Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/JgeBqbjMM0Jr7NFaau32ueDxUdE.roa
File: JgeBqbjMM0Jr7NFaau32ueDxUdE.roa (raw, json)
Hash identifier: ndxPA0hmaGH/VMEIqCCauwq3S8yEXBcKCQRz0hvb5Yk=
Subject key identifier: 26:07:81:A9:B8:CC:33:42:6B:EC:D1:5A:6A:ED:F6:B9:E0:F1:51:D1
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4EF5
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/JgeBqbjMM0Jr7NFaau32ueDxUdE.roa
Signing time: Fri 03 May 2024 20:53:47 +0000
ROA not before: Fri 03 May 2024 20:53:47 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20213 (0x4ef5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 3 20:53:47 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=260781A9B8CC33426BECD15A6AEDF6B9E0F151D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5e:c6:c1:ea:2a:d6:1a:25:f8:72:7d:ea:e3:
ef:77:2c:3b:4b:c1:af:cd:75:01:5a:c1:f8:db:a0:
f9:43:cf:1e:7f:cb:a3:12:25:e2:05:80:80:3f:d9:
fb:12:19:20:95:64:e1:50:3b:ee:9c:4b:48:a4:79:
55:07:e7:7e:b2:4e:8f:f4:f1:97:e8:3f:b9:56:3b:
68:be:19:98:70:7d:20:ee:3b:e8:94:f1:15:bb:ba:
d6:5c:67:75:d7:16:5c:39:d8:12:b8:fc:d0:a7:8e:
68:d6:3e:5e:7e:ac:17:c5:93:89:54:c3:02:77:13:
ca:04:c9:d2:54:ed:b1:5a:67:e5:db:0a:8e:63:f0:
70:4f:3d:ef:e2:00:5f:7d:e2:e1:08:13:33:b9:25:
ad:67:08:34:f3:d2:e6:75:cc:d2:63:b4:36:04:ee:
91:2c:d8:ac:3a:a3:89:fb:a2:f4:6b:93:5c:20:74:
a9:2e:13:29:e6:71:62:cd:56:4b:34:01:d0:4d:b1:
aa:ac:43:78:8a:e0:c8:ce:dd:2c:ca:5b:79:97:b6:
19:4e:6b:65:63:28:53:16:6a:ba:68:fa:c9:28:b7:
33:ff:d8:8e:a2:e8:72:94:91:21:d2:d1:52:dd:f4:
5e:78:79:d2:e5:87:84:ce:3c:23:23:ee:b7:ad:fa:
c6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:07:81:A9:B8:CC:33:42:6B:EC:D1:5A:6A:ED:F6:B9:E0:F1:51:D1
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/JgeBqbjMM0Jr7NFaau32ueDxUdE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
27:96:c0:3b:17:3e:b5:1b:98:b5:fb:ac:e2:02:fe:04:d3:6e:
d0:80:e5:8b:6c:e9:c9:ea:7e:89:db:d5:0e:21:13:55:c1:28:
fb:1c:c4:d6:e0:a2:29:30:bb:a8:ef:47:11:37:c6:60:c4:6e:
8c:74:22:9a:5e:b8:6c:58:28:1c:73:4f:84:49:12:6a:52:16:
0f:e3:d7:8c:e1:05:2a:38:65:7f:0e:b7:b4:78:f7:4b:08:97:
55:a4:16:59:e7:42:fd:0c:20:6d:4d:fe:d1:75:34:9d:26:87:
db:7a:db:bb:d0:a1:94:34:b3:1e:36:6a:58:b4:b4:10:5c:26:
90:ed:ec:8c:4f:9e:0f:c7:63:20:7f:6e:03:18:7c:c4:4d:92:
46:25:08:f2:9d:b2:de:12:40:b0:e2:db:c7:15:55:6c:a2:7c:
62:23:1f:9e:8d:16:4c:d7:c9:e4:11:25:fb:05:e3:98:ea:12:
a1:ed:55:0b:01:1d:a2:3f:b5:27:81:1f:90:2b:30:cc:08:da:
dc:11:3f:31:29:a2:f3:2b:f3:0a:bf:71:b0:52:78:c3:c2:82:
67:46:14:79:1f:7f:f7:99:ab:8b:3e:b1:a6:c6:91:60:86:0f:
c8:4b:fa:03:75:da:4e:ab:4e:93:9d:82:11:d1:da:cb:b8:31:
14:b6:d1:50
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICTvUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDMy
MDUzNDdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDI2MDc4MUE5QjhDQzMz
NDI2QkVDRDE1QTZBRURGNkI5RTBGMTUxRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKXsbB6irWGiX4cn3q4+93LDtLwa/NdQFawfjboPlDzx5/y6MS
JeIFgIA/2fsSGSCVZOFQO+6cS0ikeVUH536yTo/08ZfoP7lWO2i+GZhwfSDuO+iU
8RW7utZcZ3XXFlw52BK4/NCnjmjWPl5+rBfFk4lUwwJ3E8oEydJU7bFaZ+XbCo5j
8HBPPe/iAF994uEIEzO5Ja1nCDTz0uZ1zNJjtDYE7pEs2Kw6o4n7ovRrk1wgdKku
EynmcWLNVks0AdBNsaqsQ3iK4MjO3SzKW3mXthlOa2VjKFMWarpo+skotzP/2I6i
6HKUkSHS0VLd9F54edLlh4TOPCMj7ret+sbfAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUJgeBqbjMM0Jr7NFaau32ueDxUdEwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0pnZUJxYmpNTTBKcjdO
RmFhdTMydWVEeFVkRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBACeWwDsXPrUbmLX7
rOIC/gTTbtCA5Yts6cnqfonb1Q4hE1XBKPscxNbgoikwu6jvRxE3xmDEbox0Ippe
uGxYKBxzT4RJEmpSFg/j14zhBSo4ZX8Ot7R490sIl1WkFlnnQv0MIG1N/tF1NJ0m
h9t627vQoZQ0sx42ali0tBBcJpDt7IxPng/HYyB/bgMYfMRNkkYlCPKdst4SQLDi
28cVVWyifGIjH56NFkzXyeQRJfsF45jqEqHtVQsBHaI/tSeBH5ArMMwI2twRPzEp
ovMr8wq/cbBSeMPCgmdGFHkff/eZq4s+sabGkWCGD8hL+gN12k6rTpOdghHR2su4
MRS20VA=
-----END CERTIFICATE-----
Generated at Sun May 18 06:22:01 2025 by rpki-client