Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/waLRSbF21oDcZMxFxgMRawVHquw.roa
File: waLRSbF21oDcZMxFxgMRawVHquw.roa (raw, json)
Hash identifier: h0j57pM4BBM2TrMkwEcFCNCLwjZxxpMI5H4nFF9LDXo=
Subject key identifier: C1:A2:D1:49:B1:76:D6:80:DC:64:CC:45:C6:03:11:6B:05:47:AA:EC
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 40CA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/waLRSbF21oDcZMxFxgMRawVHquw.roa
Signing time: Sun 14 Apr 2024 23:22:54 +0000
ROA not before: Sun 14 Apr 2024 23:22:54 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16586 (0x40ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 14 23:22:54 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C1A2D149B176D680DC64CC45C603116B0547AAEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:32:11:59:97:ad:88:d5:ba:f0:4b:9d:2a:9d:
33:1c:ea:e3:ce:d7:48:04:49:9c:56:e2:53:59:50:
ad:b4:01:e3:65:60:9f:e6:b4:ea:4d:35:22:98:fd:
e0:ee:87:56:a1:d7:d5:57:92:01:ae:17:57:9d:26:
09:f6:1a:26:df:bb:18:f7:4a:35:bf:22:13:3d:6a:
f5:53:ec:64:15:a0:1a:00:87:2d:27:a7:ba:ab:58:
6c:73:52:e8:3f:a2:e9:59:76:1a:ab:59:09:2c:23:
38:37:8d:89:80:13:0c:f1:d3:75:50:7b:1f:bd:37:
d2:ed:a5:99:d9:49:f3:29:86:e5:d3:31:66:a6:cf:
e5:d7:6f:44:3a:ce:77:e9:b1:3b:db:76:fa:7f:dd:
0b:13:dc:82:c9:ef:e4:a4:d1:76:67:0f:88:02:36:
d4:4b:eb:15:3f:f8:c0:2e:cf:af:e0:6c:79:ee:b6:
f0:d6:0a:b9:39:da:fb:44:26:c5:ab:29:c8:c4:ad:
0b:48:d7:b2:84:7f:fc:b8:d6:97:77:d3:db:4e:1b:
35:c3:10:2c:7c:3b:76:87:91:c1:9d:33:17:d9:af:
ba:eb:4a:6b:5e:05:32:dd:f3:d1:6b:5d:97:32:18:
d3:03:97:17:57:d3:ff:f3:a7:59:01:dd:34:83:0e:
9f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A2:D1:49:B1:76:D6:80:DC:64:CC:45:C6:03:11:6B:05:47:AA:EC
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/waLRSbF21oDcZMxFxgMRawVHquw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
29:78:6a:d4:d1:60:1e:76:53:df:e4:62:b6:f3:a1:90:f2:dc:
5d:83:31:b8:a1:09:07:53:e3:31:bb:e1:b8:29:3b:f5:4a:b8:
74:79:52:77:b6:b3:ee:13:a8:b8:4a:46:7e:0a:50:f2:e0:ba:
60:2b:0f:e2:b8:7d:0c:82:f1:3d:1b:dc:23:85:6d:ac:ef:8e:
ea:e7:e5:ed:64:df:60:07:8e:38:c5:a5:4c:3e:9d:51:4f:9e:
12:49:86:0f:20:d3:b2:c7:73:04:f1:82:75:09:a5:0c:34:25:
b0:7d:7e:c4:74:c9:48:21:36:3b:f4:da:01:9c:9e:aa:42:96:
18:60:c2:1d:ba:ee:3a:b8:62:75:2d:02:91:55:fe:33:83:65:
e6:68:94:ba:7f:c2:cb:d3:9e:90:37:c9:14:b9:3c:ab:e2:1f:
1a:3a:9c:be:c9:a3:99:82:81:e8:0f:d0:d3:08:c2:6a:13:a8:
33:24:7d:b6:13:a1:bd:5a:e6:42:69:bf:b4:ec:9c:dd:b9:e3:
55:9d:6a:d3:1f:b5:5d:49:e8:e5:d4:2a:5f:bc:d1:d7:83:18:
3b:6d:43:bf:2a:6a:16:88:cc:cf:16:4c:70:e1:bd:3f:31:cc:
06:7d:da:b6:a3:f0:cc:b4:e3:0c:8e:b9:cd:d0:cb:48:a1:9a:
c5:66:6c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 00:55:21 2025 by rpki-client