Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/trGDC4720BlOdniHDxu7sLnw4nI.roa
File: trGDC4720BlOdniHDxu7sLnw4nI.roa (raw, json)
Hash identifier: YmzBWyisaXTIvY6EsAgyuj777Px0inWfQ43Oqa0p/a0=
Subject key identifier: B6:B1:83:0B:8E:F6:D0:19:4E:76:78:87:0F:1B:BB:B0:B9:F0:E2:72
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 575D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/trGDC4720BlOdniHDxu7sLnw4nI.roa
Signing time: Wed 15 May 2024 01:54:16 +0000
ROA not before: Wed 15 May 2024 01:54:16 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22365 (0x575d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 15 01:54:16 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B6B1830B8EF6D0194E7678870F1BBBB0B9F0E272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cf:ed:1e:da:cd:67:f7:50:ec:eb:03:cb:ea:
46:3a:b9:6f:93:73:97:b2:cd:32:aa:bb:e3:83:3b:
29:01:5d:1b:cd:d8:6d:1c:83:58:9a:21:90:8a:f2:
c3:84:db:1c:60:52:f9:62:29:5e:f5:12:bf:19:b5:
bd:d6:f1:00:5e:a1:18:40:f0:83:37:77:e3:0c:29:
d9:71:c3:84:1c:65:24:c0:1c:3a:5a:50:a2:d9:bc:
5e:93:f7:11:99:4f:5d:c1:f5:2c:01:72:7b:7d:f9:
54:26:bf:53:ab:51:af:b5:3f:ee:58:02:8f:9c:6e:
66:1e:07:15:80:67:ee:69:ef:81:b0:f2:2b:07:70:
b6:cb:e4:78:9c:4a:2d:5e:86:21:70:db:36:05:ba:
f1:d0:8c:67:9b:cb:9b:4b:e8:8d:9c:fc:85:6e:7c:
0d:24:77:9b:c9:a6:81:f1:52:df:d3:b2:3d:97:8c:
0f:24:1a:8c:39:5a:1d:b5:94:a9:1a:ed:6c:9f:e2:
2a:09:1e:11:e8:38:dc:48:84:bb:bc:ea:03:fb:8e:
35:ec:8c:40:bd:3a:c3:83:99:7c:b8:29:0c:bf:2b:
5b:bd:49:b7:06:57:23:0e:8e:4a:f1:13:23:64:fd:
b9:8e:cc:9d:38:d4:bc:74:0b:94:57:1d:15:10:ae:
95:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B1:83:0B:8E:F6:D0:19:4E:76:78:87:0F:1B:BB:B0:B9:F0:E2:72
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/trGDC4720BlOdniHDxu7sLnw4nI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
65:97:27:cc:c7:94:24:91:f9:15:b6:8e:e3:af:41:be:44:bc:
47:e2:99:af:77:f3:d9:ce:49:27:cd:a4:32:24:5d:e2:10:33:
f6:3b:08:cf:64:a2:ef:0d:4d:11:e5:1a:c9:9b:75:12:fa:b9:
bf:30:a2:d7:11:d1:ca:36:30:12:ac:a0:4a:45:49:ba:48:25:
a0:82:44:5f:24:85:4b:9b:e8:58:e0:b3:ea:ea:d1:a2:5a:1c:
f8:63:7e:42:9b:11:ff:2c:ab:10:74:e2:fc:63:0c:ba:48:14:
1d:0c:94:58:fe:92:e6:78:1b:b6:36:e8:53:02:fa:80:37:88:
98:29:a1:27:73:4c:3d:4b:1b:6c:de:7b:d5:3b:50:57:4d:8c:
4f:4d:95:75:c3:83:64:97:b9:2c:74:be:65:69:fc:8e:d3:51:
b0:01:e2:fd:40:50:43:f7:d3:a8:52:46:1e:64:92:fe:a3:e4:
ad:1d:b0:ec:9d:3f:82:d8:50:ec:a7:88:21:b4:0b:9b:df:d9:
d1:3e:e7:3c:78:1b:47:8e:96:85:01:7e:52:5e:0d:22:61:62:
16:ab:23:cd:5f:c3:bf:5c:a5:32:bc:84:b7:e9:38:00:61:03:
09:b1:9f:9e:d5:2e:26:ff:69:87:3a:e0:5c:bc:54:f0:3d:5e:
c5:f9:d7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 02:20:54 2025 by rpki-client