Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/pn8R0kNLad1tzwEvEYZ_NCWmqEs.roa
File: pn8R0kNLad1tzwEvEYZ_NCWmqEs.roa (raw, json)
Hash identifier: J2r+BJIG0c4s6IoAbIjPDC3YZ3FsE02bddzNVA4Jts4=
Subject key identifier: A6:7F:11:D2:43:4B:69:DD:6D:CF:01:2F:11:86:7F:34:25:A6:A8:4B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4075
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/pn8R0kNLad1tzwEvEYZ_NCWmqEs.roa
Signing time: Sun 14 Apr 2024 12:52:53 +0000
ROA not before: Sun 14 Apr 2024 12:52:53 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16501 (0x4075)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 14 12:52:53 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A67F11D2434B69DD6DCF012F11867F3425A6A84B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:81:be:d7:a7:e0:b7:8b:80:88:ac:56:5a:6f:
02:70:30:b1:ae:c8:8f:2b:e3:92:ee:5a:fd:45:96:
96:16:42:27:ea:9c:21:a4:79:74:9d:4e:b1:14:49:
5a:b2:7b:37:48:0f:51:80:f3:9e:0a:3a:da:e8:b5:
b2:0f:29:7c:a2:04:6b:3c:47:e6:7b:66:aa:5a:21:
9f:7c:3c:e7:b7:06:b4:fa:6b:0e:a0:d0:82:99:30:
d4:32:c5:f6:ac:42:d0:04:53:0d:14:08:89:de:0a:
23:ff:48:11:aa:81:4b:3f:b4:c1:d0:e8:01:72:16:
14:57:9e:d7:6c:43:49:43:00:21:28:ea:4c:4a:6a:
81:a8:0e:85:c3:fb:79:88:96:9f:70:28:74:65:17:
d7:52:38:10:00:fd:7f:22:e6:0a:75:4f:b1:4e:4f:
f9:f6:79:50:9d:44:74:6b:4e:83:2f:e1:2c:a5:e4:
52:19:76:4d:74:3e:1a:09:fc:e4:98:12:3b:ba:bb:
ed:88:f9:ab:86:55:3c:84:fa:5f:8a:f1:b8:99:ab:
a8:69:08:12:fe:b3:5f:4b:cb:e4:b8:de:b4:32:58:
78:ba:c8:18:e3:91:32:0a:5e:19:5e:95:e8:34:2c:
8a:12:d4:85:7e:de:a7:aa:3c:5e:84:d9:60:67:d1:
58:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7F:11:D2:43:4B:69:DD:6D:CF:01:2F:11:86:7F:34:25:A6:A8:4B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/pn8R0kNLad1tzwEvEYZ_NCWmqEs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
77:98:f7:a1:40:21:da:3d:b4:ac:73:b0:aa:52:6f:58:cd:04:
ce:96:88:1c:fe:59:8d:c7:77:03:00:05:c5:26:e9:dc:cd:df:
6c:91:13:f2:85:ba:ed:ed:d1:a8:fc:1f:68:63:fa:7e:e6:be:
c7:7e:36:81:a2:08:5c:12:28:81:41:3b:e0:10:e2:a1:7f:da:
75:df:6b:bb:91:5f:a3:3d:e2:35:5f:f8:12:5e:f0:b2:f4:9f:
d5:25:fe:aa:00:6c:91:d8:6a:de:26:21:9e:a4:97:ca:3e:0e:
e9:4f:a3:61:ff:ed:c0:12:1f:af:e7:7d:f0:69:4a:ad:ac:8e:
48:57:a7:4a:c6:58:5d:d9:ca:a7:7e:b9:18:0e:55:7c:01:a5:
68:9e:00:31:50:b9:27:14:b5:e9:67:9c:5a:03:b5:82:1e:fb:
7e:17:2f:b5:c8:9b:aa:42:b8:50:31:e4:aa:e4:c5:c7:de:63:
88:95:45:20:40:28:13:62:6f:92:51:00:3a:43:fb:f1:95:da:
8f:a0:40:b9:44:7f:23:c1:75:e1:1f:50:e8:67:22:d4:99:75:
93:ee:41:d8:2f:d0:c8:4a:d3:49:71:78:99:8b:a7:ef:63:e1:
ae:f3:32:15:89:4c:46:7b:6a:ca:ab:63:4d:c0:20:5a:70:1d:
ea:5c:e7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 20:14:52 2025 by rpki-client