Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Y6Vt-CBJCd4K3SFygthQ7xh_dQU.roa
File: Y6Vt-CBJCd4K3SFygthQ7xh_dQU.roa (raw, json)
Hash identifier: UIcvx9JEVetyi2o23AGpNG1iq/hs9moOirb+sRQVExo=
Subject key identifier: 63:A5:6D:F8:20:49:09:DE:0A:DD:21:72:82:D8:50:EF:18:7F:75:05
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4AA2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Y6Vt-CBJCd4K3SFygthQ7xh_dQU.roa
Signing time: Sun 28 Apr 2024 02:23:25 +0000
ROA not before: Sun 28 Apr 2024 02:23:25 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19106 (0x4aa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 28 02:23:25 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=63A56DF8204909DE0ADD217282D850EF187F7505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9d:56:54:ac:38:bd:e5:e2:01:bb:e0:1f:ee:
f3:da:da:73:c0:f1:11:47:d9:74:6e:07:29:b0:95:
3c:2a:0d:90:1b:74:b6:36:09:6e:d5:56:07:88:77:
91:29:6e:7f:1b:33:25:1a:2a:6f:70:ff:e1:cf:26:
4a:e5:db:04:c8:75:cd:04:ba:a9:1c:69:4b:78:e9:
1f:a1:3a:0a:b4:7c:7c:cb:0f:da:72:36:59:80:73:
df:63:41:b9:82:fd:bf:3d:db:52:bc:07:d6:68:5c:
2f:24:89:eb:fb:24:86:5f:b4:1b:73:9d:a2:e8:49:
7f:16:9a:43:40:a1:19:c1:47:5f:91:32:9f:0a:73:
92:8a:65:80:ce:27:4c:05:d2:2c:0a:76:f0:8f:fe:
df:c3:4d:21:12:5c:cd:cb:bf:16:45:99:c7:89:04:
8b:9e:11:a3:1f:fa:92:48:41:b7:6a:3f:93:13:6e:
1d:80:62:4f:cf:43:60:8a:b4:dc:76:06:75:e4:0c:
f4:85:2a:66:97:08:45:75:17:43:0a:64:d4:8b:3b:
c0:18:7b:b8:db:c9:e8:50:ba:91:92:3f:c8:5f:41:
f2:e7:44:fc:27:c8:c1:43:49:ad:c4:5f:25:85:d7:
eb:0d:d6:6e:dd:a4:dd:4c:24:38:d2:02:52:79:71:
c5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A5:6D:F8:20:49:09:DE:0A:DD:21:72:82:D8:50:EF:18:7F:75:05
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Y6Vt-CBJCd4K3SFygthQ7xh_dQU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
20:f0:7b:3c:38:cb:78:33:1e:73:ca:87:d8:32:c9:71:03:0c:
27:11:2b:c0:8f:62:5e:55:81:bc:50:da:d3:64:82:b3:98:b7:
8b:95:80:80:96:2f:02:81:b1:00:5f:00:82:ce:e5:ce:31:65:
f0:44:ca:fe:10:d4:07:37:fe:0e:a4:fa:f5:79:02:0a:ff:e1:
d5:f2:71:b6:a1:c4:b4:24:e7:00:7c:c2:a3:8e:0e:ed:a1:6c:
c0:82:b3:29:2a:e5:ca:ee:69:9e:33:8f:35:2e:31:cd:a4:2c:
51:8d:63:5f:31:4c:50:a3:e7:6c:4a:81:b2:3e:e7:84:b0:e1:
ae:2f:4c:8c:0b:bb:3e:01:51:0a:6b:6a:c1:59:72:65:87:d7:
d6:ff:47:71:9e:10:a7:c4:b5:a7:c9:86:ef:c4:cf:d8:c9:72:
88:be:2f:5e:04:9a:64:52:7c:97:1a:1a:69:5c:db:e7:2d:c5:
14:3c:b2:68:4e:70:8a:36:f7:ea:6b:a0:46:b2:5c:09:c6:af:
fa:a1:cd:de:8d:28:0b:a7:27:f0:a5:1a:e1:f8:56:1c:73:c9:
d0:f1:07:7c:80:b6:71:39:fe:f3:ca:59:52:9a:ec:ed:c1:d8:
70:3d:d6:1b:74:b1:aa:48:8c:47:45:a1:23:98:51:60:99:45:
91:27:94:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:58:35 2025 by rpki-client