Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/SEIJ0ZJgCYSB5HjLsDKhnblzvB0.roa
File: SEIJ0ZJgCYSB5HjLsDKhnblzvB0.roa (raw, json)
Hash identifier: uz2Xj5K7RvGRNAR/tG7fDLbRgKwWD7ZQQO8TmDZZM9Y=
Subject key identifier: 48:42:09:D1:92:60:09:84:81:E4:78:CB:B0:32:A1:9D:B9:73:BC:1D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4FE1
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/SEIJ0ZJgCYSB5HjLsDKhnblzvB0.roa
Signing time: Sun 05 May 2024 02:23:48 +0000
ROA not before: Sun 05 May 2024 02:23:48 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20449 (0x4fe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 5 02:23:48 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=484209D19260098481E478CBB032A19DB973BC1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0f:51:13:66:f7:a5:76:e4:ad:2b:ab:3e:00:
13:e3:14:1c:85:ae:b3:ab:e8:99:20:fa:57:1f:cf:
89:33:09:c5:ba:ac:75:9a:e9:0f:db:e4:54:b5:c1:
90:44:72:57:49:ae:ee:52:85:7a:f5:7f:47:94:f9:
b6:e9:18:f9:c6:4f:41:05:8c:6f:77:88:b4:38:b3:
3a:c8:92:73:c8:5a:52:06:42:0c:73:d3:30:7d:9a:
3e:03:a2:c8:44:67:c6:ab:16:c2:68:eb:d8:55:eb:
95:ed:a0:44:24:88:dd:c5:d6:ab:c4:75:2d:d5:bc:
db:ae:5b:ad:a9:8c:8c:87:30:6f:bb:be:c0:97:bb:
9f:cf:32:88:64:7e:30:e4:a6:80:8d:bf:52:60:18:
c0:d0:4d:e7:42:89:a0:87:38:a2:ff:d5:08:3d:75:
0a:c2:30:2b:29:c7:04:84:e2:4a:08:16:24:ce:14:
ce:5a:e0:1f:de:27:2b:28:49:85:88:ad:b0:c3:c7:
7b:f0:5f:76:b3:02:62:a4:e3:fc:16:1c:03:e8:d7:
19:bd:ec:7d:69:e8:74:45:53:04:99:84:e7:c7:c1:
bf:11:5e:61:c7:62:99:bd:ec:f6:73:78:45:b1:1a:
be:fe:86:31:f0:13:2a:4a:ee:77:3b:b4:58:c7:26:
74:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:42:09:D1:92:60:09:84:81:E4:78:CB:B0:32:A1:9D:B9:73:BC:1D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/SEIJ0ZJgCYSB5HjLsDKhnblzvB0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
55:bb:10:0a:ab:67:0d:45:0c:66:b8:fe:90:a2:59:54:7e:35:
ce:f3:50:e0:23:78:9a:a5:07:a2:72:16:68:e0:e4:9f:38:32:
21:29:35:6b:7b:40:a5:ec:32:75:b2:2c:62:e5:27:08:97:00:
41:6a:dc:1f:9c:bb:a5:b8:9c:b8:5b:93:45:45:88:10:f0:2a:
7b:9a:fa:eb:fc:71:58:2d:d8:d5:f6:07:ad:9c:43:8a:ce:ef:
c0:96:11:d1:22:dc:5e:44:a1:fe:80:1a:1b:ba:54:54:11:44:
e5:59:80:10:1d:90:dc:2c:1a:94:cf:a5:6d:5b:ff:90:92:bd:
9b:a7:ab:00:a6:ef:fa:78:b4:5d:7f:68:c4:cd:d6:cc:02:04:
77:c3:8c:1a:8b:2b:85:5b:26:74:2f:3d:ca:74:eb:ce:09:a5:
12:e5:a8:51:05:6d:c2:9b:ff:1f:d8:15:cb:20:39:cc:62:75:
36:d3:54:a7:84:32:cb:31:ee:b5:b3:5d:67:1e:07:0d:46:f7:
30:fe:b3:ef:88:7c:f1:e1:6e:a0:40:eb:36:2b:7c:37:00:fe:
61:8f:9d:0b:c8:7f:eb:46:a8:c4:84:9a:82:e4:28:af:a2:cb:
67:2d:1c:30:f3:71:cd:fe:6e:74:a3:07:36:ac:1e:03:cb:40:
d8:48:f4:49
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICT+EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDUw
MjIzNDhaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDQ4NDIwOUQxOTI2MDA5
ODQ4MUU0NzhDQkIwMzJBMTlEQjk3M0JDMUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDjD1ETZvelduStK6s+ABPjFByFrrOr6Jkg+lcfz4kzCcW6rHWa
6Q/b5FS1wZBEcldJru5ShXr1f0eU+bbpGPnGT0EFjG93iLQ4szrIknPIWlIGQgxz
0zB9mj4DoshEZ8arFsJo69hV65XtoEQkiN3F1qvEdS3VvNuuW62pjIyHMG+7vsCX
u5/PMohkfjDkpoCNv1JgGMDQTedCiaCHOKL/1Qg9dQrCMCspxwSE4koIFiTOFM5a
4B/eJysoSYWIrbDDx3vwX3azAmKk4/wWHAPo1xm97H1p6HRFUwSZhOfHwb8RXmHH
Ypm97PZzeEWxGr7+hjHwEypK7nc7tFjHJnSdAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUSEIJ0ZJgCYSB5HjLsDKhnblzvB0wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1NFSUowWkpnQ1lTQjVI
akxzREtobmJsenZCMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAFW7EAqrZw1FDGa4
/pCiWVR+Nc7zUOAjeJqlB6JyFmjg5J84MiEpNWt7QKXsMnWyLGLlJwiXAEFq3B+c
u6W4nLhbk0VFiBDwKnua+uv8cVgt2NX2B62cQ4rO78CWEdEi3F5Eof6AGhu6VFQR
ROVZgBAdkNwsGpTPpW1b/5CSvZunqwCm7/p4tF1/aMTN1swCBHfDjBqLK4VbJnQv
Pcp0684JpRLlqFEFbcKb/x/YFcsgOcxidTbTVKeEMssx7rWzXWceBw1G9zD+s++I
fPHhbqBA6zYrfDcA/mGPnQvIf+tGqMSEmoLkKK+iy2ctHDDzcc3+bnSjBzasHgPL
QNhI9Ek=
-----END CERTIFICATE-----
Generated at Wed Jun 4 01:09:42 2025 by rpki-client