Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/STlWaBV3oTKg35kDUHjY_Kcd0Q8.roa
File: STlWaBV3oTKg35kDUHjY_Kcd0Q8.roa (raw, json)
Hash identifier: CdjgRI/m0XkixVTTk/r5D5AYcVdcdmfAqp44VuY/StY=
Subject key identifier: 49:39:56:68:15:77:A1:32:A0:DF:99:03:50:78:D8:FC:A7:1D:D1:0F
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5806
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/STlWaBV3oTKg35kDUHjY_Kcd0Q8.roa
Signing time: Wed 15 May 2024 22:54:36 +0000
ROA not before: Wed 15 May 2024 22:54:36 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22534 (0x5806)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 15 22:54:36 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=493956681577A132A0DF99035078D8FCA71DD10F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:98:65:f3:12:9a:e0:53:11:ec:48:8e:0d:b3:
5b:c7:0d:d4:52:38:c4:d5:1f:64:96:a4:79:9e:bd:
56:5e:14:78:a9:69:75:e6:1a:e4:05:b1:c2:37:d8:
af:d3:b4:0a:88:eb:78:70:8e:26:24:99:ff:b0:25:
2f:a4:79:c4:5b:a0:ff:12:20:e3:5e:3e:b7:83:74:
07:59:85:87:20:07:4e:f8:0c:d0:1e:e7:5f:08:51:
b4:0d:f2:77:10:4f:3e:d1:48:32:9b:a2:ee:6a:e4:
e5:19:24:d5:eb:c1:47:db:1c:4a:98:83:13:a5:7c:
59:b5:3a:8d:86:38:65:a5:89:60:e9:87:cf:cd:c4:
f3:76:af:4d:71:da:5e:85:8c:94:62:a9:45:dc:64:
28:03:7a:fa:0d:05:86:9b:23:e0:59:5f:ea:d6:dd:
e9:29:48:e5:8d:79:43:e7:bc:c9:d6:8e:2f:d7:1b:
de:3b:db:b6:3e:7a:bc:ee:aa:28:57:f6:81:96:9b:
d8:b4:a1:df:31:c4:a1:c7:46:47:37:66:ac:e9:f7:
96:e3:4d:39:4d:a6:95:75:10:b5:76:e2:04:f7:d3:
66:d0:43:51:fb:bd:51:5c:c2:3e:88:ea:3e:3a:1d:
93:5a:98:16:7a:94:6f:a2:4c:5c:13:e2:c8:3c:51:
29:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:39:56:68:15:77:A1:32:A0:DF:99:03:50:78:D8:FC:A7:1D:D1:0F
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/STlWaBV3oTKg35kDUHjY_Kcd0Q8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
16:cb:35:17:11:85:97:d1:84:45:ef:74:1a:62:01:f4:e4:8b:
fc:d0:83:f1:e1:97:db:26:e5:97:8d:27:ac:27:d7:86:34:55:
a8:6e:76:2f:ef:b5:b9:cd:a7:47:df:fa:bc:f5:99:8b:00:42:
49:ec:67:32:3b:9b:0b:d3:73:1a:cc:e9:6d:39:7d:e3:f7:2b:
43:82:0e:26:30:75:96:49:53:21:6c:19:e5:1a:f1:a3:dd:48:
ab:aa:05:fc:95:b4:fc:60:64:83:da:22:51:fb:fb:cd:30:6b:
30:af:dd:c8:93:76:cc:65:04:da:79:b5:4f:29:5d:d0:da:34:
61:8d:2f:a2:b5:43:a4:26:ef:46:be:5c:f4:52:9d:11:34:e1:
da:09:3f:68:ba:3b:16:24:54:94:fc:2f:5a:5f:a0:24:2c:29:
4b:4a:28:12:12:0a:85:8d:ac:c9:c9:42:aa:24:7c:34:60:e8:
72:f5:d7:49:83:d6:21:71:47:26:6e:66:82:24:57:b1:19:d3:
ec:ee:31:b5:6d:4c:4c:e3:a6:32:da:b8:fc:f0:22:d8:fa:87:
1c:e3:40:8c:17:55:8c:3b:20:69:9c:87:ae:a0:69:b1:2e:0c:
03:d1:f2:75:bd:ac:00:44:42:99:96:67:95:19:b5:5c:58:88:
fa:7c:61:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:00:50 2025 by rpki-client