Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/qQ-j5Be-jpzKMO8vP4b7jq_lVLg.roa
File: qQ-j5Be-jpzKMO8vP4b7jq_lVLg.roa (raw, json)
Hash identifier: 3upgUDLPqixA8qD1WUMFyWuJgkOOjVqPZF/TCPxjG6A=
Subject key identifier: A9:0F:A3:E4:17:BE:8E:9C:CA:30:EF:2F:3F:86:FB:8E:AF:E5:54:B8
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4B67
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qQ-j5Be-jpzKMO8vP4b7jq_lVLg.roa
Signing time: Mon 29 Apr 2024 02:53:39 +0000
ROA not before: Mon 29 Apr 2024 02:53:39 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19303 (0x4b67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 29 02:53:39 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A90FA3E417BE8E9CCA30EF2F3F86FB8EAFE554B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:46:e6:5e:88:b7:36:d4:1d:75:f1:6e:d1:3d:
49:65:97:28:72:25:ca:e8:1c:fe:bb:03:ea:a7:ff:
18:78:a1:1f:3e:6e:6b:0d:cd:8b:69:4c:d1:83:eb:
10:35:e2:54:6b:e4:a5:d9:9f:75:37:ca:83:3d:ee:
4e:5c:37:6b:92:43:bf:2c:19:7a:91:7c:ad:3a:12:
ed:6f:f0:fc:35:61:2b:a2:9f:e4:d5:d0:6d:31:88:
c7:30:fe:ee:9f:45:94:47:e6:9e:12:12:9f:1b:f3:
a4:3c:e8:df:9d:95:09:0f:0e:57:53:ed:37:8e:e8:
89:1d:70:ec:b7:6b:18:a3:ac:85:f8:6e:88:ce:18:
6d:2f:bc:63:d4:40:7b:50:34:92:a5:46:db:b5:dc:
48:62:d4:d1:07:6a:fe:73:4e:2d:f8:9a:37:7e:69:
d1:01:45:ca:19:3f:bb:e5:53:21:d9:d9:2c:90:8e:
ec:e6:b3:66:95:bf:54:f3:94:41:44:1e:b2:a7:fd:
57:8a:a9:40:fc:d2:87:8a:32:74:58:7a:0c:d8:cc:
40:70:0a:6a:d6:e3:fd:c9:52:89:b2:dc:b9:13:53:
3d:bc:59:d5:ce:6e:e2:99:d5:f5:9e:87:3e:a9:e6:
36:37:c7:df:4c:62:91:f1:a4:3f:d0:ec:67:32:99:
5a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0F:A3:E4:17:BE:8E:9C:CA:30:EF:2F:3F:86:FB:8E:AF:E5:54:B8
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qQ-j5Be-jpzKMO8vP4b7jq_lVLg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
1d:21:06:53:e1:ea:a3:51:3a:d8:f4:57:1d:3f:02:12:26:f7:
66:59:b5:1f:75:3d:04:d5:b1:29:70:e3:f3:d1:f3:3c:3a:7c:
04:66:c9:c0:f6:57:ee:86:f8:3f:4a:55:c9:94:f2:8f:56:75:
f2:ff:f7:78:9c:e3:09:0b:dd:b0:fa:75:3b:da:62:89:8e:f6:
04:81:50:a7:b2:98:f6:be:95:ce:07:2b:78:59:36:ca:40:e8:
41:7a:d4:fc:2f:b5:1e:df:14:4a:b8:db:4d:83:de:e7:be:a5:
14:2c:38:b5:83:73:bc:1f:f8:4d:f4:93:03:42:8a:75:ad:6a:
38:d0:ec:4e:66:58:a6:9c:59:c1:30:8e:c0:78:a1:c6:81:27:
03:bb:25:f9:3b:f6:ec:84:63:54:5e:09:a2:b5:60:c5:c5:60:
0c:16:b0:26:27:7a:29:d3:d7:08:3a:0a:2b:1f:fa:9a:34:5e:
92:8b:8b:02:5c:89:b5:bf:1f:f9:e8:f8:88:40:a5:9c:81:9d:
d5:cd:ee:5c:54:26:ec:b0:99:ec:35:a4:79:04:f5:66:41:a1:
43:9a:57:43:b7:eb:d2:90:5c:80:b6:3e:a2:82:c7:98:32:2b:
51:e2:22:ea:24:b0:99:a3:de:fb:67:a6:94:3b:ca:6c:46:ac:
32:d0:dd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 07:00:02 2025 by rpki-client