Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/mr-81Lmi1HvJ5v_xIczjNxHIVMw.roa
File: mr-81Lmi1HvJ5v_xIczjNxHIVMw.roa (raw, json)
Hash identifier: avt7YJyGQxuOZxpwauutHJ2x/Is1ilAL8hOwt5mHcBE=
Subject key identifier: 9A:BF:BC:D4:B9:A2:D4:7B:C9:E6:FF:F1:21:CC:E3:37:11:C8:54:CC
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4CC9
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/mr-81Lmi1HvJ5v_xIczjNxHIVMw.roa
Signing time: Tue 30 Apr 2024 23:23:53 +0000
ROA not before: Tue 30 Apr 2024 23:23:53 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19657 (0x4cc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 30 23:23:53 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9ABFBCD4B9A2D47BC9E6FFF121CCE33711C854CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e3:58:24:ef:f2:b0:a0:43:73:1b:b1:5b:e1:
40:ef:1b:4b:23:89:5f:fe:9c:cb:f1:d5:a5:c3:cb:
d2:d2:95:24:65:b0:58:aa:5d:99:6d:4e:84:d4:71:
6e:0c:fb:69:af:cd:1d:2b:63:7e:97:f8:83:e9:43:
a7:3d:47:f7:94:7a:16:09:24:d5:45:e1:df:b5:7b:
25:97:05:87:09:6d:aa:22:e8:e3:7b:e5:6b:cc:c9:
89:dd:57:7a:59:ce:50:88:c2:09:c5:86:be:10:31:
0c:03:83:9d:c2:f9:8e:b1:16:f8:7c:54:cb:a6:dd:
14:6e:3d:11:d4:e6:af:1d:11:2f:dd:fe:64:3c:cb:
d2:8a:e1:27:ef:78:dc:6f:84:3a:c4:df:bf:eb:4e:
b9:5b:30:5e:3e:8a:f1:7f:36:87:ff:ef:af:de:f7:
23:0f:18:56:12:af:6c:64:2e:45:b7:d7:37:80:bc:
1f:29:6c:41:10:c4:86:9f:be:ea:01:22:c0:70:11:
2d:5f:64:1e:38:cc:ab:6f:fe:e9:75:35:3a:1c:5b:
00:79:70:e1:93:46:04:55:bf:b8:de:7c:df:e8:f0:
e2:bb:24:81:9a:03:72:80:1d:55:21:0a:3d:f6:fd:
eb:35:40:80:eb:5a:f8:2f:1c:00:af:43:33:6e:d2:
24:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BF:BC:D4:B9:A2:D4:7B:C9:E6:FF:F1:21:CC:E3:37:11:C8:54:CC
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/mr-81Lmi1HvJ5v_xIczjNxHIVMw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
03:49:eb:3d:9e:99:42:e9:30:9b:74:68:31:ff:a7:a9:4a:13:
b3:80:ef:0a:5b:bf:1c:23:90:c8:9e:c8:93:18:34:89:53:c8:
a6:7c:b3:83:08:c7:6e:63:12:07:7c:02:d0:ee:e6:87:60:22:
83:5c:d1:eb:7c:b8:01:88:91:81:cb:7c:40:2b:89:c4:aa:eb:
bc:09:ea:26:a3:00:4b:87:27:7b:84:d6:5d:33:62:87:9e:f3:
6c:14:01:1e:62:ba:32:c2:ce:ba:99:2f:cc:11:4c:c4:0c:6c:
19:fa:f0:11:a8:88:c2:b3:0e:45:cd:7e:ea:46:3a:c9:5d:eb:
0f:63:ac:e8:15:cc:8f:11:7b:2f:de:e8:04:b9:da:41:e0:2d:
b1:b3:85:52:49:cb:9b:95:a3:65:e2:17:31:91:7c:62:67:c2:
dc:82:26:1f:b5:0c:9e:3c:5f:05:28:e6:3a:00:57:14:4f:0c:
19:70:64:73:d7:db:78:94:55:f3:a6:ed:9d:bf:ad:e5:04:67:
00:d5:65:46:78:7f:75:2b:a9:22:fa:aa:70:5a:3c:70:b0:d0:
f1:9d:5d:f5:ab:66:0c:fc:83:cd:33:0e:08:51:48:60:22:bf:
e5:a6:d8:58:68:f3:0b:07:7b:44:82:2e:af:52:c3:bd:4c:f6:
46:e0:b5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 14:08:10 2024 by rpki-client on console.sobornost.net