Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/wyN0HxmZtxGZbply883OVjxuEIE.roa
File: wyN0HxmZtxGZbply883OVjxuEIE.roa (raw, json)
Hash identifier: PYa6XUTINxDjgjvzmiUlVZp0MVnJrqtib+0k7/kggSU=
Subject key identifier: C3:23:74:1F:19:99:B7:11:99:6E:99:72:F3:CD:CE:56:3C:6E:10:81
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5515
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wyN0HxmZtxGZbply883OVjxuEIE.roa
Signing time: Sun 12 May 2024 00:54:02 +0000
ROA not before: Sun 12 May 2024 00:54:02 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21781 (0x5515)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 12 00:54:02 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C323741F1999B711996E9972F3CDCE563C6E1081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b6:79:04:a9:41:6e:7b:79:57:df:ba:04:91:
6c:ec:f9:f0:2e:cd:29:0b:88:e0:3d:fb:de:8f:04:
1f:c2:4a:16:a2:cf:e5:4e:c6:df:a8:df:26:9f:12:
fb:f3:6c:09:47:d3:b0:26:0a:e5:d9:26:32:ad:18:
17:77:20:f0:51:9e:22:cf:52:73:a8:ad:8b:c2:a3:
bc:8b:c3:ec:94:fe:fa:17:09:fe:80:e3:78:41:10:
4f:07:26:ca:37:67:08:10:fe:a1:af:d6:d0:52:a4:
53:9b:b8:1e:43:b0:99:99:ae:30:a3:c9:2e:30:7a:
35:f0:e5:00:b4:bd:40:45:e4:8f:46:18:68:27:dc:
4b:15:44:ca:f9:8b:dc:f6:98:e7:b8:ad:d2:28:79:
67:d9:ed:85:77:47:67:31:c4:09:ab:96:27:f3:af:
95:00:f1:ac:35:c5:fd:4f:6b:e3:95:5c:34:78:f5:
6c:a7:8a:4f:1f:a2:9d:3b:f2:bf:ac:14:fa:e2:06:
f8:e8:87:60:9b:2c:09:ec:0e:fc:e3:eb:fa:dd:c4:
66:22:2f:04:c4:8c:58:55:af:c4:fd:da:41:8c:22:
9e:e2:0a:14:32:8e:fe:2c:dd:a3:b4:4e:c2:8d:4a:
89:c4:91:79:6a:eb:fb:ba:d5:a6:be:38:7d:81:52:
a6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:23:74:1F:19:99:B7:11:99:6E:99:72:F3:CD:CE:56:3C:6E:10:81
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/wyN0HxmZtxGZbply883OVjxuEIE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
52:67:a7:94:ef:fa:66:27:b1:46:06:5d:b9:08:4b:7f:db:3b:
45:a9:3d:06:b0:07:6a:c9:78:ec:fa:13:1d:c2:0c:78:57:d5:
55:60:76:44:72:9d:44:f7:c9:4e:80:54:8f:cf:9e:43:48:17:
72:f5:f5:8d:6b:a2:05:37:1f:da:48:38:f1:58:9b:28:ec:12:
37:ae:76:d2:d6:f2:92:57:1f:cd:15:e5:c4:ac:ac:c5:2a:2d:
96:e0:64:66:89:f0:c3:b4:fc:4b:ed:13:e5:5d:70:92:10:d9:
bf:5f:53:2e:fb:97:bd:5d:33:64:b4:5f:a3:db:37:fe:9e:a5:
ed:47:1b:1c:cd:3c:3c:6d:24:cd:6e:26:a7:c1:2b:13:64:6a:
51:2f:18:7f:72:c0:93:4a:f3:9f:44:4e:6d:62:62:f4:03:31:
d7:c3:50:d2:a1:72:2e:08:c8:ab:d1:c5:c0:30:d8:81:58:ba:
99:5a:c2:bd:75:5e:6a:b0:56:e5:e6:e3:c8:70:aa:e8:c5:df:
45:ed:aa:28:82:32:44:eb:af:57:f6:c2:39:4e:d1:91:f6:28:
49:bf:2d:df:dc:0b:e8:8e:25:c6:e5:54:a3:2c:0d:f2:06:56:
e0:8c:41:00:97:12:c8:cd:e4:64:ac:93:c7:6a:00:12:a2:53:
c0:d9:34:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 05:26:37 2024 by rpki-client on console.sobornost.net