Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/_pSi907YT8gXRF70yfKhyzpBpZo.roa
File: _pSi907YT8gXRF70yfKhyzpBpZo.roa (raw, json)
Hash identifier: 3+Ji0NMq4s05SPHOmPj4RwEpkTy+82dQHiClixryk5w=
Subject key identifier: FE:94:A2:F7:4E:D8:4F:C8:17:44:5E:F4:C9:F2:A1:CB:3A:41:A5:9A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 447D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_pSi907YT8gXRF70yfKhyzpBpZo.roa
Signing time: Fri 19 Apr 2024 21:53:12 +0000
ROA not before: Fri 19 Apr 2024 21:53:12 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17533 (0x447d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 19 21:53:12 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FE94A2F74ED84FC817445EF4C9F2A1CB3A41A59A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f8:29:49:de:9b:a4:f9:15:ee:b2:c2:3d:69:
6e:0c:8d:00:3a:3d:a4:64:fc:cc:62:48:66:b3:81:
c0:b8:b0:a5:9d:40:51:99:10:cd:ea:54:64:e0:b3:
b9:ab:33:22:cb:87:33:82:a6:7e:17:2d:e6:7c:4b:
87:b2:43:ee:ab:02:77:16:23:32:60:36:26:d3:e0:
aa:03:4c:e0:3c:e8:f7:9a:75:67:ed:ca:e7:be:14:
e3:8c:be:2c:26:11:ee:78:03:40:47:7c:df:34:7b:
a7:ef:f4:34:ba:84:28:68:6a:0b:bb:50:6c:a7:45:
f5:d3:1a:a8:23:fa:7b:e9:05:47:5c:b1:00:dc:d0:
bc:35:3d:8f:d6:a3:15:eb:ee:9d:40:19:98:46:55:
62:34:7c:5e:5d:d2:17:33:c1:b0:46:3d:51:f6:fa:
e8:a0:76:cc:4a:d9:65:72:86:0a:57:8e:9e:c4:b4:
09:aa:e1:64:37:62:15:66:cd:dd:1e:b4:7c:9b:47:
3b:da:3c:f2:1c:b3:00:8f:0f:db:22:ea:4b:63:47:
a4:b3:e3:36:9d:61:e6:d7:8b:83:06:f7:8e:7c:a5:
bd:62:54:da:fd:7e:25:ef:8c:38:51:bf:b3:1e:dc:
dd:78:ce:e7:38:25:93:2e:da:ad:24:14:96:53:30:
48:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:94:A2:F7:4E:D8:4F:C8:17:44:5E:F4:C9:F2:A1:CB:3A:41:A5:9A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_pSi907YT8gXRF70yfKhyzpBpZo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
84:00:2a:13:9a:65:d0:52:ce:9f:12:e4:fb:3d:e8:d1:66:86:
0e:8c:9b:f0:2d:50:f4:9f:7c:2e:3e:bc:f4:3e:56:f1:7b:f2:
31:e2:30:01:65:f0:a3:bc:c6:84:4c:7f:42:00:2c:dc:74:98:
e7:8d:aa:d0:58:b4:57:ec:89:d0:fd:d7:46:72:f2:7d:10:3c:
ba:ca:a6:d0:ac:da:cf:a1:47:a3:d4:83:39:b5:ca:93:1a:6f:
cd:85:e6:96:08:53:63:83:c0:2e:a5:cc:4d:26:30:c1:40:8a:
28:52:4f:83:89:ae:3a:5e:10:e7:b5:15:4c:e8:3e:d7:8e:61:
c4:a3:f2:65:a2:6e:54:02:e1:d1:1c:62:bb:d5:f3:5f:d2:40:
66:59:84:7b:79:d2:1f:8b:b0:ca:7d:86:32:42:03:31:b9:60:
b9:c9:4a:c7:61:be:f9:c5:9b:fa:45:49:e3:13:1d:d7:39:23:
6d:81:85:8e:49:8d:b5:18:19:9f:03:7b:ae:61:0e:31:c8:00:
84:02:4b:5a:cd:39:6b:a6:47:fb:d8:6c:51:7b:22:a2:b3:1b:
82:0d:4f:e8:62:a5:54:17:8d:96:b7:1d:d0:3e:65:cd:e1:a8:
7a:f7:2b:b1:24:37:ef:16:1f:be:28:90:68:54:54:62:fb:b1:
f6:d8:27:80
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICRH0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTky
MTUzMTJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEZFOTRBMkY3NEVEODRG
QzgxNzQ0NUVGNEM5RjJBMUNCM0E0MUE1OUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDf+ClJ3puk+RXussI9aW4MjQA6PaRk/MxiSGazgcC4sKWdQFGZ
EM3qVGTgs7mrMyLLhzOCpn4XLeZ8S4eyQ+6rAncWIzJgNibT4KoDTOA86PeadWft
yue+FOOMviwmEe54A0BHfN80e6fv9DS6hChoagu7UGynRfXTGqgj+nvpBUdcsQDc
0Lw1PY/WoxXr7p1AGZhGVWI0fF5d0hczwbBGPVH2+uigdsxK2WVyhgpXjp7EtAmq
4WQ3YhVmzd0etHybRzvaPPIcswCPD9si6ktjR6Sz4zadYebXi4MG9458pb1iVNr9
fiXvjDhRv7Me3N14zuc4JZMu2q0kFJZTMEipAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQU/pSi907YT8gXRF70yfKhyzpBpZowHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L19wU2k5MDdZVDhnWFJG
NzB5ZktoeXpwQnBaby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAIQAKhOaZdBSzp8S
5Ps96NFmhg6Mm/AtUPSffC4+vPQ+VvF78jHiMAFl8KO8xoRMf0IALNx0mOeNqtBY
tFfsidD910Zy8n0QPLrKptCs2s+hR6PUgzm1ypMab82F5pYIU2ODwC6lzE0mMMFA
iihST4OJrjpeEOe1FUzoPteOYcSj8mWiblQC4dEcYrvV81/SQGZZhHt50h+LsMp9
hjJCAzG5YLnJSsdhvvnFm/pFSeMTHdc5I22BhY5JjbUYGZ8De65hDjHIAIQCS1rN
OWumR/vYbFF7IqKzG4INT+hipVQXjZa3HdA+Zc3hqHr3K7EkN+8WH74okGhUVGL7
sfbYJ4A=
-----END CERTIFICATE-----
Generated at Sun Jun 22 00:57:53 2025 by rpki-client