Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ts73_oYEtBss65_DPz7Wqwe8ng4.roa
File: ts73_oYEtBss65_DPz7Wqwe8ng4.roa (raw, json)
Hash identifier: e5XdRytrggXyD+ziX+1d970mPCV+0jngSMwQ4ugifqQ=
Subject key identifier: B6:CE:F7:FE:86:04:B4:1B:2C:EB:9F:C3:3F:3E:D6:AB:07:BC:9E:0E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3309
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ts73_oYEtBss65_DPz7Wqwe8ng4.roa
Signing time: Wed 27 Mar 2024 15:22:04 +0000
ROA not before: Wed 27 Mar 2024 15:22:04 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13065 (0x3309)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 27 15:22:04 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B6CEF7FE8604B41B2CEB9FC33F3ED6AB07BC9E0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:93:a9:43:d4:9c:28:e6:ea:39:d3:fd:7a:60:
fc:d2:b4:9d:d8:76:9d:02:33:56:96:84:01:35:9d:
70:4b:51:b6:bc:5b:71:82:7d:1f:de:e9:91:b3:74:
48:da:15:47:ed:7b:15:fe:5d:90:83:51:ec:b3:2a:
a6:3d:2f:6b:7c:05:8a:fa:8d:fb:a5:6c:5f:55:0e:
ad:95:3a:23:5e:d7:f0:76:a5:35:73:fd:b7:4f:7f:
98:e9:e7:a6:4c:e9:58:65:00:26:a3:ca:5a:9e:ef:
04:bc:68:b1:01:1d:ed:47:f1:31:8f:bb:a8:c4:c7:
53:b3:3b:a0:0f:41:a4:be:d6:78:62:e1:a5:5a:21:
2e:db:16:1b:43:31:bf:47:a9:fc:b8:fa:3e:04:05:
04:15:93:6f:b3:c0:e7:07:79:34:a1:f2:1f:6d:51:
6c:0e:e0:19:29:a1:4f:b8:d0:e7:ff:5b:d7:9d:f0:
eb:42:6b:39:eb:0b:60:21:31:89:e1:0c:21:ad:ed:
fb:90:73:43:8c:a5:28:27:55:fb:a0:a4:40:da:35:
09:b8:4a:67:85:e7:9f:6e:b5:37:1e:25:53:fa:38:
cd:b0:ee:5c:a7:81:c8:4d:c2:2e:40:c5:8a:87:a8:
2e:52:ea:aa:85:66:ec:32:d7:75:02:48:bd:67:90:
07:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CE:F7:FE:86:04:B4:1B:2C:EB:9F:C3:3F:3E:D6:AB:07:BC:9E:0E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ts73_oYEtBss65_DPz7Wqwe8ng4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
ba:15:30:5f:b8:be:3e:1f:ca:9d:d6:8f:74:0b:72:cd:24:c5:
93:6a:15:9a:eb:5c:4f:8a:28:90:0c:0e:21:b3:53:4b:43:1f:
c0:2e:6d:38:19:9e:09:f7:3d:ca:53:e2:80:73:56:ea:3c:dd:
c5:6a:57:00:d5:00:af:3e:29:3f:a3:6e:0c:d0:14:22:fd:8c:
aa:cb:26:66:c8:b4:83:2b:e7:56:ce:79:70:9d:38:9c:50:5d:
14:e5:72:40:86:1e:88:d9:1f:89:5e:37:f1:b0:96:87:7c:94:
1d:2c:9d:dc:bd:9a:26:13:04:68:a1:08:f8:f9:22:28:66:82:
93:66:f9:6d:ae:d4:b2:7c:28:d6:11:85:8b:79:31:23:3f:5e:
a6:95:cf:dd:d4:94:40:cf:02:6c:3f:87:59:77:4f:d6:ad:77:
29:93:28:99:e7:1b:cd:a5:cb:ee:b1:bb:09:02:5a:b0:71:31:
c0:3a:15:37:10:82:56:28:af:94:5e:93:ca:76:be:61:37:45:
3e:19:2d:1f:11:56:b1:f7:44:23:34:cc:47:ad:0b:d6:35:3b:
59:f8:19:b5:b5:97:02:8d:95:2f:af:4d:39:d7:a5:7e:8a:9f:
59:91:29:46:ef:62:a3:04:5e:fc:ea:75:e9:21:9e:80:bf:fc:
e5:18:bf:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 16:41:05 2025 by rpki-client