Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/hPc_xN9rVuVNZjIX2vHY24fkkvg.roa
File: hPc_xN9rVuVNZjIX2vHY24fkkvg.roa (raw, json)
Hash identifier: /LWp7urTyvjHXHtz9I6tOpZEkdFkgjU5C88b1egWorA=
Subject key identifier: 84:F7:3F:C4:DF:6B:56:E5:4D:66:32:17:DA:F1:D8:DB:87:E4:92:F8
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 37B6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/hPc_xN9rVuVNZjIX2vHY24fkkvg.roa
Signing time: Tue 02 Apr 2024 20:52:18 +0000
ROA not before: Tue 02 Apr 2024 20:52:18 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14262 (0x37b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 2 20:52:18 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=84F73FC4DF6B56E54D663217DAF1D8DB87E492F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bc:06:83:45:95:a1:08:de:5b:12:ec:cf:92:
6d:b5:3e:a0:32:39:88:cd:cf:92:a5:bc:f0:9b:e9:
3d:9c:8a:fa:45:4a:f7:41:69:74:11:24:fa:c8:13:
3c:f8:77:c2:94:d4:67:a0:a8:e0:01:91:4a:1f:62:
86:08:aa:c1:81:d8:33:ad:ab:19:eb:59:19:95:b4:
0a:d8:61:be:79:ca:a1:5e:6e:94:f8:cc:75:08:a5:
ba:f8:58:3c:25:24:3e:90:54:18:4f:c9:7e:db:ee:
04:54:85:f6:f5:02:3e:62:f6:c2:db:23:51:1f:50:
bc:b1:da:e4:f1:c4:b5:ab:e2:da:f3:4e:ac:b0:40:
06:46:79:6c:5f:0b:fb:70:26:25:4f:1d:09:44:ba:
10:10:38:3b:88:8c:d9:4c:c5:5c:e4:d9:95:d8:e8:
43:c8:a6:b0:ef:eb:92:00:95:f6:b1:8a:0b:14:31:
54:86:d3:ad:40:79:e5:b5:75:e3:2d:11:57:c9:94:
fb:d0:f1:07:ba:29:98:78:1b:fd:af:e2:a1:cb:f0:
af:40:0c:a8:a5:80:c1:fe:93:f1:a8:18:82:1d:25:
2c:a1:5c:0c:19:a1:ef:31:67:63:a2:19:00:ee:43:
cc:11:a4:24:72:82:86:15:1b:c1:60:88:57:17:a1:
36:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F7:3F:C4:DF:6B:56:E5:4D:66:32:17:DA:F1:D8:DB:87:E4:92:F8
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/hPc_xN9rVuVNZjIX2vHY24fkkvg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b4:e5:7c:7c:9a:d7:10:c3:0d:f9:4b:37:22:72:ee:e2:be:98:
6f:2c:fa:ea:a8:a0:cc:88:69:c6:a7:c0:d8:6a:76:b2:31:d4:
b4:02:26:1b:98:81:de:12:b8:8e:aa:db:05:9e:44:6c:f6:d3:
49:1b:f7:2d:45:9e:29:08:3c:d3:fc:50:3b:07:29:23:2a:73:
67:08:22:f5:93:b6:9f:98:df:d4:31:74:ce:e2:4c:c9:62:3b:
d0:49:5e:30:47:fa:b0:4b:7d:44:60:92:55:96:a9:2d:e5:a4:
7f:47:0b:34:ce:c8:f4:18:9f:6d:62:9e:d4:2c:df:27:98:34:
b4:fa:20:f8:ba:26:67:17:ac:c5:2c:0f:93:3a:a1:53:d8:44:
69:78:ce:6f:f1:8c:be:d8:75:ff:3d:0c:32:f9:6c:95:57:2f:
dd:e8:c9:f0:1d:5c:67:cc:fb:d5:20:86:b3:76:b1:2d:e0:81:
8f:7f:fb:34:cd:c6:af:10:82:f3:1e:90:52:9d:1d:93:62:7c:
f7:c4:97:4e:54:04:3d:81:05:83:da:32:f4:14:d5:dc:e0:5a:
4e:8c:ed:2e:dd:04:ae:76:de:5c:43:5e:3f:1b:87:43:26:fe:
7f:7c:61:73:00:18:3c:6d:78:fe:12:ec:20:b4:f0:c4:bc:26:
94:19:64:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 01:07:06 2025 by rpki-client