Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/s6oiO2Ors8dBNQj1Uqk-BiJDxmU.roa
File: s6oiO2Ors8dBNQj1Uqk-BiJDxmU.roa (raw, json)
Hash identifier: +4jHgtrH53tOZdPSqv9PE9SpJj+xf0YDxd/mPZVqt5U=
Subject key identifier: B3:AA:22:3B:63:AB:B3:C7:41:35:08:F5:52:A9:3E:06:22:43:C6:65
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 48BD
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/s6oiO2Ors8dBNQj1Uqk-BiJDxmU.roa
Signing time: Thu 25 Apr 2024 13:53:18 +0000
ROA not before: Thu 25 Apr 2024 13:53:18 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18621 (0x48bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 25 13:53:18 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B3AA223B63ABB3C7413508F552A93E062243C665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4b:c6:33:6e:66:3c:79:f9:db:0f:b7:c4:51:
2a:23:94:bc:1f:b8:06:9b:2c:8d:1d:63:76:65:90:
81:0e:ca:4a:92:0f:10:e5:07:37:d6:fe:2f:fa:63:
8e:00:3a:be:8d:73:77:4d:9b:9c:b5:3e:f6:60:2e:
66:dd:7a:be:86:48:71:72:d1:22:c2:48:78:cb:0e:
86:54:5d:b2:6e:95:ab:93:8c:24:75:32:ac:fc:84:
5c:4a:dd:2b:4f:44:a5:3e:16:52:32:15:cc:5f:09:
0e:c3:13:59:aa:9c:18:62:bc:ee:3c:c6:40:7b:b2:
27:c0:8a:d4:83:9b:52:e0:33:2c:3e:86:4a:a9:b4:
9c:1e:7b:17:00:18:c3:07:e6:f3:9e:1a:fd:4c:fa:
0c:90:6f:28:c5:fd:85:fa:80:b1:35:16:09:18:38:
f2:6d:da:47:cc:59:28:1e:55:ff:b9:4a:1f:02:b6:
c1:c6:cd:46:b7:d9:7c:84:42:6a:65:78:43:80:4f:
1c:27:e5:9e:29:74:14:82:19:89:90:86:b7:15:11:
01:f8:8b:8e:21:20:7c:02:cb:a6:1f:ff:1b:69:ad:
7a:28:01:59:c5:37:44:25:90:9b:96:f7:01:56:d1:
67:6a:a2:ba:85:92:f6:2b:59:dc:4b:05:7f:88:33:
1f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AA:22:3B:63:AB:B3:C7:41:35:08:F5:52:A9:3E:06:22:43:C6:65
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/s6oiO2Ors8dBNQj1Uqk-BiJDxmU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
6c:c1:49:bd:ec:a5:e2:42:62:db:83:45:4b:ec:a0:4a:58:46:
ef:56:7a:3c:c6:f7:52:49:62:34:5f:86:2d:5a:14:aa:0f:fa:
dd:bc:1b:2d:c5:28:68:b2:cc:41:36:ac:98:c4:4a:7b:7f:0e:
4a:43:47:ba:1a:c6:b7:dd:f8:6b:c1:3c:65:ad:b9:1e:3b:eb:
7c:c4:a2:d9:9e:7e:48:7a:51:56:06:4b:52:2b:46:25:9e:33:
41:45:d7:bd:a8:c6:c3:47:7b:30:72:44:d5:8b:a2:28:c2:5f:
4d:c9:6e:ae:bf:56:ea:07:c5:d9:a9:3d:0f:7b:6e:9c:56:a4:
af:6c:48:cb:65:05:f9:59:04:9e:77:cb:27:50:db:3c:df:09:
5b:88:9b:dc:8d:97:c4:3d:01:f2:c1:31:47:83:16:f2:fe:1f:
00:a5:c2:a6:83:8f:84:dc:f3:93:34:db:89:b7:91:43:23:50:
d2:da:f8:ea:ca:a0:cc:7a:26:f6:16:23:cd:e4:16:20:f7:db:
1b:43:46:96:ac:04:7f:6a:7d:dc:15:56:8e:41:55:c7:17:f7:
6e:02:1d:95:ba:c7:0e:31:78:7c:73:be:21:87:eb:44:cc:b9:
52:13:c3:1f:b2:66:cc:de:ba:a0:fe:19:6f:95:fe:05:c8:88:
13:f8:b7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 21:07:12 2025 by rpki-client