Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/H8Wsy2lVkKinjohndpsRX6NTwo8.roa
File: H8Wsy2lVkKinjohndpsRX6NTwo8.roa (raw, json)
Hash identifier: F/M6M8XCRrCw/ko17LnfT48bfcXv3/VaUX/cl707hSA=
Subject key identifier: 1F:C5:AC:CB:69:55:90:A8:A7:8E:88:67:76:9B:11:5F:A3:53:C2:8F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 34EE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/H8Wsy2lVkKinjohndpsRX6NTwo8.roa
Signing time: Sat 30 Mar 2024 03:52:07 +0000
ROA not before: Sat 30 Mar 2024 03:52:07 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13550 (0x34ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 30 03:52:07 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1FC5ACCB695590A8A78E8867769B115FA353C28F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0a:79:98:fa:6e:1a:f8:02:7d:49:27:ed:52:
91:1c:25:33:83:fd:9b:66:a8:3f:bc:94:e3:95:8b:
b2:ed:5f:d1:f9:5e:4e:5c:e9:eb:08:72:fb:88:58:
cd:3a:19:c6:19:09:92:06:85:19:3c:3e:2c:ea:29:
bd:a5:d5:90:19:9b:c7:7b:7c:e9:84:07:57:e6:61:
57:34:08:fa:00:b7:64:cd:c2:31:0f:11:00:5b:61:
b7:1c:86:a6:f8:76:81:bb:1c:15:54:e0:d9:75:66:
7a:16:a0:9f:f9:49:e0:0c:d6:25:ff:af:ef:0a:6b:
36:bb:8c:07:7b:4c:58:d4:de:e2:c6:69:a2:46:20:
b4:c1:9a:9f:57:bd:4b:1b:74:38:e2:7b:09:e7:ca:
b2:c0:fe:e9:7b:b1:ee:47:61:88:6d:41:12:1e:cf:
7c:22:f1:19:11:00:c9:43:36:f1:82:30:0d:ce:49:
18:e4:22:d1:c5:a3:17:d4:47:02:de:58:47:0d:b0:
e7:f1:d9:cb:b7:f0:78:f8:94:1a:93:19:e7:8f:55:
e6:1e:b9:ff:f7:8c:d3:ee:c0:a7:dd:05:5d:1b:55:
f2:e0:9b:84:fb:bd:be:86:3c:cb:48:c3:4d:d0:4a:
33:5e:ea:17:4f:f9:31:07:6b:9d:b0:e0:c8:95:9c:
2f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C5:AC:CB:69:55:90:A8:A7:8E:88:67:76:9B:11:5F:A3:53:C2:8F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/H8Wsy2lVkKinjohndpsRX6NTwo8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
21:b8:64:b8:f1:28:0a:6d:7c:96:68:57:14:b6:41:ca:42:41:
40:9b:19:8d:1d:e9:8f:bd:11:2a:57:8d:c9:2c:e5:09:cb:49:
09:49:75:c9:ae:52:f8:80:a5:3e:2d:4d:71:91:02:7d:db:22:
2c:26:5a:b3:aa:dd:6e:eb:36:4e:8c:1a:1f:98:cf:2f:5f:1c:
70:33:62:c1:e6:20:fd:7b:ae:e1:a1:2f:48:57:c6:6e:81:10:
dc:71:dd:e4:8b:21:2a:ea:fc:34:1c:5d:77:41:a1:c9:b0:5c:
63:85:7a:1a:f1:54:7c:82:6d:5d:4a:67:16:af:e3:29:3e:7d:
87:8b:d3:8e:19:fa:dd:b6:2c:dc:72:17:79:96:e2:25:ea:4e:
6a:34:ae:27:a2:8d:0d:b4:af:cb:f5:d9:93:76:1c:0c:10:59:
7c:68:4b:78:a0:c4:52:24:f6:bd:a0:e3:78:67:6b:14:21:af:
2c:ac:c5:78:37:9a:b0:96:6e:3d:99:70:d1:0b:12:6f:16:1f:
58:d1:88:a4:f1:80:1c:46:de:27:5f:cd:1d:f4:cd:ea:29:8b:
b4:d6:84:fa:51:a1:7e:d3:a7:37:58:06:e5:d5:97:2c:13:aa:
63:83:d7:59:49:88:43:46:85:04:2b:c8:94:03:46:58:71:11:
ba:a5:11:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:02:04 2025 by rpki-client