Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/kjxW55fzDKlqzucarGofH7vVEog.roa
File: kjxW55fzDKlqzucarGofH7vVEog.roa (raw, json)
Hash identifier: q+tlErKz661eycbZQCH6yAT6R/WGZAQdIbDbtxvJjt0=
Subject key identifier: 92:3C:56:E7:97:F3:0C:A9:6A:CE:E7:1A:AC:6A:1F:1F:BB:D5:12:88
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4B7E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/kjxW55fzDKlqzucarGofH7vVEog.roa
Signing time: Mon 29 Apr 2024 05:53:28 +0000
ROA not before: Mon 29 Apr 2024 05:53:28 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19326 (0x4b7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 29 05:53:28 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=923C56E797F30CA96ACEE71AAC6A1F1FBBD51288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:76:84:2a:a2:52:d0:0e:7c:ef:64:70:d3:29:
9d:59:5b:d7:cc:08:a3:08:76:a7:ae:43:73:8a:a8:
c4:25:16:ea:df:45:56:fc:4c:a2:00:b0:4e:ea:3b:
e4:61:ce:e8:c9:10:2d:0e:cd:df:fc:b4:0b:ff:fa:
ac:88:b8:d8:c3:44:e7:d9:8b:60:f9:d9:fd:07:72:
bd:d3:7c:29:71:a1:a7:77:8b:7f:91:00:c1:40:2f:
78:1c:8c:4c:1a:06:70:3e:6d:e3:0e:78:72:a7:70:
2e:33:7c:e0:a7:39:28:48:50:fc:34:d2:f5:d5:98:
70:e9:45:8b:c1:f7:8e:0e:d4:76:36:1a:54:2a:6e:
8a:52:47:10:f7:f4:52:65:3d:27:24:2a:e8:47:eb:
c0:2b:a1:04:cc:98:bf:db:51:56:5c:76:43:36:b6:
ab:e4:eb:e5:da:58:fa:24:02:12:cf:01:be:25:05:
f9:18:b7:ae:31:3e:f7:e3:96:03:4a:55:c2:91:ce:
c3:c6:d0:4b:ed:a0:00:0d:de:8d:de:d8:bb:f1:06:
f5:29:77:b0:1d:d7:17:e4:41:07:97:a9:f8:4b:97:
3e:f6:98:14:69:9a:4e:91:09:e8:2e:3a:60:54:6c:
ba:f3:4a:41:7b:46:3e:7e:a6:f2:08:fb:0d:2e:00:
13:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3C:56:E7:97:F3:0C:A9:6A:CE:E7:1A:AC:6A:1F:1F:BB:D5:12:88
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/kjxW55fzDKlqzucarGofH7vVEog.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
39:3a:b4:f4:77:5d:49:10:0a:4e:75:66:69:37:e6:89:5d:8f:
b4:05:c1:3b:c8:ad:ca:26:e9:8b:f2:43:dc:46:07:04:f6:b7:
1a:5a:68:b1:13:15:0b:e9:90:7f:86:cf:60:34:07:fb:0c:64:
c3:cf:7a:c5:07:a4:44:b9:22:c2:b7:72:98:e2:6e:24:a4:c0:
68:cc:93:9d:43:4d:b0:94:e3:01:45:7a:bb:7d:3f:83:ae:a9:
90:f2:5c:32:d8:6a:68:a6:54:46:50:c7:cb:1f:da:82:5d:82:
dd:23:4e:22:0f:f5:66:c7:34:53:c1:a1:1b:ff:93:f7:76:e4:
06:56:71:ff:c9:58:a2:d4:99:0d:ea:d1:a3:e2:e5:6c:87:d8:
d6:0f:d2:bd:8d:6c:9b:92:98:ed:62:e8:ca:f5:f6:0b:d8:9c:
68:fd:19:09:f7:cc:80:17:7a:2b:8b:6d:de:25:08:7a:73:36:
f2:a0:9a:2d:d5:5a:83:f8:f7:fd:87:cc:65:90:0b:2b:a4:87:
ce:9e:cb:e2:fe:31:99:d1:a0:64:56:ba:4a:f5:3d:60:7b:cb:
29:4c:46:38:bd:6b:1a:0c:b9:a3:d8:af:b0:94:9f:20:ea:7b:
b0:c0:b0:07:e3:21:20:c3:bb:8d:26:60:ab:dd:9d:34:99:ea:
68:14:ea:e0
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICS34wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0Mjkw
NTUzMjhaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDkyM0M1NkU3OTdGMzBD
QTk2QUNFRTcxQUFDNkExRjFGQkJENTEyODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDmdoQqolLQDnzvZHDTKZ1ZW9fMCKMIdqeuQ3OKqMQlFurfRVb8
TKIAsE7qO+RhzujJEC0Ozd/8tAv/+qyIuNjDROfZi2D52f0Hcr3TfClxoad3i3+R
AMFAL3gcjEwaBnA+beMOeHKncC4zfOCnOShIUPw00vXVmHDpRYvB944O1HY2GlQq
bopSRxD39FJlPSckKuhH68AroQTMmL/bUVZcdkM2tqvk6+XaWPokAhLPAb4lBfkY
t64xPvfjlgNKVcKRzsPG0EvtoAAN3o3e2LvxBvUpd7Ad1xfkQQeXqfhLlz72mBRp
mk6RCeguOmBUbLrzSkF7Rj5+pvII+w0uABNlAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUkjxW55fzDKlqzucarGofH7vVEogwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2tqeFc1NWZ6REtscXp1
Y2FyR29mSDd2VkVvZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAOTq09HddSRAKTnVmaTfmiV2PtAXBO8it
yibpi/JD3EYHBPa3GlposRMVC+mQf4bPYDQH+wxkw896xQekRLkiwrdymOJuJKTA
aMyTnUNNsJTjAUV6u30/g66pkPJcMthqaKZURlDHyx/agl2C3SNOIg/1Zsc0U8Gh
G/+T93bkBlZx/8lYotSZDerRo+LlbIfY1g/SvY1sm5KY7WLoyvX2C9icaP0ZCffM
gBd6K4tt3iUIenM28qCaLdVag/j3/YfMZZALK6SHzp7L4v4xmdGgZFa6SvU9YHvL
KUxGOL1rGgy5o9ivsJSfIOp7sMCwB+MhIMO7jSZgq92dNJnqaBTq4A==
-----END CERTIFICATE-----
Generated at Mon Jun 23 10:54:00 2025 by rpki-client