:c2:b4:aa:
c4:f9:94:09:7f:55:8a:e1:76:60:54:51:5e:a1:e0:
b9:51:9b:52:0a:1a:8a:06:06:63:6c:d0:98:5b:19:
46:05:58:20:aa:12:e3:35:4f:1c:b9:8c:7a:74:13:
c1:cb:df:43:cf:9c:69:d0:78:51:cd:e5:f9:03:94:
08:62:6f:7e:1a:23:f2:0d:6f:4d:89:14:60:2d:e9:
81:0f:9c:f6:2a:c4:bc:f9:1d:68:16:26:ad:a3:ce:
26:8b:42:1c:38:1f:fe:e0:3f:10:91:c2:d5:fe:76:
8e:f0:ad:b7:2d:ac:25:46:2d:0a:19:38:85:47:c9:
ee:bb:95:59:32:d0:69:f3:7d:c6:db:c8:48:f5:a7:
90:dd:36:07:63:d7:92:4c:31:0f:40:b2:97:d9:cc:
e7:76:fe:06:f3:6b:db:15:40:41:05:b6:81:02:3d:
35:73:57:44:97:f9:ac:ab:77:27:54:d0:dc:c1:81:
f8:49:ef:41:2a:75:12:3b:4d:29:18:45:bc:9a:00:
46:53:ae:ed:f7:9d:60:af:5e:d8:06:0f:d5:a3:3c:
5d:a0:42:ca:f4:e0:0b:f0:23:56:08:a0:46:ab:22:
4f:d3:db:e8:40:a0:33:ea:a9:5f:2a:c3:17:13:d1:
66:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A2:EE:E9:94:61:86:37:15:34:88:DF:AD:A4:41:FD:57:A1:96:D2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/W6Lu6ZRhhjcVNIjfraRB_VehltI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
83:cb:3d:2e:fa:1e:14:4b:54:a0:5f:17:c3:b1:3c:b8:58:45:
c5:ae:9b:f3:da:41:03:e4:f2:f6:8a:fe:89:07:21:39:72:05:
3a:41:ee:7d:b0:86:b8:57:5d:cb:8b:86:96:ec:3e:83:77:90:
ac:07:08:a1:d4:c7:bf:70:2d:c7:b5:eb:62:98:1c:15:38:7e:
a5:0a:50:f5:8c:5b:51:21:e2:17:15:55:04:63:4b:e9:ec:28:
78:df:7d:3e:4f:24:21:9a:51:f7:9f:0a:3a:ef:eb:2f:26:e4:
11:15:3f:b5:20:d7:91:02:0d:6a:a5:57:7d:e8:51:e8:96:dc:
4d:ce:21:6d:79:c8:70:df:aa:61:76:7b:b3:f6:7a:fe:f6:53:
33:0b:a9:fd:3c:9b:b0:6b:ee:a8:39:35:59:9c:b1:5c:b8:bb:
92:ec:10:78:e2:33:c4:d2:17:12:42:3f:d9:45:ad:8d:9d:78:
31:1d:b6:d4:a8:f0:38:1a:82:ff:d2:08:63:70:f4:de:57:d7:
bc:5a:8a:25:db:6b:59:4c:f1:d0:ec:5d:0d:67:4f:ab:60:d6:
9c:bf:6e:ee:d0:fb:f1:7d:b1:69:e2:32:57:65:19:76:f0:0c:
e1:3c:71:82:ec:d2:b9:cf:26:c8:b7:ab:54:c6:42:ff:e4:ed:
25:b0:41:23
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICQg4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTYx
NTUyNTdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDVCQTJFRUU5OTQ2MTg2
MzcxNTM0ODhERkFEQTQ0MUZENTdBMTk2RDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD8MtjEAplpRAlfS8K0qsT5lAl/VYrhdmBUUV6h4LlRm1IKGooG
BmNs0JhbGUYFWCCqEuM1Txy5jHp0E8HL30PPnGnQeFHN5fkDlAhib34aI/INb02J
FGAt6YEPnPYqxLz5HWgWJq2jziaLQhw4H/7gPxCRwtX+do7wrbctrCVGLQoZOIVH
ye67lVky0GnzfcbbyEj1p5DdNgdj15JMMQ9AspfZzOd2/gbza9sVQEEFtoECPTVz
V0SX+ayrdydU0NzBgfhJ70EqdRI7TSkYRbyaAEZTru33nWCvXtgGD9WjPF2gQsr0
4AvwI1YIoEarIk/T2+hAoDPqqV8qwxcT0Wb9AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUW6Lu6ZRhhjcVNIjfraRB/VehltIwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1c2THU2WlJoaGpjVk5J
amZyYVJCX1ZlaGx0SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAg8s9LvoeFEtUoF8Xw7E8uFhFxa6b89pB
A+Ty9or+iQchOXIFOkHufbCGuFddy4uGluw+g3eQrAcIodTHv3Atx7XrYpgcFTh+
pQpQ9YxbUSHiFxVVBGNL6ewoeN99Pk8kIZpR958KOu/rLybkERU/tSDXkQINaqVX
fehR6JbcTc4hbXnIcN+qYXZ7s/Z6/vZTMwup/TybsGvuqDk1WZyxXLi7kuwQeOIz
xNIXEkI/2UWtjZ14MR221KjwOBqC/9IIY3D03lfXvFqKJdtrWUzx0OxdDWdPq2DW
nL9u7tD78X2xaeIyV2UZdvAM4TxxguzSuc8myLerVMZC/+TtJbBBIw==
-----END CERTIFICATE-----
Generated at Sat Jun 21 17:41:06 2025 by rpki-client