Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Yh2e3DvA7fGcltHWo-RVPxS7Pzo.roa
File: Yh2e3DvA7fGcltHWo-RVPxS7Pzo.roa (raw, json)
Hash identifier: vVej9IDtvGm1oPUtO6IgF+CRKdOw/hFO5wpzSupltbI=
Subject key identifier: 62:1D:9E:DC:3B:C0:ED:F1:9C:96:D1:D6:A3:E4:55:3F:14:BB:3F:3A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4426
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Yh2e3DvA7fGcltHWo-RVPxS7Pzo.roa
Signing time: Fri 19 Apr 2024 10:53:04 +0000
ROA not before: Fri 19 Apr 2024 10:53:04 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17446 (0x4426)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 19 10:53:04 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=621D9EDC3BC0EDF19C96D1D6A3E4553F14BB3F3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6b:32:08:b9:97:4b:80:79:fa:82:b2:de:3d:
91:77:ab:e9:01:46:ba:f7:ff:1c:94:b5:58:ce:0a:
c1:9e:82:0e:33:00:fb:30:66:02:30:0c:f7:d5:24:
0a:f1:88:d9:63:d8:18:d3:24:d0:2e:69:9d:09:c8:
13:20:d5:2a:fb:3a:8e:c3:fc:2e:15:d1:5a:41:24:
a4:11:c3:7a:22:b7:26:44:d0:cc:04:5c:9d:e6:22:
fe:5b:bf:9c:10:b6:66:a8:bb:54:79:09:b7:65:03:
c6:a9:87:41:dc:9e:01:87:a8:d3:9c:e6:4f:5a:48:
cc:d4:12:0b:d7:a6:91:8d:4e:be:a9:df:85:7e:93:
13:63:a5:4c:19:e3:18:30:9c:2c:77:b1:71:67:01:
53:35:a1:d9:7b:75:2b:fc:32:62:d1:69:c0:5f:06:
7d:42:03:d5:7e:6d:36:35:0c:2a:ec:c6:e2:eb:38:
a1:1e:34:3d:c5:33:79:a8:17:08:b9:7b:99:f8:35:
6d:e1:9e:e7:15:ce:51:c2:21:bb:1f:42:5b:53:60:
de:2b:f0:18:43:56:76:7c:a5:85:2a:da:a3:50:b4:
4d:1b:f9:f8:c5:8a:0a:03:e5:fb:39:28:11:4d:33:
02:63:08:1e:15:94:82:17:4b:c5:7d:e5:25:7d:b9:
4c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1D:9E:DC:3B:C0:ED:F1:9C:96:D1:D6:A3:E4:55:3F:14:BB:3F:3A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Yh2e3DvA7fGcltHWo-RVPxS7Pzo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
70:dc:af:09:3a:cd:c9:65:ed:55:87:e2:32:05:d3:e3:8b:c6:
13:a3:7b:c5:cc:c2:c3:b0:17:54:1b:ee:09:bf:12:55:46:ba:
e0:43:72:03:38:dc:85:b5:a2:bd:e2:aa:65:c9:cf:54:32:45:
22:66:e0:aa:ee:28:0f:52:4d:c8:47:5f:c3:6b:50:ec:ef:d8:
b1:e3:bc:91:73:13:58:5b:73:8d:87:d0:27:88:72:3f:ca:cd:
1b:22:38:fa:a7:93:ea:89:15:d2:c8:c2:bc:42:6e:3e:68:87:
ec:ad:bb:4e:e0:21:31:4c:da:be:b9:17:4d:14:c6:b0:66:d1:
9f:41:a4:f2:31:9f:14:66:0d:25:88:4f:57:4b:e5:65:d2:7d:
68:1c:2d:0b:78:b1:78:e7:ce:96:82:86:37:0f:3a:86:3e:29:
f2:03:56:19:83:34:a2:0c:fa:93:a2:99:dc:b2:c4:66:98:ca:
06:36:e3:fe:30:2c:72:54:b6:27:69:a0:18:82:0f:90:65:37:
96:99:05:e8:bc:4e:89:9f:b5:18:83:55:a1:ab:ed:f2:f8:2b:
6e:e3:ff:a6:80:3e:39:09:a1:4c:e5:19:c2:69:a2:4e:6b:4b:
95:fe:90:22:c0:49:3c:ae:95:79:10:fc:70:f9:83:1a:f7:13:
7d:f3:cb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 00:54:45 2025 by rpki-client