Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/NA_zeevGWKhc_NJiI9vDNoqTgjQ.roa
File: NA_zeevGWKhc_NJiI9vDNoqTgjQ.roa (raw, json)
Hash identifier: sGLjEYs9rL4vEASxQSx7bF1MzXgWiol/FUs8/1XBNLQ=
Subject key identifier: 34:0F:F3:79:EB:C6:58:A8:5C:FC:D2:62:23:DB:C3:36:8A:93:82:34
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4A59
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/NA_zeevGWKhc_NJiI9vDNoqTgjQ.roa
Signing time: Sat 27 Apr 2024 17:23:26 +0000
ROA not before: Sat 27 Apr 2024 17:23:26 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19033 (0x4a59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 27 17:23:26 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=340FF379EBC658A85CFCD26223DBC3368A938234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3b:d5:62:5b:c8:86:1b:a7:36:ae:09:5f:d6:
92:ee:48:7a:b8:03:d4:8a:07:92:11:7e:c0:8c:e1:
78:46:b6:ff:73:2e:1d:35:7c:66:6f:e1:ad:97:ac:
2c:07:d0:06:c7:e8:6a:7e:e4:f9:94:9b:d0:81:a5:
f7:e3:71:75:19:f2:f3:df:e9:62:0c:2b:f3:19:8d:
af:4d:f2:5b:09:e3:e9:64:ec:d3:8e:e4:d7:7e:19:
ee:67:e2:34:88:c5:3e:3d:dc:03:6f:1c:58:98:37:
19:b4:5d:61:4b:a1:71:11:45:f9:71:b8:6a:c3:42:
fd:f1:66:55:49:4d:20:fd:d6:70:02:b8:e5:20:c2:
16:48:50:db:65:12:43:ac:9a:c2:4c:ac:f2:03:58:
98:ac:71:bb:f1:ce:45:9d:e9:12:ac:44:64:54:af:
15:d8:19:81:bb:65:6b:25:32:05:fd:a9:5c:d7:81:
94:dc:67:a2:61:ea:78:6c:1a:d7:19:61:1a:5b:90:
db:cb:e9:6e:47:46:14:42:29:f0:27:ff:81:4d:94:
63:9c:ec:6b:13:28:bc:6b:01:90:7b:2e:c3:f4:0c:
2c:eb:ca:0c:8b:64:45:0a:b3:5b:e5:69:10:fc:01:
9c:8e:de:d4:40:fa:bd:a3:b7:76:5b:f4:70:0b:ac:
e7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0F:F3:79:EB:C6:58:A8:5C:FC:D2:62:23:DB:C3:36:8A:93:82:34
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/NA_zeevGWKhc_NJiI9vDNoqTgjQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
5a:b4:53:87:31:a7:6c:2d:ac:2b:cd:86:f0:de:b8:ab:dd:94:
da:ae:2d:dc:5e:7f:3d:39:cd:71:95:47:93:86:35:12:53:5c:
ae:89:03:11:8e:fa:f0:54:fa:39:5c:5c:91:7d:5f:09:a6:bd:
98:50:82:28:74:c6:cd:e8:aa:d6:f7:7e:fb:48:96:2e:d4:99:
0c:0b:20:d5:8e:51:9f:58:78:00:da:29:09:46:90:94:4d:8b:
f9:17:5c:47:4b:00:47:00:6d:fa:d0:ea:f0:bc:72:85:ff:c9:
b1:a6:5c:a2:77:1f:52:dd:1e:82:20:f8:e7:3c:a8:da:cd:9e:
33:53:7a:1d:eb:bb:83:12:9e:2a:25:62:39:31:92:56:a9:a6:
11:c8:12:c5:9e:e1:05:76:29:5c:0a:63:1c:15:03:5f:1c:4b:
ab:50:d0:de:4e:92:0e:39:ff:d1:67:ab:76:24:7c:f4:9c:ec:
53:71:9e:7d:80:88:57:32:07:ae:3b:63:6b:56:4d:5b:a3:a7:
5c:75:c6:8e:f9:68:91:fc:b2:23:0a:b4:12:86:3a:2d:61:7b:
81:37:e0:3c:d3:bd:02:90:81:e1:46:ff:f6:f4:03:40:1e:29:
a8:87:fd:b0:21:7c:15:34:f3:32:4e:e6:f7:f1:77:1f:04:41:
2f:b5:e2:56
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICSlkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0Mjcx
NzIzMjZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDM0MEZGMzc5RUJDNjU4
QTg1Q0ZDRDI2MjIzREJDMzM2OEE5MzgyMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCVO9ViW8iGG6c2rglf1pLuSHq4A9SKB5IRfsCM4XhGtv9zLh01
fGZv4a2XrCwH0AbH6Gp+5PmUm9CBpffjcXUZ8vPf6WIMK/MZja9N8lsJ4+lk7NOO
5Nd+Ge5n4jSIxT493ANvHFiYNxm0XWFLoXERRflxuGrDQv3xZlVJTSD91nACuOUg
whZIUNtlEkOsmsJMrPIDWJiscbvxzkWd6RKsRGRUrxXYGYG7ZWslMgX9qVzXgZTc
Z6Jh6nhsGtcZYRpbkNvL6W5HRhRCKfAn/4FNlGOc7GsTKLxrAZB7LsP0DCzrygyL
ZEUKs1vlaRD8AZyO3tRA+r2jt3Zb9HALrOcDAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUNA/zeevGWKhc/NJiI9vDNoqTgjQwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L05BX3plZXZHV0toY19O
SmlJOXZETm9xVGdqUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAFq0U4cxp2wtrCvN
hvDeuKvdlNquLdxefz05zXGVR5OGNRJTXK6JAxGO+vBU+jlcXJF9XwmmvZhQgih0
xs3oqtb3fvtIli7UmQwLINWOUZ9YeADaKQlGkJRNi/kXXEdLAEcAbfrQ6vC8coX/
ybGmXKJ3H1LdHoIg+Oc8qNrNnjNTeh3ru4MSniolYjkxklapphHIEsWe4QV2KVwK
YxwVA18cS6tQ0N5Okg45/9Fnq3YkfPSc7FNxnn2AiFcyB647Y2tWTVujp1x1xo75
aJH8siMKtBKGOi1he4E34DzTvQKQgeFG//b0A0AeKaiH/bAhfBU08zJO5vfxdx8E
QS+14lY=
-----END CERTIFICATE-----
Generated at Sat Apr 27 23:07:35 2024 by rpki-client on console.sobornost.net