Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/1g-WvrExekXZNe8Mg-i64Cnn-sg.roa
File: 1g-WvrExekXZNe8Mg-i64Cnn-sg.roa (raw, json)
Hash identifier: dzRMT5xlN3WzxyA+Nco5omInV7x6XtFc/cYjxzTD2EM=
Subject key identifier: D6:0F:96:BE:B1:31:7A:45:D9:35:EF:0C:83:E8:BA:E0:29:E7:FA:C8
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 56E1
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/1g-WvrExekXZNe8Mg-i64Cnn-sg.roa
Signing time: Tue 14 May 2024 10:24:08 +0000
ROA not before: Tue 14 May 2024 10:24:08 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22241 (0x56e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 14 10:24:08 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D60F96BEB1317A45D935EF0C83E8BAE029E7FAC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:41:d3:ae:da:c8:d0:e0:22:02:1c:57:6b:38:
d0:8f:ee:aa:34:da:3b:b3:14:db:17:77:27:47:7e:
b7:ca:dd:f5:55:11:af:22:5d:18:5b:41:60:5a:01:
88:c5:dc:77:30:5f:40:55:ea:d9:70:2a:05:76:3a:
24:92:05:d6:fe:0f:ac:85:c4:77:9e:20:40:5f:48:
b7:0f:3d:9c:a8:c5:fc:8c:e2:9e:5e:a5:75:f0:03:
60:de:78:46:63:a6:04:39:b1:f0:66:86:cf:9a:49:
48:37:43:d2:60:c4:62:24:8d:5a:4c:6a:74:2b:c9:
e7:15:76:29:17:de:41:b3:bf:77:d1:b8:f3:dc:08:
9d:cd:df:88:f8:45:25:bf:c4:dc:1a:4f:78:75:4f:
a4:be:9a:7c:48:04:f5:ef:92:11:fc:86:7f:84:a5:
e9:7f:1a:fb:f7:b5:5c:43:be:f4:96:da:8e:d9:ce:
be:a7:0c:b8:e8:83:fd:49:4f:de:00:1d:83:71:1a:
48:2c:73:77:5f:83:35:67:59:97:db:dd:5f:a1:c7:
a8:ba:d3:35:22:66:1d:a7:79:56:6c:ba:89:42:d4:
b2:fd:fa:51:97:60:07:bc:c5:dd:e9:97:1c:de:63:
0c:1f:29:3b:bc:b1:24:87:7a:34:9a:e8:7f:a3:33:
c0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:0F:96:BE:B1:31:7A:45:D9:35:EF:0C:83:E8:BA:E0:29:E7:FA:C8
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/1g-WvrExekXZNe8Mg-i64Cnn-sg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
82:78:bf:69:1e:18:b2:23:c9:66:a8:c6:4e:09:83:6b:b4:b2:
57:59:34:62:94:f4:2d:2c:5e:92:b7:1e:7f:3f:e0:1f:ed:67:
c3:2c:69:6d:02:39:76:9a:2e:a6:1d:1e:18:9d:67:01:d8:fa:
77:48:fa:57:04:66:5e:75:70:e2:ec:b2:fb:9b:b3:58:47:b9:
c8:78:4c:a1:cd:16:7d:41:7c:90:1f:9c:69:4a:83:11:89:cd:
6b:f4:ab:d0:5c:c5:79:fb:70:2a:d1:e9:01:16:20:9c:f4:c1:
a4:38:ce:4a:f9:91:bf:7c:e0:87:f8:63:62:73:cc:8b:98:aa:
d6:ff:8f:36:4d:cf:d8:9a:b6:ed:1a:2b:2c:b2:87:b5:1e:f5:
90:73:c3:84:16:35:f7:d3:c4:89:25:12:51:1c:a2:3b:5a:66:
32:5d:b6:7b:ad:04:6a:49:3c:35:e5:81:98:2e:e5:1e:76:25:
1f:8a:8a:1e:e4:bb:3a:26:fc:e9:cd:2d:83:d4:eb:4c:a0:c0:
de:3f:6e:03:07:96:db:de:69:42:9b:e1:4d:4f:b0:d8:60:78:
11:46:e5:70:56:1e:bd:f9:50:15:c1:e6:e4:6f:4b:82:06:d3:
46:40:0d:ff:ff:a2:f7:e1:6f:88:86:08:69:1f:1f:ee:7e:bb:
4c:88:45:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 06:39:31 2025 by rpki-client