Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/aYYK-biWIBKZu4BUUNJZ5sCg9oE.roa
File: aYYK-biWIBKZu4BUUNJZ5sCg9oE.roa (raw, json)
Hash identifier: zz7rjGIMVru9ji8FVDwXzaxOFYPaNWai1M/X3lrruj4=
Subject key identifier: 69:86:0A:F9:B8:96:20:12:99:BB:80:54:50:D2:59:E6:C0:A0:F6:81
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 41DE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/aYYK-biWIBKZu4BUUNJZ5sCg9oE.roa
Signing time: Tue 16 Apr 2024 09:52:59 +0000
ROA not before: Tue 16 Apr 2024 09:52:59 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16862 (0x41de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 16 09:52:59 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=69860AF9B896201299BB805450D259E6C0A0F681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1f:eb:d4:f4:32:e1:67:71:c4:fb:51:c8:32:
72:20:d0:48:06:dd:fa:07:ee:d9:04:f4:ec:e0:ff:
7b:14:31:a4:48:b8:e0:f1:4c:f9:b7:b1:2c:c1:c6:
6f:bd:16:36:d6:f3:65:cb:ec:dc:c0:5f:d6:d7:7c:
68:80:1d:5c:58:09:57:77:9a:a9:4b:2a:f9:67:38:
0e:58:22:03:e4:53:ab:66:b1:8c:7f:b2:1b:13:95:
87:49:78:b8:95:d3:c8:cb:4b:9c:e0:60:79:60:b1:
6b:7e:d8:45:b7:b5:30:b4:d3:8b:4d:0b:b3:f6:d8:
aa:f0:22:c0:c4:41:a2:78:e6:c4:87:c6:17:01:27:
09:ed:0f:ec:99:e8:df:67:56:1a:5c:12:b9:05:df:
a6:01:0c:aa:d2:6f:2e:4b:6e:79:64:4d:53:ad:91:
08:f3:f4:6f:30:c9:d2:00:dd:39:50:bc:8b:a0:fd:
8d:8e:9a:15:47:d5:92:cf:97:b2:9c:19:d2:26:33:
63:3e:b6:d9:f5:55:20:4c:bc:8d:5b:7d:dd:c1:93:
52:f7:3f:83:75:58:cb:ae:09:f4:0b:24:3e:5c:fd:
1c:8d:25:93:7f:33:f0:7b:63:24:6c:ec:6c:2a:9e:
88:cf:77:92:8e:79:12:6f:40:9c:74:9e:de:b2:b9:
31:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:86:0A:F9:B8:96:20:12:99:BB:80:54:50:D2:59:E6:C0:A0:F6:81
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/aYYK-biWIBKZu4BUUNJZ5sCg9oE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
15:f1:f5:31:a5:a4:a3:a7:33:58:da:53:b9:44:80:59:81:68:
d0:b1:0c:1e:80:c8:f6:80:69:ba:e3:8d:d1:1e:86:a0:17:65:
af:1a:14:dd:c1:c5:5f:77:6b:2e:bd:b3:d8:d5:ac:63:b5:ab:
97:51:64:a1:32:83:28:95:54:78:b2:3c:e2:01:9e:34:84:da:
85:2e:a8:3d:46:40:6f:2a:41:14:28:1f:32:db:ce:cf:93:77:
a8:ee:86:53:d1:ac:b2:75:f5:ce:2d:42:22:6c:3e:99:5a:f1:
e4:de:ab:dc:f1:6d:ac:2e:57:17:f0:d0:aa:c1:68:64:65:fd:
3a:56:25:42:fc:3f:b3:70:95:8f:47:b6:d1:4d:05:d6:57:72:
32:af:98:78:0d:f0:a8:f3:ae:75:98:b5:55:42:84:5c:5a:0a:
f3:6f:d5:75:be:a5:d9:04:cd:1f:b4:12:ad:73:af:5c:64:b4:
93:60:d9:31:45:cc:28:2d:8c:db:f1:65:51:9a:8e:04:81:1b:
2c:dd:e1:e9:4a:d8:fb:ba:65:ed:89:c2:f4:a5:04:34:1d:be:
fd:64:c2:e9:37:66:0a:b6:f2:ab:ad:d7:b7:3f:8b:d4:f6:49:
50:9d:54:60:b8:9d:4a:f2:04:97:c5:d9:b5:7f:25:ce:e7:8d:
49:4a:94:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 12:00:46 2025 by rpki-client