Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/wxYVAsTQV60otXkIZQyfLHj4XvE.roa
File: wxYVAsTQV60otXkIZQyfLHj4XvE.roa (raw, json)
Hash identifier: fPhi7G8TP7o4ZHZFAMQDTXk/bUfjknPIWzswAau66Qo=
Subject key identifier: C3:16:15:02:C4:D0:57:AD:28:B5:79:08:65:0C:9F:2C:78:F8:5E:F1
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 336D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wxYVAsTQV60otXkIZQyfLHj4XvE.roa
Signing time: Thu 28 Mar 2024 03:52:00 +0000
ROA not before: Thu 28 Mar 2024 03:52:00 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13165 (0x336d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 28 03:52:00 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C3161502C4D057AD28B57908650C9F2C78F85EF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b0:e7:d9:57:49:d5:c4:75:86:59:bd:5f:e7:
9d:23:88:97:aa:c6:53:70:db:3d:26:7b:c5:98:77:
d4:54:71:4d:90:a7:83:07:0d:85:b3:a5:63:5a:65:
6d:d2:b4:4d:d9:87:bc:49:03:82:53:ca:9b:1b:92:
f4:5c:f1:03:26:45:77:10:3d:d4:cb:5e:19:1d:f8:
2a:af:1a:6f:ba:8e:04:25:fc:30:8b:df:dd:72:26:
0c:f5:d9:da:5d:5c:42:eb:22:66:d4:ea:c2:c6:9e:
a4:49:6c:64:50:e4:18:ab:8d:98:77:4e:d5:25:4b:
a5:1f:c4:c7:02:63:17:6f:a8:34:6e:36:9e:cf:f3:
a5:f7:95:2a:41:d8:bf:9c:0f:bb:14:29:bc:c7:bd:
74:cf:d5:67:52:49:b5:34:56:ed:18:6c:c0:0e:83:
45:0e:3d:83:82:b2:3d:1f:02:d1:fc:4a:e0:9e:fc:
b9:a3:c1:c1:69:ab:82:89:e2:d0:87:29:18:df:b6:
c1:22:2d:2f:10:9d:d4:8f:c8:28:f4:3d:ab:14:ce:
73:6a:26:ec:10:00:fe:d0:16:6a:c7:3d:c8:af:03:
14:e0:40:c4:88:47:75:1a:cf:93:e7:b7:e3:30:0c:
ee:ae:86:5d:ea:00:df:53:1a:e0:d6:4d:64:25:e0:
4c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:16:15:02:C4:D0:57:AD:28:B5:79:08:65:0C:9F:2C:78:F8:5E:F1
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wxYVAsTQV60otXkIZQyfLHj4XvE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
43:f6:ca:16:1e:40:52:5b:bd:6e:84:8e:e3:3e:3a:8e:09:61:
1e:9c:13:32:d8:78:04:c6:02:55:ac:5d:34:43:89:e5:dd:5b:
a8:5a:2a:68:cb:5f:13:66:c3:11:b0:99:fe:0d:b9:29:2d:57:
d3:5f:32:e9:42:89:97:a1:63:53:2c:8c:46:17:27:4b:7e:e8:
ff:cd:d1:ea:0f:06:23:22:0d:0f:ba:a8:30:16:8e:7c:49:48:
66:a0:6e:4d:00:66:d2:5e:a6:09:69:50:46:a8:c6:67:13:f6:
f4:87:6f:44:8e:12:29:db:e1:05:0b:74:98:e5:c1:07:9d:cf:
fb:5c:05:b3:20:89:d6:75:e8:11:c7:2b:40:63:dd:e0:bc:20:
3d:f3:0a:5c:3e:69:69:5f:5b:e9:66:d0:53:01:22:14:83:47:
81:10:a4:8d:1c:c2:85:9d:8b:c6:33:e5:fb:cf:37:f1:b9:8b:
f9:20:48:16:bd:c3:d2:e2:49:07:af:c4:be:1c:0b:36:19:aa:
a5:53:0d:5e:2d:ed:34:b4:06:ef:ee:40:13:31:7d:2c:7c:7a:
50:8a:7e:d2:7f:f0:19:9f:b0:32:c9:cc:17:38:13:50:89:62:
5b:a1:4e:88:d5:78:53:6b:9a:0d:b9:6a:30:23:af:2d:a4:34:
ce:46:13:87
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICM20wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDAzMjgw
MzUyMDBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEMzMTYxNTAyQzREMDU3
QUQyOEI1NzkwODY1MEM5RjJDNzhGODVFRjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDesOfZV0nVxHWGWb1f550jiJeqxlNw2z0me8WYd9RUcU2Qp4MH
DYWzpWNaZW3StE3Zh7xJA4JTypsbkvRc8QMmRXcQPdTLXhkd+CqvGm+6jgQl/DCL
391yJgz12dpdXELrImbU6sLGnqRJbGRQ5BirjZh3TtUlS6UfxMcCYxdvqDRuNp7P
86X3lSpB2L+cD7sUKbzHvXTP1WdSSbU0Vu0YbMAOg0UOPYOCsj0fAtH8SuCe/Lmj
wcFpq4KJ4tCHKRjftsEiLS8QndSPyCj0PasUznNqJuwQAP7QFmrHPcivAxTgQMSI
R3Uaz5Pnt+MwDO6uhl3qAN9TGuDWTWQl4EzZAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUwxYVAsTQV60otXkIZQyfLHj4XvEwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3d4WVZBc1RRVjYwb3RY
a0laUXlmTEhqNFh2RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAEP2yhYeQFJbvW6E
juM+Oo4JYR6cEzLYeATGAlWsXTRDieXdW6haKmjLXxNmwxGwmf4NuSktV9NfMulC
iZehY1MsjEYXJ0t+6P/N0eoPBiMiDQ+6qDAWjnxJSGagbk0AZtJepglpUEaoxmcT
9vSHb0SOEinb4QULdJjlwQedz/tcBbMgidZ16BHHK0Bj3eC8ID3zClw+aWlfW+lm
0FMBIhSDR4EQpI0cwoWdi8Yz5fvPN/G5i/kgSBa9w9LiSQevxL4cCzYZqqVTDV4t
7TS0Bu/uQBMxfSx8elCKftJ/8BmfsDLJzBc4E1CJYluhTojVeFNrmg25ajAjry2k
NM5GE4c=
-----END CERTIFICATE-----
Generated at Sat Jun 21 20:58:48 2025 by rpki-client