Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/pNxaCTyMg5mM96Ikkh8X4KPml68.roa
File: pNxaCTyMg5mM96Ikkh8X4KPml68.roa (raw, json)
Hash identifier: 1bJkMtnLhW7PSqLNoASiRc8+lidnVMD5jtfnN62ledY=
Subject key identifier: A4:DC:5A:09:3C:8C:83:99:8C:F7:A2:24:92:1F:17:E0:A3:E6:97:AF
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 44A6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/pNxaCTyMg5mM96Ikkh8X4KPml68.roa
Signing time: Sat 20 Apr 2024 02:53:11 +0000
ROA not before: Sat 20 Apr 2024 02:53:11 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17574 (0x44a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 20 02:53:11 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A4DC5A093C8C83998CF7A224921F17E0A3E697AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:51:fb:ab:e6:6d:30:a8:7d:af:87:10:69:66:
17:ca:31:db:0a:62:6a:f5:0d:cf:7c:19:79:ef:a1:
1a:ad:06:71:62:28:ca:7e:23:ac:0b:84:41:75:94:
9a:cc:6b:a4:ca:24:ed:45:1c:b2:91:a7:8c:59:03:
22:f8:33:82:80:79:44:69:21:8f:b6:05:66:2f:fe:
a6:e4:ee:5a:f3:f3:0f:b3:da:59:36:8d:60:1e:e3:
d3:c8:02:fc:98:60:7d:4e:88:7b:a0:5f:f3:3d:19:
c6:9c:9b:55:b6:15:cd:40:d2:f5:36:26:f8:e9:ef:
c8:09:fb:f6:e9:77:d0:34:16:ab:af:a1:6f:40:5c:
14:1a:4e:85:ae:df:7d:0e:a3:16:95:2b:dd:5c:84:
de:5e:b4:90:e3:65:87:b2:76:f7:15:0e:63:4d:a9:
c8:be:a8:3f:14:0a:81:c0:df:ef:6a:6a:ad:ba:3e:
dc:eb:63:c2:16:df:84:ce:b6:39:bd:de:8a:89:c1:
a3:a2:ee:e1:81:e2:4c:2d:40:28:de:9a:3e:37:00:
c0:14:1b:c6:45:6b:fe:92:74:24:b7:80:94:a0:d8:
75:bd:63:95:39:de:c8:a1:09:b4:17:78:79:c2:cf:
8f:37:de:c4:6e:23:01:ec:b0:e3:0c:43:06:ad:ab:
81:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DC:5A:09:3C:8C:83:99:8C:F7:A2:24:92:1F:17:E0:A3:E6:97:AF
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/pNxaCTyMg5mM96Ikkh8X4KPml68.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3d:d9:f4:1a:ef:15:c2:2c:59:8b:56:9e:d3:68:86:82:07:18:
e4:8d:31:e5:a1:3c:d1:2d:eb:d2:08:99:f4:ce:b1:c5:30:c1:
4c:68:aa:10:fc:38:50:34:4a:00:10:45:37:9d:cc:ec:12:87:
f7:39:ed:b2:3b:32:93:85:b6:55:89:0e:04:a7:9a:89:35:80:
3d:6f:bf:98:f8:96:fd:65:76:68:3d:2a:4b:31:88:f6:31:80:
1f:6c:69:32:a2:47:7c:2c:19:d2:a7:d7:3b:60:bf:1c:9d:d0:
7f:0e:f2:52:ed:5f:57:3a:4d:ab:19:cf:c7:3b:86:11:3a:19:
cd:f1:29:5e:eb:ff:8d:2a:75:6c:2e:8a:c0:3c:cc:ed:ec:5c:
df:28:01:4e:a8:b3:d4:44:57:e5:1a:3c:3e:3e:9a:1f:81:7d:
94:c2:8c:12:1c:0c:c7:12:f5:7b:d0:2b:83:84:60:7b:3a:fc:
1f:e8:3f:a3:df:71:95:44:4b:ad:b1:d2:2a:c7:9f:17:20:f1:
65:1d:10:66:30:83:58:74:96:29:68:04:a2:b2:2b:cf:75:11:
0c:95:04:e0:d5:42:fb:87:66:8b:33:20:85:4b:79:67:20:09:
04:d3:55:fa:9d:a9:ae:09:ba:e0:18:10:27:89:67:00:74:1a:
54:4d:fe:26
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICRKYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MjAw
MjUzMTFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEE0REM1QTA5M0M4Qzgz
OTk4Q0Y3QTIyNDkyMUYxN0UwQTNFNjk3QUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCrUfur5m0wqH2vhxBpZhfKMdsKYmr1Dc98GXnvoRqtBnFiKMp+
I6wLhEF1lJrMa6TKJO1FHLKRp4xZAyL4M4KAeURpIY+2BWYv/qbk7lrz8w+z2lk2
jWAe49PIAvyYYH1OiHugX/M9Gcacm1W2Fc1A0vU2Jvjp78gJ+/bpd9A0FquvoW9A
XBQaToWu330OoxaVK91chN5etJDjZYeydvcVDmNNqci+qD8UCoHA3+9qaq26Ptzr
Y8IW34TOtjm93oqJwaOi7uGB4kwtQCjemj43AMAUG8ZFa/6SdCS3gJSg2HW9Y5U5
3sihCbQXeHnCz4833sRuIwHssOMMQwatq4EdAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUpNxaCTyMg5mM96Ikkh8X4KPml68wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3BOeGFDVHlNZzVtTTk2
SWtraDhYNEtQbWw2OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAPdn0Gu8VwixZi1ae02iGggcY5I0x5aE8
0S3r0giZ9M6xxTDBTGiqEPw4UDRKABBFN53M7BKH9zntsjsyk4W2VYkOBKeaiTWA
PW+/mPiW/WV2aD0qSzGI9jGAH2xpMqJHfCwZ0qfXO2C/HJ3Qfw7yUu1fVzpNqxnP
xzuGEToZzfEpXuv/jSp1bC6KwDzM7exc3ygBTqiz1ERX5Ro8Pj6aH4F9lMKMEhwM
xxL1e9Arg4Rgezr8H+g/o99xlURLrbHSKsefFyDxZR0QZjCDWHSWKWgEorIrz3UR
DJUE4NVC+4dmizMghUt5ZyAJBNNV+p2prgm64BgQJ4lnAHQaVE3+Jg==
-----END CERTIFICATE-----
Generated at Sat Apr 20 07:46:16 2024 by rpki-client on console.sobornost.net