Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/kXQbkMPHGLiFv_UePXxkUltkAMk.roa
File: kXQbkMPHGLiFv_UePXxkUltkAMk.roa (raw, json)
Hash identifier: Sr+TapaoGTLSVzNwsL9cRXyX0aKG8p2qHqBc91VgUUI=
Subject key identifier: 91:74:1B:90:C3:C7:18:B8:85:BF:F5:1E:3D:7C:64:52:5B:64:00:C9
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 443D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/kXQbkMPHGLiFv_UePXxkUltkAMk.roa
Signing time: Fri 19 Apr 2024 13:53:23 +0000
ROA not before: Fri 19 Apr 2024 13:53:23 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17469 (0x443d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 19 13:53:23 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=91741B90C3C718B885BFF51E3D7C64525B6400C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f3:aa:2a:7c:49:73:da:12:ab:1b:2e:56:5d:
79:5f:d4:fe:f5:4e:80:21:f8:b6:43:5e:db:28:d9:
30:3d:9f:1c:6b:23:a4:7d:6e:e4:68:48:07:84:c5:
bf:e3:ef:51:e2:73:86:d3:df:a8:8a:94:52:d5:c3:
9f:fa:cf:9f:e4:08:92:49:b1:8c:ab:a3:db:f3:76:
93:fb:fc:12:8d:b0:69:ae:a1:22:3d:ce:09:12:6b:
3d:b1:23:f5:12:d0:f7:f4:74:b1:56:78:92:23:b3:
fb:0c:30:8f:af:65:1d:ba:fd:6f:3f:be:1f:80:39:
52:51:f1:ad:61:90:18:3b:53:4f:64:7e:8a:1f:dd:
9d:30:20:4f:d3:a9:97:ec:af:ca:b3:4b:df:11:a4:
5c:e5:cd:50:3d:31:87:2e:46:50:a1:8c:c8:c5:09:
05:02:fc:70:38:de:54:5c:56:b3:3d:7b:d0:96:e7:
dc:14:bc:e9:a5:1b:35:38:3e:86:5b:a7:9b:c7:60:
5f:7f:b5:a3:c0:34:3a:fc:9b:18:6a:e1:47:47:94:
af:63:ff:77:6e:bc:40:8f:19:4f:70:28:29:92:db:
da:45:75:00:7a:78:c3:b0:df:9c:cf:d7:20:98:74:
f3:0d:d2:11:93:b8:65:53:5d:f7:38:bd:1e:82:9a:
1e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:74:1B:90:C3:C7:18:B8:85:BF:F5:1E:3D:7C:64:52:5B:64:00:C9
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/kXQbkMPHGLiFv_UePXxkUltkAMk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
4d:b5:ae:8e:f1:73:5b:04:24:c8:d9:86:0a:d9:15:5d:4d:b6:
76:d4:d9:b2:3a:67:d8:3d:fd:18:17:49:23:df:6e:c1:59:7f:
22:98:c7:b3:ef:ac:8d:73:5a:f3:20:87:b5:fd:97:fc:1d:7c:
17:ef:15:f0:de:72:40:59:19:0c:a0:9a:76:1b:7f:ea:5b:cc:
85:6d:4e:33:bd:3c:32:40:dc:68:e7:05:6f:c8:b4:63:68:3e:
6f:a2:75:ad:1a:c6:4e:1c:38:2a:8e:c0:8f:ad:ff:5e:e0:6e:
a6:67:50:66:83:aa:66:fa:56:7c:0d:3b:4c:bb:ca:ae:8b:d6:
9b:81:54:56:a2:a8:40:28:b8:6a:de:5f:c5:63:d5:0c:db:36:
49:0e:d1:56:02:5f:67:1d:f0:b2:fe:2d:e1:6e:75:04:9c:21:
6d:83:37:fb:f9:bf:cb:1f:f4:9a:15:af:79:a4:98:34:80:28:
02:27:c8:c9:c7:07:f0:ef:11:db:fd:31:2f:e4:ca:6d:7b:26:
80:f7:17:e8:5e:fb:0a:02:39:2b:cc:b9:f7:70:88:c1:2f:cf:
17:20:d5:4f:fa:17:13:77:7a:7b:db:18:e4:f2:02:76:8a:8c:
1d:d4:01:eb:42:ae:63:b3:d3:8b:93:be:9a:8f:c5:78:71:d0:
39:0e:aa:22
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICRD0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTkx
MzUzMjNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDkxNzQxQjkwQzNDNzE4
Qjg4NUJGRjUxRTNEN0M2NDUyNUI2NDAwQzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDO86oqfElz2hKrGy5WXXlf1P71ToAh+LZDXtso2TA9nxxrI6R9
buRoSAeExb/j71Hic4bT36iKlFLVw5/6z5/kCJJJsYyro9vzdpP7/BKNsGmuoSI9
zgkSaz2xI/US0Pf0dLFWeJIjs/sMMI+vZR26/W8/vh+AOVJR8a1hkBg7U09kfoof
3Z0wIE/TqZfsr8qzS98RpFzlzVA9MYcuRlChjMjFCQUC/HA43lRcVrM9e9CW59wU
vOmlGzU4PoZbp5vHYF9/taPANDr8mxhq4UdHlK9j/3duvECPGU9wKCmS29pFdQB6
eMOw35zP1yCYdPMN0hGTuGVTXfc4vR6Cmh63AgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUkXQbkMPHGLiFv/UePXxkUltkAMkwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2tYUWJrTVBIR0xpRnZf
VWVQWHhrVWx0a0FNay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAE21ro7xc1sEJMjZ
hgrZFV1NtnbU2bI6Z9g9/RgXSSPfbsFZfyKYx7PvrI1zWvMgh7X9l/wdfBfvFfDe
ckBZGQygmnYbf+pbzIVtTjO9PDJA3GjnBW/ItGNoPm+ida0axk4cOCqOwI+t/17g
bqZnUGaDqmb6VnwNO0y7yq6L1puBVFaiqEAouGreX8Vj1QzbNkkO0VYCX2cd8LL+
LeFudQScIW2DN/v5v8sf9JoVr3mkmDSAKAInyMnHB/DvEdv9MS/kym17JoD3F+he
+woCOSvMufdwiMEvzxcg1U/6FxN3envbGOTyAnaKjB3UAetCrmOz04uTvpqPxXhx
0DkOqiI=
-----END CERTIFICATE-----
Generated at Fri Apr 19 19:03:59 2024 by rpki-client on console.sobornost.net