Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/nD4XrOM0w5z6MiQexiKpnUkpel0.roa
File: nD4XrOM0w5z6MiQexiKpnUkpel0.roa (raw, json)
Hash identifier: JECfzstDpuF0VKkP5LsLvs6AB73c9fVQj3iPNTtcj1c=
Subject key identifier: 9C:3E:17:AC:E3:34:C3:9C:FA:32:24:1E:C6:22:A9:9D:49:29:7A:5D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 421D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nD4XrOM0w5z6MiQexiKpnUkpel0.roa
Signing time: Tue 16 Apr 2024 17:52:57 +0000
ROA not before: Tue 16 Apr 2024 17:52:57 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16925 (0x421d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 16 17:52:57 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9C3E17ACE334C39CFA32241EC622A99D49297A5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:02:4b:7a:e4:eb:04:1f:ac:f6:32:d2:b4:a4:
4f:ec:ff:a1:5d:8d:81:ca:ea:91:28:a5:73:9d:bf:
90:e8:b3:ed:e8:3f:7f:ca:8b:11:3c:c5:41:f5:f1:
ee:e8:3a:0b:49:4c:aa:c1:89:3a:69:75:33:99:7b:
0c:e2:1a:b0:ef:09:e9:14:06:de:a0:b5:de:1b:2e:
52:a4:2c:d7:b0:3b:cf:dd:b7:c9:1c:ee:af:a4:66:
c7:b5:54:e9:e3:00:23:c7:bf:c2:9b:71:82:7c:d6:
82:a8:aa:48:32:6f:5c:92:f5:13:9f:1f:e4:11:f7:
3f:9a:52:df:1c:b5:77:c3:46:6f:84:67:42:fd:f2:
ee:12:57:08:d4:ab:94:23:a0:ea:14:f5:26:fb:ec:
f2:79:68:d2:55:5a:53:f9:4b:ad:64:96:01:03:f4:
df:3d:92:e4:59:35:96:13:9f:09:4f:90:af:5d:59:
1d:66:bf:ef:c5:35:13:42:f3:d6:22:6e:9e:69:2a:
27:df:21:16:c5:36:e0:f4:3e:76:fe:88:d2:cd:5d:
37:b6:dc:86:90:3a:29:03:fb:09:fe:ed:10:87:04:
94:a3:14:ed:2d:f2:aa:79:ae:6f:94:49:22:a9:79:
e5:fc:73:32:52:e3:d3:ed:93:bb:1a:a3:0d:9d:a4:
5f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3E:17:AC:E3:34:C3:9C:FA:32:24:1E:C6:22:A9:9D:49:29:7A:5D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nD4XrOM0w5z6MiQexiKpnUkpel0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
07:a0:64:80:70:6e:fd:99:78:ba:cf:45:1e:fb:bd:d5:f2:71:
18:14:d4:91:c0:4d:71:95:09:bd:9a:0a:3c:d2:14:2d:25:be:
e6:ba:a7:0a:4b:ec:c0:df:ca:96:5f:85:73:04:b3:ba:89:31:
0c:cd:02:da:a8:a5:54:d6:f7:19:c8:97:2a:81:ea:51:31:38:
d1:7a:c3:85:61:ef:6e:ff:1c:58:e7:ab:d9:70:46:d4:fa:3c:
d5:fd:d6:4d:ca:9d:9e:91:55:31:31:87:6f:56:23:d3:00:27:
76:23:96:22:09:d4:1d:0d:2b:fd:2f:8c:ff:85:10:8f:bd:24:
7c:99:50:cd:a8:48:62:e8:53:e0:78:4d:b1:d4:d5:75:22:bd:
ea:f6:07:89:17:44:97:12:44:82:9e:27:50:fd:3b:d9:8a:7a:
38:c6:69:a7:42:63:66:8a:49:2a:86:2f:2d:86:d2:98:e8:1b:
d7:76:ba:3b:e7:a2:a8:dd:ae:75:24:c7:3e:d1:f7:fb:8f:c6:
05:f7:36:72:f5:47:2d:0c:00:bd:6a:8a:77:11:f2:17:c8:c8:
b0:e2:3b:12:60:43:01:b2:29:cd:80:6b:19:5a:f1:32:41:24:
cd:60:f0:7b:00:e1:a0:de:b2:a1:67:3a:ef:3d:e0:a8:91:04:
8a:9b:94:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 00:51:29 2025 by rpki-client