Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/oyiYMDwCMgvWNwymJWyESnRHeOs.roa
File: oyiYMDwCMgvWNwymJWyESnRHeOs.roa (raw, json)
Hash identifier: h5joLKTTEqq9IdyJg9BTWfExYNVsa3a1vy+/S66CkLA=
Subject key identifier: A3:28:98:30:3C:02:32:0B:D6:37:0C:A6:25:6C:84:4A:74:47:78:EB
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3B81
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/oyiYMDwCMgvWNwymJWyESnRHeOs.roa
Signing time: Sun 07 Apr 2024 22:22:36 +0000
ROA not before: Sun 07 Apr 2024 22:22:36 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15233 (0x3b81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 7 22:22:36 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A32898303C02320BD6370CA6256C844A744778EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:20:ae:5a:75:f3:25:5c:85:ef:48:e3:d3:f2:
70:11:05:d6:e3:f1:ec:63:70:ce:5f:cc:36:cd:07:
7c:a1:4a:b8:65:10:4f:7f:05:99:4a:86:d2:99:b1:
d8:95:18:1f:94:d2:ff:84:02:91:4a:5b:e1:f5:a5:
ef:6d:0d:c7:df:d8:1e:7b:8b:5b:7a:e4:30:e9:0b:
1d:ee:c4:33:4f:ee:ec:02:43:49:99:37:c0:57:75:
a8:14:8f:0f:4b:25:25:77:fc:e6:f6:9a:24:31:82:
07:97:f8:01:28:50:fc:c3:50:9d:e1:35:54:77:f6:
ac:7d:93:85:73:da:d4:1d:2d:10:13:f4:ea:38:a6:
6a:cb:5c:7b:86:b7:ea:c1:03:d1:8a:16:e3:83:27:
74:bc:0b:1a:cd:ba:bf:26:3a:4b:51:c4:49:45:94:
ab:b0:d7:54:8f:dc:45:64:b2:e2:7a:d6:19:5d:ab:
18:41:4c:64:70:ce:d3:f2:41:46:4b:4f:27:dd:b0:
af:00:0a:4c:43:47:cd:fc:90:ef:14:ee:88:6b:59:
17:43:41:55:1b:8b:0b:55:c9:a0:ee:0e:ec:ab:e6:
9c:f7:9a:b1:0f:7c:0c:36:b8:f0:a5:12:a9:45:12:
86:f2:a5:fd:d0:f6:4b:55:0a:4c:99:4a:be:d4:d9:
75:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:28:98:30:3C:02:32:0B:D6:37:0C:A6:25:6C:84:4A:74:47:78:EB
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/oyiYMDwCMgvWNwymJWyESnRHeOs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
1b:81:12:94:79:35:8c:61:c0:1c:71:3d:1c:f4:4a:dd:f7:1a:
46:3b:a2:76:44:15:8a:81:07:82:7c:67:92:5e:ce:a3:73:d3:
26:cf:e0:5c:b1:f3:c1:c4:16:5c:de:ca:5e:4c:f5:cd:ad:50:
5d:f7:6f:e3:69:b6:39:f0:a5:99:fb:e9:a1:20:80:1d:40:c2:
9a:34:7c:18:be:13:d9:43:28:0b:8c:02:11:b8:df:e1:86:d5:
33:21:2d:8c:88:5a:35:8b:76:ba:62:36:9e:16:7f:e4:aa:c3:
27:5f:5c:47:c7:0a:bb:48:fb:99:36:ff:25:d5:99:bf:74:7a:
19:1e:d9:c5:23:20:14:97:f2:8b:27:67:5d:d1:92:1d:51:93:
1e:83:e8:b9:cd:a9:2e:ef:80:9a:9c:35:7d:fe:5e:da:d3:56:
00:d2:37:8c:2e:b5:5a:51:2a:0b:72:a1:84:d9:b0:1b:ad:35:
b9:bf:b2:6f:e8:f7:2b:0a:97:9b:92:a6:40:96:8c:5f:a4:9e:
b4:5c:17:3e:9a:fb:a2:44:82:31:2c:49:41:9f:72:5d:4a:f5:
77:cc:05:88:62:19:08:59:fe:1d:83:9a:19:b2:90:1c:24:b7:
de:4b:da:21:9a:e1:3d:f2:cb:20:70:55:bf:c5:9b:2c:fb:ea:
e7:6e:ed:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 03:21:22 2025 by rpki-client