Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/MtURX8VT42BwGUhzJvAERq32_iY.roa
File: MtURX8VT42BwGUhzJvAERq32_iY.roa (raw, json)
Hash identifier: nhB2IIpumUYKlAfdKwmkU6UOSXf+m8+7zQoIEZvoy9M=
Subject key identifier: 32:D5:11:5F:C5:53:E3:60:70:19:48:73:26:F0:04:46:AD:F6:FE:26
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 416A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/MtURX8VT42BwGUhzJvAERq32_iY.roa
Signing time: Mon 15 Apr 2024 19:22:53 +0000
ROA not before: Mon 15 Apr 2024 19:22:53 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16746 (0x416a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 15 19:22:53 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=32D5115FC553E3607019487326F00446ADF6FE26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:22:32:ce:46:6c:ac:5f:14:9e:17:97:f4:e8:
7c:96:b8:d8:7b:cc:fd:ec:1e:60:f2:c7:b1:12:3b:
8b:fd:d3:e8:da:64:f3:6d:97:de:89:1e:f9:e7:96:
18:91:2b:ba:0f:91:eb:75:e2:54:13:d3:8d:34:bb:
b5:bd:33:65:c6:60:b3:73:28:65:44:8f:c9:09:0b:
f5:83:f2:80:26:04:ee:66:71:bf:95:38:ed:df:e3:
74:9e:28:7f:db:8c:33:1d:c7:d2:5f:5c:3e:fe:3d:
d7:43:74:ce:5c:c2:ee:c0:8d:2d:4e:5a:68:04:8d:
bb:a4:59:db:39:38:c3:01:86:3e:1c:e9:9c:2f:25:
2f:ee:f2:35:ff:8b:ac:6b:d7:11:86:70:47:13:ba:
35:43:18:dc:5a:19:ab:69:38:15:d5:92:af:6c:5b:
66:2a:10:ae:00:6d:20:75:d0:24:2c:c4:b9:53:8f:
54:fd:71:d7:48:cd:ff:9e:d8:52:6f:fe:5f:02:18:
14:99:b9:d2:e7:17:3e:47:a1:70:7d:a2:c0:bc:74:
67:c0:e6:e1:ef:79:f5:06:44:9f:02:22:90:35:66:
5b:82:d5:1e:5c:35:0f:f1:b5:2e:ed:5f:10:de:c5:
95:fa:5c:d5:dc:44:15:ca:71:5c:62:72:a5:c6:93:
70:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D5:11:5F:C5:53:E3:60:70:19:48:73:26:F0:04:46:AD:F6:FE:26
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/MtURX8VT42BwGUhzJvAERq32_iY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
27:ae:a1:4e:1a:fe:07:58:49:5c:78:72:80:60:fb:6b:a5:49:
f4:50:57:17:26:ab:e1:55:74:03:e2:87:91:4e:37:07:f6:09:
f6:0a:28:49:7d:ec:80:85:98:0a:c6:05:6c:0b:7e:44:94:e2:
cc:c9:14:a9:8f:7d:0d:32:b6:f9:80:ff:f0:93:72:c5:b0:8c:
04:d0:d7:eb:4e:22:6d:9c:d1:1a:05:d5:5d:30:d1:d1:0c:95:
1d:85:23:a4:e8:2d:2b:93:e6:cb:69:ce:03:97:17:b8:76:ef:
f0:38:d9:91:a5:3e:21:a4:27:8d:a5:b9:97:53:66:ec:00:28:
bc:a6:82:c7:b2:b2:99:b1:52:14:91:8d:eb:cc:8a:cb:6e:86:
10:cc:a4:0d:a7:8d:cf:35:f0:51:0f:35:db:e8:fe:b2:bf:d4:
8c:54:cb:8c:be:95:f7:ea:8f:98:ba:f9:8b:c2:d7:9b:7f:7d:
5d:79:1c:c1:fd:24:36:78:e2:6b:e3:3a:70:63:f9:cd:26:35:
65:95:db:3a:50:e5:93:be:f9:49:c7:5c:85:c7:9b:fa:ad:9e:
66:1b:df:cb:a0:75:f1:5c:7c:60:4a:79:2e:66:f4:e8:99:dc:
15:a9:b4:9d:c9:85:10:19:20:81:07:68:a2:87:0f:2e:91:8e:
af:f0:65:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:41:56 2025 by rpki-client