Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/br9epi_XFeoyG8Vv16r0Kal-oKg.roa
File: br9epi_XFeoyG8Vv16r0Kal-oKg.roa (raw, json)
Hash identifier: TSbGG5Jg3cD1ONkbz8GkEZvv/sPNAfxzKwpk/18tFz4=
Subject key identifier: 6E:BF:5E:A6:2F:D7:15:EA:32:1B:C5:6F:D7:AA:F4:29:A9:7E:A0:A8
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 382D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/br9epi_XFeoyG8Vv16r0Kal-oKg.roa
Signing time: Wed 03 Apr 2024 11:52:21 +0000
ROA not before: Wed 03 Apr 2024 11:52:21 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14381 (0x382d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 3 11:52:21 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6EBF5EA62FD715EA321BC56FD7AAF429A97EA0A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0e:1f:05:e6:56:cf:86:aa:21:b8:c0:03:3f:
26:7e:7c:b8:c2:9b:fd:67:42:c6:a1:ed:2b:78:72:
ac:b6:a7:6d:a8:37:f5:f0:14:fd:7f:77:d0:83:fb:
7a:f4:c3:10:8a:3e:64:67:77:45:a4:ac:4b:4a:51:
34:fe:97:d3:88:df:d9:0c:99:16:a1:ee:83:ba:ba:
ba:8f:12:c5:1c:54:ba:95:05:c0:89:e3:57:19:30:
a5:55:7f:da:1a:ef:0d:ad:53:b0:53:c9:1a:67:91:
fe:6e:3d:91:0d:b6:34:86:4f:d2:a5:fe:d7:5e:24:
e2:52:02:d5:72:ce:dd:e4:b8:45:3a:9e:fe:57:ca:
5c:02:9b:b4:85:34:8e:0c:a2:be:92:db:cf:51:d2:
8f:f1:14:01:25:1c:e2:10:c9:b2:10:08:01:05:61:
d9:c9:76:b7:d7:14:af:d1:ed:fd:2f:7a:57:ba:1e:
8c:58:d4:1b:42:67:d4:b4:a5:ea:6e:ee:ae:d8:11:
45:ff:3b:47:34:fa:7e:e6:b7:7b:15:b9:c1:b6:d6:
f9:cf:68:9b:87:a7:2c:76:91:b6:03:73:2e:c6:ba:
e2:ac:26:e5:64:67:c3:6e:d1:6c:e4:20:39:33:ef:
16:00:c7:37:ab:9f:66:62:25:7a:36:ca:1d:29:82:
16:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BF:5E:A6:2F:D7:15:EA:32:1B:C5:6F:D7:AA:F4:29:A9:7E:A0:A8
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/br9epi_XFeoyG8Vv16r0Kal-oKg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
5e:f8:1a:df:69:45:b3:79:79:4d:8e:5b:46:f5:fd:91:12:11:
81:c0:ee:c9:51:76:b2:eb:b5:d5:f9:73:df:fe:df:7c:b5:7d:
08:cc:41:3e:5a:40:74:eb:60:2e:eb:97:71:b6:31:d7:6b:71:
c3:19:67:5f:f9:3e:dc:24:46:12:3b:4f:bd:ef:76:56:29:cb:
3e:a4:b2:bc:2b:fa:07:de:50:9c:35:c7:60:44:3d:5f:bf:35:
3d:e4:ac:6a:e7:7e:ea:81:02:66:80:82:12:7d:11:25:d2:56:
cc:49:55:e4:11:42:4c:7d:5b:84:8f:0c:aa:95:9c:ea:53:a0:
97:a7:d4:63:b7:19:d2:b3:de:1e:4b:19:37:c0:fc:8b:ce:67:
96:90:9d:0b:99:39:65:15:ca:8a:81:d5:a4:36:4e:fc:b1:1c:
58:18:a4:d5:de:3e:4f:35:5f:a2:cd:a8:23:36:1d:7c:25:95:
05:ac:e7:3f:72:f7:0c:b1:1d:c5:1f:74:98:d0:5d:56:a4:94:
5e:35:93:4e:7e:60:2b:de:50:9c:3c:3f:6d:d8:89:02:06:e5:
14:78:2a:33:b4:73:d8:f7:97:15:3a:b6:e6:90:7e:3f:06:ec:
03:fc:bb:19:50:98:81:b2:dd:b7:11:ac:08:be:38:4a:0a:2e:
e8:e7:21:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 16:53:39 2025 by rpki-client