Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/oBLTXDTCfO1RZlohSCquxTdKW7o.roa
File: oBLTXDTCfO1RZlohSCquxTdKW7o.roa (raw, json)
Hash identifier: Q5LevYC9FQYZ/TAoBnQrzO1JOlC4L+URoW9BWn6p39Q=
Subject key identifier: A0:12:D3:5C:34:C2:7C:ED:51:66:5A:21:48:2A:AE:C5:37:4A:5B:BA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 33B9
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/oBLTXDTCfO1RZlohSCquxTdKW7o.roa
Signing time: Thu 28 Mar 2024 13:22:02 +0000
ROA not before: Thu 28 Mar 2024 13:22:02 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13241 (0x33b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 28 13:22:02 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A012D35C34C27CED51665A21482AAEC5374A5BBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5d:8f:9b:81:6c:fb:56:cb:09:98:49:c8:90:
4c:95:bc:d2:b2:76:4a:9b:66:ba:86:69:29:63:d7:
71:85:11:ed:cb:97:60:79:5b:f8:41:f4:f2:8d:c9:
6e:06:63:38:09:a4:98:73:00:a2:90:a1:46:0e:ac:
30:0c:cd:83:43:41:b8:c6:5e:8a:d0:92:f7:6d:80:
61:48:6d:6c:d3:d7:c7:05:27:e2:ae:36:7a:ff:9a:
07:9a:8b:db:b1:d4:8a:1a:bc:26:10:05:ca:be:a6:
47:44:7d:0d:ba:d0:32:09:78:eb:bf:ea:cf:f4:31:
8f:77:e0:0d:9d:b9:d2:67:ae:97:f3:82:c6:36:fe:
96:29:eb:a4:1b:8f:98:e0:d7:25:de:b3:7e:f1:71:
e2:f0:4b:d5:f3:8d:4c:63:8e:66:fc:ab:ba:45:50:
19:f9:ec:65:e0:13:27:07:d2:87:ee:82:b0:5e:2a:
4e:75:83:75:77:3d:dc:ee:f5:a3:f7:5b:04:d5:77:
e0:b6:d9:11:1a:e9:1d:28:41:47:ed:c1:f0:3d:fe:
47:e0:50:d8:0c:bf:d7:2f:66:dc:7e:fe:e0:44:bf:
52:5e:73:c4:ad:f1:15:ce:f0:2b:fb:7f:bb:72:9e:
69:af:8c:71:67:bb:f0:fe:88:6a:f3:cf:5c:d7:3c:
a8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:12:D3:5C:34:C2:7C:ED:51:66:5A:21:48:2A:AE:C5:37:4A:5B:BA
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/oBLTXDTCfO1RZlohSCquxTdKW7o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
93:a3:08:86:11:26:30:89:68:00:0c:ba:68:08:87:df:4c:37:
5a:4c:aa:54:97:5b:6f:20:47:35:13:79:90:e4:7a:c6:40:94:
d9:5f:cf:7e:46:7d:fb:d5:09:b7:22:5b:c7:f1:e8:de:6b:37:
65:07:3e:48:a6:ad:d1:31:c9:e6:17:9e:e1:05:aa:8c:ed:ba:
e9:27:55:66:40:12:8a:92:83:f9:a4:77:9e:e7:01:45:45:35:
7a:0c:c5:f7:7e:98:ec:c1:ef:2a:5c:36:15:22:7f:bd:be:97:
d2:16:29:33:40:1a:73:de:0f:e2:a1:6f:9b:cc:b3:d3:94:30:
43:4a:13:1d:c3:5c:57:ba:33:6e:ae:02:5b:b9:29:70:55:bf:
ef:5f:d7:50:76:99:cc:af:a2:e6:77:81:9e:d1:76:ca:9d:b8:
4f:ed:fa:2d:5b:01:50:10:17:6a:1e:b4:aa:05:83:d6:47:66:
af:d8:fa:89:0e:c0:b2:b7:15:57:e6:49:b8:5f:19:4b:99:8e:
53:52:3e:7a:02:b0:13:d8:f6:25:3a:cd:aa:a2:b5:45:bf:83:
70:db:a0:55:89:68:48:72:84:ca:ff:95:8d:6e:ca:df:9b:c8:
27:4f:c1:6d:fb:99:a1:7b:70:92:83:28:ab:a3:a1:c6:e7:85:
93:59:93:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 22:44:40 2025 by rpki-client