Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/qwOpD9lI5z5gQnSTq9xs_DbZqXs.roa
File: qwOpD9lI5z5gQnSTq9xs_DbZqXs.roa (raw, json)
Hash identifier: ez+PrMIhJWpnT9ufbAF+8TeuhIdTDaZTm7pvGmnIJR4=
Subject key identifier: AB:03:A9:0F:D9:48:E7:3E:60:42:74:93:AB:DC:6C:FC:36:D9:A9:7B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 441D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qwOpD9lI5z5gQnSTq9xs_DbZqXs.roa
Signing time: Fri 19 Apr 2024 09:53:01 +0000
ROA not before: Fri 19 Apr 2024 09:53:01 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17437 (0x441d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 19 09:53:01 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=AB03A90FD948E73E60427493ABDC6CFC36D9A97B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e1:c3:91:14:51:36:88:ce:da:fa:68:6f:68:
cc:e8:d0:bc:bb:a4:9d:ff:c3:fb:95:06:84:c7:1a:
43:77:0e:d8:58:fc:4b:1c:8d:93:1a:86:27:d7:65:
d7:f5:d6:10:64:d1:5f:d0:4c:4c:9a:55:40:e6:da:
ec:52:0a:0e:12:a1:ef:ae:6d:c0:a6:f2:d9:f1:6c:
0f:f9:51:f0:d1:01:29:f2:f4:59:84:88:cf:3f:1d:
e7:2f:95:9d:38:47:6d:57:d8:93:05:c6:80:a2:99:
13:40:3f:c0:fa:39:4c:be:a7:c1:26:06:55:b4:a3:
8e:dc:fe:5a:eb:96:66:bf:a9:f7:4a:27:1b:b8:a3:
d9:27:f8:52:1b:03:bb:89:2b:cb:7d:7f:c8:c5:ca:
be:db:61:7f:b1:69:a6:53:b0:62:ef:0d:5c:ee:c1:
b7:55:d2:0c:6d:ce:d6:7d:3a:72:de:de:09:8c:d7:
d4:6d:ea:60:7d:f6:ec:0d:97:48:58:48:7b:71:cc:
43:45:dc:d3:72:7c:df:39:35:b7:ee:89:ca:06:3e:
1f:79:ec:33:1d:4a:61:7d:ff:01:36:2c:e8:11:68:
99:60:76:6b:f7:64:76:6b:04:45:ff:47:bb:77:66:
36:b4:b4:6b:aa:b0:dc:67:25:38:ac:58:af:4a:30:
6b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:03:A9:0F:D9:48:E7:3E:60:42:74:93:AB:DC:6C:FC:36:D9:A9:7B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qwOpD9lI5z5gQnSTq9xs_DbZqXs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
9b:1f:43:20:93:5a:4b:4a:f8:bd:4b:f1:29:52:42:c9:6f:cd:
97:db:da:f9:28:b7:e8:b1:97:2e:0c:2f:8c:db:b1:51:86:99:
72:05:0d:43:17:aa:e9:a7:fc:eb:04:f9:33:20:89:ae:1f:9f:
9a:ef:d7:f3:c9:9a:db:92:54:6f:08:cb:e1:b7:38:5f:53:0b:
ab:45:4b:2b:31:c1:54:c8:c4:3d:de:7e:86:b6:a7:97:74:17:
01:da:37:b9:7e:ff:5e:ef:b7:ee:54:b4:88:5e:63:4c:9c:e2:
1a:51:72:e9:ff:fd:ce:92:5b:f9:32:2b:dc:1b:78:74:95:b0:
21:6f:75:84:0b:0f:04:e7:e0:34:b5:51:65:d5:d6:52:ef:07:
4b:0f:2a:52:5e:76:ea:be:44:c4:8d:e6:4d:5a:35:bf:c8:84:
df:6a:a7:e3:10:2f:4a:66:37:5e:b1:70:89:11:eb:2a:4a:8b:
ef:49:d7:df:1f:70:ba:5c:11:6e:17:96:13:27:0d:02:1c:12:
65:77:fe:68:0a:6e:84:ea:fc:c4:9d:73:85:be:9f:54:10:ce:
18:1f:2f:7b:05:67:df:f7:8e:b1:15:3e:5b:73:f8:ed:6b:eb:
c2:ea:d4:6e:f2:cf:71:df:f8:86:38:8e:a1:6b:ec:0c:d9:91:
2e:27:09:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:02:21 2025 by rpki-client