Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/v5X9yKA7ro-ZMlng2BonxIb6cuY.roa
File: v5X9yKA7ro-ZMlng2BonxIb6cuY.roa (raw, json)
Hash identifier: lrig7Pj4KjR1CJWVn+L2u72tM9ukK852If+OWXS6cf0=
Subject key identifier: BF:95:FD:C8:A0:3B:AE:8F:99:32:59:E0:D8:1A:27:C4:86:FA:72:E6
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 35A3
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/v5X9yKA7ro-ZMlng2BonxIb6cuY.roa
Signing time: Sun 31 Mar 2024 02:22:37 +0000
ROA not before: Sun 31 Mar 2024 02:22:37 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13731 (0x35a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 31 02:22:37 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BF95FDC8A03BAE8F993259E0D81A27C486FA72E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c3:1c:5c:29:80:c8:44:fe:75:58:3e:b9:aa:
c9:3d:a4:36:69:37:3a:d7:e9:3d:35:04:5c:e6:36:
59:61:a7:a2:8b:b6:1d:52:59:7d:de:8a:cb:0b:0d:
1a:73:2c:ab:3e:24:73:1d:03:34:23:bd:23:7b:5a:
a0:ec:b8:b7:2c:35:e6:ee:7b:39:d2:58:26:52:38:
a1:53:16:52:19:95:cc:6b:1e:20:ac:0d:d4:1a:7a:
7c:d0:a7:d5:06:63:ce:15:3c:24:08:67:d7:0c:d8:
04:5b:a3:99:31:b3:45:19:f9:3c:c2:63:69:81:2b:
74:e6:10:e8:1a:ab:e7:80:20:12:f7:ff:d1:76:fc:
e5:84:ac:9d:5d:33:35:7e:03:83:02:7d:01:a5:3a:
04:16:c0:9d:d6:1e:ce:9d:2b:a9:e1:3a:2b:3a:ab:
4b:d5:50:4f:83:cc:ef:cd:d4:e0:8b:1e:c2:17:9d:
61:15:2b:d2:36:bd:7c:72:6c:2a:7a:23:1d:ca:cc:
06:fd:16:64:90:98:d7:6f:53:5c:03:4e:c5:5d:d6:
81:d8:5d:4b:40:e7:38:08:65:dd:93:3c:de:f2:27:
23:66:11:aa:47:00:47:7e:75:6a:de:16:da:57:8e:
13:26:fd:2c:04:9a:a0:de:66:07:ce:c3:9c:fb:eb:
1a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:95:FD:C8:A0:3B:AE:8F:99:32:59:E0:D8:1A:27:C4:86:FA:72:E6
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/v5X9yKA7ro-ZMlng2BonxIb6cuY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a8:b5:f5:70:c1:70:ed:1c:1e:3f:f7:1a:eb:b7:55:53:a6:fb:
bc:52:c6:15:c6:72:5e:0a:ee:71:ca:08:68:e0:a5:f0:e4:9c:
8d:9e:db:15:09:17:a9:4a:e2:75:8a:50:9a:91:c8:d7:7a:8c:
0a:cc:a0:68:df:07:4b:d2:0f:54:bb:67:f4:20:2e:08:a0:ec:
97:dc:25:6c:86:90:c0:c5:25:c1:d4:ad:7a:97:26:fd:61:93:
bf:c1:5f:bb:37:d3:f7:8c:0f:14:0c:51:c9:6b:19:50:25:d6:
16:78:b4:4b:f6:51:4f:92:49:14:1f:24:9e:19:88:a2:ab:a0:
e4:ee:27:6e:5b:7e:0b:ed:dd:c5:1e:f9:f7:82:ba:b2:6f:b2:
e9:0f:37:37:db:84:f9:06:c0:74:58:2c:90:81:8f:d1:04:2e:
1d:d5:2f:9e:4e:b0:a0:dc:da:ac:e0:59:63:86:c9:53:1e:6f:
47:08:5c:ec:d9:f4:a0:a6:ad:4e:b8:d3:b4:e9:d5:4c:51:28:
42:74:7c:1b:54:e7:34:8c:95:74:49:17:6c:22:55:bf:8f:5e:
60:e4:5f:f1:3b:fb:f8:22:29:18:2c:01:36:11:d0:7b:4d:ec:
de:5c:b7:99:91:75:f0:2d:b5:ef:7f:62:23:5e:99:5f:db:73:
66:f9:7f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 23:54:49 2025 by rpki-client