Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/CQU3bB-L98_cMTQPg--v7wlFZDY.roa
File: CQU3bB-L98_cMTQPg--v7wlFZDY.roa (raw, json)
Hash identifier: LAHpkRXFE+kNTPmW1PtA1NjkmJ4SWpdTuhn7EWUErvc=
Subject key identifier: 09:05:37:6C:1F:8B:F7:CF:DC:31:34:0F:83:EF:AF:EF:09:45:64:36
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3635
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/CQU3bB-L98_cMTQPg--v7wlFZDY.roa
Signing time: Sun 31 Mar 2024 20:52:11 +0000
ROA not before: Sun 31 Mar 2024 20:52:11 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13877 (0x3635)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 31 20:52:11 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0905376C1F8BF7CFDC31340F83EFAFEF09456436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d9:2e:3e:01:92:7b:0f:33:af:11:49:82:2d:
cb:73:1b:25:90:1a:19:3f:62:52:e9:92:bc:7d:a8:
0c:8e:c8:76:21:d9:08:4b:d3:0a:36:8b:6e:ba:53:
6a:a1:4d:3e:1a:c4:e1:11:ac:eb:f6:6f:8f:a3:9f:
79:fc:92:f4:a5:c8:88:4f:17:7b:b5:46:5b:40:b2:
f7:39:49:c7:77:fa:a1:49:62:60:7d:9e:1f:08:0d:
78:ea:74:f9:31:68:af:de:4e:1e:d6:da:53:ec:d5:
7d:c3:de:d2:00:aa:f7:4f:04:ca:d3:53:63:65:82:
7b:d8:14:db:93:34:5a:cc:47:9d:c9:8d:66:99:d1:
90:55:17:31:79:23:f8:c3:c6:6e:2f:bf:28:e6:db:
16:fe:cc:5d:2e:1b:8d:d4:3c:d0:99:93:4d:07:74:
d3:0a:41:e3:98:a7:1c:bf:cd:3a:9a:2f:09:3f:f9:
80:18:40:05:48:b7:3f:23:ed:dd:11:09:fb:78:ce:
f0:fb:2f:33:af:59:3a:bf:44:88:6b:de:4c:65:d1:
83:ad:11:08:66:68:0c:81:ca:06:ad:4e:ae:df:26:
d9:4e:47:5a:fd:90:7a:66:ab:8e:7b:58:2c:5e:6d:
a8:d2:57:cd:40:fe:ae:4b:40:b9:8e:3a:bb:cf:63:
e0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:05:37:6C:1F:8B:F7:CF:DC:31:34:0F:83:EF:AF:EF:09:45:64:36
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/CQU3bB-L98_cMTQPg--v7wlFZDY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
5c:92:64:14:95:26:21:61:3c:b9:6b:99:cf:dd:e3:d8:e2:fa:
37:71:c1:08:78:91:46:fa:5c:01:23:24:c1:8a:f3:9d:0b:73:
fe:de:41:c6:30:9b:d5:d2:89:46:ea:0e:1e:ad:52:e4:a9:84:
69:82:39:90:59:e3:be:a2:ab:6d:1a:fb:32:9d:39:4c:01:e7:
14:4a:41:84:e7:70:4a:88:bf:fa:08:69:ee:23:a6:81:e6:9d:
e1:cf:2a:f0:16:c3:97:1b:32:4b:e0:0a:22:5f:5c:5e:1d:ff:
62:7d:4a:fa:21:7f:fd:92:57:1f:48:58:15:b8:81:b9:45:95:
fb:10:76:74:8a:8b:4b:5b:31:77:3d:96:34:78:89:d6:54:eb:
2b:ab:32:81:5e:8d:d0:58:79:8b:ad:5d:9f:17:09:c4:57:0b:
46:0c:31:22:47:ec:d9:3f:9b:4b:cd:d4:1a:87:ab:99:8c:bd:
a8:f6:9f:00:07:fc:1a:e7:18:c8:94:d7:12:15:99:aa:d6:c3:
43:78:f2:07:b7:57:38:f2:1c:f3:90:e7:4c:ad:73:1b:87:0c:
cc:fa:22:bc:31:c2:6b:20:52:7e:48:dc:2f:3c:c6:c0:28:a0:
7f:65:cb:c8:af:11:fa:72:7a:93:1f:4e:4f:65:af:20:4b:54:
7f:66:5d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 1 03:23:40 2024 by rpki-client on console.sobornost.net