Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/dqRI-6Uy8J9dRlztFYcs0T3GneI.roa
File: dqRI-6Uy8J9dRlztFYcs0T3GneI.roa (raw, json)
Hash identifier: yPkhi5LjPCYcZw1vz+DfMGAlSHTS09P79CAZEg435rY=
Subject key identifier: 76:A4:48:FB:A5:32:F0:9F:5D:46:5C:ED:15:87:2C:D1:3D:C6:9D:E2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5371
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dqRI-6Uy8J9dRlztFYcs0T3GneI.roa
Signing time: Thu 09 May 2024 20:24:08 +0000
ROA not before: Thu 09 May 2024 20:24:08 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21361 (0x5371)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 9 20:24:08 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=76A448FBA532F09F5D465CED15872CD13DC69DE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:54:20:9b:c7:b2:73:14:d2:37:0e:5b:b2:17:
66:87:28:0d:81:1b:ce:7f:71:68:79:33:08:38:68:
95:ca:1e:37:6d:b6:85:fc:68:48:5a:35:37:f4:e3:
d6:5c:28:f4:d5:a5:df:e1:e2:0b:e5:f7:2f:f6:fe:
30:73:25:c4:28:64:ef:ee:5e:f6:e3:9f:c5:80:e4:
ed:fd:d0:c5:0b:92:5d:6e:39:af:e4:fd:17:9d:5b:
f4:92:7e:99:e7:a4:51:03:22:8e:2c:cf:d0:03:92:
3d:79:ae:c5:99:87:c7:d3:d7:e0:1e:4f:6a:91:7e:
ef:14:ff:28:3d:5c:e9:a5:74:56:23:00:26:af:35:
93:fa:93:7b:81:f2:a1:7f:b5:58:67:71:db:8a:10:
48:35:9a:94:22:bb:54:2d:e3:40:60:e3:3f:9e:90:
e0:54:4b:9f:c1:d3:d4:42:0a:fc:f9:ed:df:46:10:
c9:f5:5f:1e:13:b9:e5:45:30:74:ad:72:86:46:61:
a6:d4:ae:e9:12:5a:8b:d7:90:aa:49:1f:84:a9:d4:
09:a5:91:53:33:da:53:d5:ed:17:a6:2c:40:f7:49:
fd:52:29:b3:19:7e:90:ed:c9:bf:fc:38:8e:c1:ce:
ba:85:95:17:8f:fa:9c:12:1e:09:46:e5:c0:6c:f8:
3e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A4:48:FB:A5:32:F0:9F:5D:46:5C:ED:15:87:2C:D1:3D:C6:9D:E2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/dqRI-6Uy8J9dRlztFYcs0T3GneI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
bb:eb:1b:71:39:2e:16:ff:ce:38:79:e7:bf:38:ac:be:f9:f6:
cc:08:d2:64:c5:87:51:c6:f1:2b:df:5e:1c:d7:10:d2:fb:ec:
a3:68:e6:a8:2b:34:d8:1c:d6:dc:44:16:ac:42:7e:ce:8b:11:
14:fa:cb:7e:b4:1d:43:73:39:f8:cd:eb:74:c2:92:c6:0b:ff:
5a:42:8d:e4:44:f3:d5:9d:2b:31:3f:1d:05:83:d6:a0:a8:c7:
7d:bf:ba:fc:19:5c:6d:5a:5f:19:29:d2:e7:83:94:09:0d:c8:
72:01:cf:b1:68:0c:3c:52:c6:2d:cf:9a:fd:3d:ed:4b:d5:e1:
55:b7:65:2a:b5:9f:30:2c:0e:53:c4:dd:3f:18:4a:59:cc:eb:
94:5c:c1:c2:d0:1c:34:3e:56:d5:2c:a5:2b:40:2e:02:6e:06:
6f:4b:87:f1:16:f9:e5:72:83:5a:41:a5:7d:47:91:e9:67:72:
49:c5:e3:be:1e:7f:38:de:6b:35:40:5b:5c:ec:d4:2e:66:cf:
ab:e7:ba:56:5b:8a:d9:82:af:96:2e:50:87:02:e7:75:1d:34:
8b:79:18:e0:96:5e:f3:ea:e0:a1:d3:20:4e:71:86:34:18:f0:
4a:f2:9a:45:59:81:42:fb:be:eb:03:2a:87:e6:96:ca:45:a2:
ab:95:c0:ae
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICU3EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDky
MDI0MDhaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDc2QTQ0OEZCQTUzMkYw
OUY1RDQ2NUNFRDE1ODcyQ0QxM0RDNjlERTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8VCCbx7JzFNI3DluyF2aHKA2BG85/cWh5Mwg4aJXKHjdttoX8
aEhaNTf049ZcKPTVpd/h4gvl9y/2/jBzJcQoZO/uXvbjn8WA5O390MULkl1uOa/k
/RedW/SSfpnnpFEDIo4sz9ADkj15rsWZh8fT1+AeT2qRfu8U/yg9XOmldFYjACav
NZP6k3uB8qF/tVhncduKEEg1mpQiu1Qt40Bg4z+ekOBUS5/B09RCCvz57d9GEMn1
Xx4TueVFMHStcoZGYabUrukSWovXkKpJH4Sp1AmlkVMz2lPV7RemLED3Sf1SKbMZ
fpDtyb/8OI7BzrqFlReP+pwSHglG5cBs+D6vAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUdqRI+6Uy8J9dRlztFYcs0T3GneIwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2RxUkktNlV5OEo5ZFJs
enRGWWNzMFQzR25lSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBALvrG3E5Lhb/zjh5
5784rL759swI0mTFh1HG8SvfXhzXENL77KNo5qgrNNgc1txEFqxCfs6LERT6y360
HUNzOfjN63TCksYL/1pCjeRE89WdKzE/HQWD1qCox32/uvwZXG1aXxkp0ueDlAkN
yHIBz7FoDDxSxi3Pmv097UvV4VW3ZSq1nzAsDlPE3T8YSlnM65RcwcLQHDQ+VtUs
pStALgJuBm9Lh/EW+eVyg1pBpX1HkelncknF474efzjeazVAW1zs1C5mz6vnulZb
itmCr5YuUIcC53UdNIt5GOCWXvPq4KHTIE5xhjQY8ErymkVZgUL7vusDKofmlspF
oquVwK4=
-----END CERTIFICATE-----
Generated at Sun Jun 22 22:46:08 2025 by rpki-client