Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/3mtPVwE2AftW8c9_XasGVPr0z88.roa
File: 3mtPVwE2AftW8c9_XasGVPr0z88.roa (raw, json)
Hash identifier: k/qR5cRrirsVyI2cR9jF6k8VNQPOVWusdFisEQ7DFIY=
Subject key identifier: DE:6B:4F:57:01:36:01:FB:56:F1:CF:7F:5D:AB:06:54:FA:F4:CF:CF
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4BDA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/3mtPVwE2AftW8c9_XasGVPr0z88.roa
Signing time: Mon 29 Apr 2024 17:23:30 +0000
ROA not before: Mon 29 Apr 2024 17:23:30 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19418 (0x4bda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 29 17:23:30 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=DE6B4F57013601FB56F1CF7F5DAB0654FAF4CFCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:31:95:16:b7:e1:dc:cf:d3:28:3f:46:f8:47:
46:d5:d7:b6:4a:01:8d:69:fd:a1:87:5c:a4:68:fd:
d8:a2:79:4a:c7:60:a4:f6:b0:6f:80:1e:79:0a:f3:
12:b0:9a:22:10:33:80:7c:c9:a2:6d:e8:4f:4d:ea:
77:75:8d:42:61:90:73:ad:d0:44:ea:2a:80:95:c5:
f2:c2:19:d9:61:92:9f:6e:fd:c8:68:4e:8a:36:17:
92:91:c6:d2:f9:c6:ad:d2:7e:a1:e2:1f:12:0b:7a:
57:3b:b4:63:8d:47:e4:5b:4a:18:14:fd:ee:2f:d0:
68:2e:70:c3:55:59:9b:9a:b4:b9:f7:b7:bc:d9:57:
ad:7c:6c:db:38:c3:33:6e:d8:e4:21:51:39:d4:35:
30:e9:58:18:82:4a:81:3a:b1:fb:04:81:2a:da:d5:
03:0d:fd:d0:ea:40:c3:95:35:e1:07:74:3e:11:6a:
13:ef:df:83:75:f2:6e:93:99:30:49:1c:da:29:3f:
a8:7b:f1:1c:fd:30:5d:6f:ed:aa:dc:ab:22:a1:6d:
1f:6d:f3:26:55:28:1f:83:d6:dc:18:fd:fd:04:73:
60:4a:91:00:28:8a:bc:2b:75:c9:6a:98:80:54:f3:
28:ec:c8:40:da:46:33:f9:69:f5:ac:2e:7f:3f:89:
81:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6B:4F:57:01:36:01:FB:56:F1:CF:7F:5D:AB:06:54:FA:F4:CF:CF
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/3mtPVwE2AftW8c9_XasGVPr0z88.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7b:54:5e:ac:22:14:ea:b8:be:97:2c:9e:2c:8d:0e:20:ce:d9:
e3:b4:02:5a:e5:cc:6c:cf:17:97:cc:a0:32:ef:16:43:66:c2:
ab:f8:95:95:6b:ba:9e:21:8f:5c:47:e6:04:8c:b1:a9:ee:4e:
21:36:43:25:b9:7a:d1:63:04:a8:b6:b3:ce:44:f2:52:c8:35:
4a:de:d2:48:c0:8d:b8:1a:c3:24:7a:7e:68:15:1f:e9:72:09:
08:13:86:85:f4:24:c6:6a:87:aa:6b:de:42:3f:9c:c7:83:63:
05:04:33:97:50:be:57:38:6a:56:4b:c7:d2:d9:c2:cf:b6:2b:
69:89:74:d3:67:0b:db:4e:f2:f7:4e:07:15:cc:32:ce:48:7a:
34:5b:dd:4d:b8:5b:68:5e:41:ec:7e:6d:6d:18:5d:a7:09:d1:
09:5b:2e:b8:d4:ef:32:d3:2f:70:1c:55:99:03:f6:6f:5c:36:
ee:28:7b:b0:a7:d2:38:00:04:5e:41:1e:88:f2:3f:e7:ac:46:
ba:6b:e6:d2:ca:9e:ee:8b:20:10:4e:57:0b:6c:bf:17:a9:3a:
a0:b0:33:43:8a:85:07:b6:59:6e:7d:a3:77:32:73:8a:c2:f5:
f5:76:c1:20:6f:e9:8f:ec:c9:2a:c9:32:6e:56:df:e4:31:47:
1d:b7:6a:f9
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICS9owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0Mjkx
NzIzMzBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKERFNkI0RjU3MDEzNjAx
RkI1NkYxQ0Y3RjVEQUIwNjU0RkFGNENGQ0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCmMZUWt+Hcz9MoP0b4R0bV17ZKAY1p/aGHXKRo/diieUrHYKT2
sG+AHnkK8xKwmiIQM4B8yaJt6E9N6nd1jUJhkHOt0ETqKoCVxfLCGdlhkp9u/cho
Too2F5KRxtL5xq3SfqHiHxILelc7tGONR+RbShgU/e4v0GgucMNVWZuatLn3t7zZ
V618bNs4wzNu2OQhUTnUNTDpWBiCSoE6sfsEgSra1QMN/dDqQMOVNeEHdD4RahPv
34N18m6TmTBJHNopP6h78Rz9MF1v7arcqyKhbR9t8yZVKB+D1twY/f0Ec2BKkQAo
irwrdclqmIBU8yjsyEDaRjP5afWsLn8/iYHZAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU3mtPVwE2AftW8c9/XasGVPr0z88wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzNtdFBWd0UyQWZ0Vzhj
OV9YYXNHVlByMHo4OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAe1RerCIU6ri+lyyeLI0OIM7Z47QCWuXM
bM8Xl8ygMu8WQ2bCq/iVlWu6niGPXEfmBIyxqe5OITZDJbl60WMEqLazzkTyUsg1
St7SSMCNuBrDJHp+aBUf6XIJCBOGhfQkxmqHqmveQj+cx4NjBQQzl1C+VzhqVkvH
0tnCz7YraYl002cL207y904HFcwyzkh6NFvdTbhbaF5B7H5tbRhdpwnRCVsuuNTv
MtMvcBxVmQP2b1w27ih7sKfSOAAEXkEeiPI/56xGumvm0sqe7osgEE5XC2y/F6k6
oLAzQ4qFB7ZZbn2jdzJzisL19XbBIG/pj+zJKskyblbf5DFHHbdq+Q==
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:37:39 2025 by rpki-client