Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/DMFvZKOQDPJNOxV7JwDfc0Mq6bg.roa
File: DMFvZKOQDPJNOxV7JwDfc0Mq6bg.roa (raw, json)
Hash identifier: ioDJ0KooAETtBOtFQOAHuxRugnsKOXClhXmCKNBC5aQ=
Subject key identifier: 0C:C1:6F:64:A3:90:0C:F2:4D:3B:15:7B:27:00:DF:73:43:2A:E9:B8
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5385
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/DMFvZKOQDPJNOxV7JwDfc0Mq6bg.roa
Signing time: Thu 09 May 2024 22:53:59 +0000
ROA not before: Thu 09 May 2024 22:53:59 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21381 (0x5385)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 9 22:53:59 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0CC16F64A3900CF24D3B157B2700DF73432AE9B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:10:8e:0d:55:af:bd:1f:1f:ca:57:38:aa:47:
c8:79:87:b3:77:3e:da:e9:e6:99:29:e7:ad:ec:46:
64:0a:52:f3:57:bd:87:f6:ed:e9:d7:0e:a1:40:42:
f4:f0:5a:95:d1:94:29:22:bf:9a:40:48:a7:d3:be:
d7:93:70:ce:ee:08:28:cb:f2:ba:8f:0f:85:57:a2:
3e:7e:06:68:20:54:9e:f6:53:24:40:8a:2b:4f:e9:
56:b8:99:ef:5d:aa:5b:8c:64:ba:ba:44:c6:84:89:
85:9f:1b:cb:05:d0:d2:e2:26:84:33:5f:36:bb:d5:
f8:2d:2e:98:f7:b5:8e:9f:37:61:32:50:a2:62:36:
fa:b7:02:ff:90:a1:24:5a:aa:fc:de:5e:6b:ed:7a:
01:86:58:c9:64:f3:a7:38:81:df:0c:ed:66:37:28:
3d:42:d2:86:cd:51:79:17:96:85:da:0f:9c:ca:95:
5e:d6:8d:0a:85:92:ec:1f:79:34:6f:4c:62:86:0b:
cf:1e:6a:f3:01:95:ca:4d:77:e8:f4:49:61:23:62:
b5:20:f4:1b:c3:2e:3c:f1:a2:75:60:14:3a:d1:d5:
0e:ec:a9:4f:cc:bd:48:4f:46:72:c3:28:2b:e0:6f:
1a:db:ef:04:f0:04:0e:71:ab:30:3a:5e:f5:b5:a4:
f8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C1:6F:64:A3:90:0C:F2:4D:3B:15:7B:27:00:DF:73:43:2A:E9:B8
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/DMFvZKOQDPJNOxV7JwDfc0Mq6bg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
41:38:10:16:e8:8c:5e:51:b7:20:35:51:86:37:af:5e:a8:1d:
dd:2f:5b:df:4a:02:9b:d3:c1:14:08:9d:b0:b0:0c:1f:88:c3:
a6:48:63:eb:85:6d:6b:3a:da:b4:c1:25:f2:c9:11:9e:26:73:
54:80:79:2e:2e:97:84:cd:b4:2b:5a:e5:55:dc:c4:68:66:40:
7f:d5:4f:c4:be:f9:4d:75:54:a9:1a:f4:8f:49:7e:c0:51:eb:
63:3b:2e:22:3a:b7:06:cf:73:e0:27:06:9e:4f:36:fa:48:4c:
3a:b0:bb:62:23:7a:39:63:86:7b:88:ed:33:27:00:59:5d:0a:
a6:ff:e0:04:66:4b:ed:94:5d:b6:62:24:9e:df:ed:be:b5:54:
4b:df:0c:8f:a9:09:27:ff:62:46:ae:d0:17:80:a0:6f:ca:12:
a4:23:a4:4c:6b:dc:52:57:71:a4:da:5a:0f:d6:9d:66:d4:a8:
f2:85:b4:0f:50:ff:91:5e:09:d3:2f:df:4b:91:d2:1f:8b:96:
39:bd:67:d1:51:48:2a:50:1d:eb:94:00:5e:f9:c5:e0:34:9b:
75:aa:b8:43:18:77:2c:6b:4b:ae:04:a2:73:bc:be:a1:1f:23:
97:09:40:f9:f9:97:0d:30:dd:d5:ea:31:7e:83:06:77:84:9e:
56:3c:a3:63
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICU4UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDky
MjUzNTlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDBDQzE2RjY0QTM5MDBD
RjI0RDNCMTU3QjI3MDBERjczNDMyQUU5QjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCeEI4NVa+9Hx/KVziqR8h5h7N3Ptrp5pkp563sRmQKUvNXvYf2
7enXDqFAQvTwWpXRlCkiv5pASKfTvteTcM7uCCjL8rqPD4VXoj5+BmggVJ72UyRA
iitP6Va4me9dqluMZLq6RMaEiYWfG8sF0NLiJoQzXza71fgtLpj3tY6fN2EyUKJi
Nvq3Av+QoSRaqvzeXmvtegGGWMlk86c4gd8M7WY3KD1C0obNUXkXloXaD5zKlV7W
jQqFkuwfeTRvTGKGC88eavMBlcpNd+j0SWEjYrUg9BvDLjzxonVgFDrR1Q7sqU/M
vUhPRnLDKCvgbxrb7wTwBA5xqzA6XvW1pPi7AgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUDMFvZKOQDPJNOxV7JwDfc0Mq6bgwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0RNRnZaS09RRFBKTk94
VjdKd0RmYzBNcTZiZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAEE4EBbojF5RtyA1
UYY3r16oHd0vW99KApvTwRQInbCwDB+Iw6ZIY+uFbWs62rTBJfLJEZ4mc1SAeS4u
l4TNtCta5VXcxGhmQH/VT8S++U11VKka9I9JfsBR62M7LiI6twbPc+AnBp5PNvpI
TDqwu2IjejljhnuI7TMnAFldCqb/4ARmS+2UXbZiJJ7f7b61VEvfDI+pCSf/Ykau
0BeAoG/KEqQjpExr3FJXcaTaWg/WnWbUqPKFtA9Q/5FeCdMv30uR0h+Lljm9Z9FR
SCpQHeuUAF75xeA0m3WquEMYdyxrS64EonO8vqEfI5cJQPn5lw0w3dXqMX6DBneE
nlY8o2M=
-----END CERTIFICATE-----
Generated at Sat May 17 20:46:21 2025 by rpki-client