Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/-odu7sFnqBHrnRrghbPy0nLkwG0.roa
File: -odu7sFnqBHrnRrghbPy0nLkwG0.roa (raw, json)
Hash identifier: CaqkSorVosTc7Q7/DI37cMd6Ln1Wfn5gzAmYI6RCYOU=
Subject key identifier: FA:87:6E:EE:C1:67:A8:11:EB:9D:1A:E0:85:B3:F2:D2:72:E4:C0:6D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4845
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-odu7sFnqBHrnRrghbPy0nLkwG0.roa
Signing time: Wed 24 Apr 2024 22:53:18 +0000
ROA not before: Wed 24 Apr 2024 22:53:18 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18501 (0x4845)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 24 22:53:18 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FA876EEEC167A811EB9D1AE085B3F2D272E4C06D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:44:4f:53:2c:bd:63:f2:6b:f4:b5:e1:6a:87:
09:9e:16:4a:ef:39:ff:e9:9b:64:4f:f7:2e:fe:ef:
dd:b4:8a:d3:ef:dd:aa:92:b7:27:a2:1d:6c:cf:86:
97:83:3a:c3:d9:96:d9:d6:a9:18:a3:67:58:32:e4:
b8:a7:e6:df:30:b8:f4:38:b3:2c:6c:36:c2:7a:d1:
f3:ae:05:ab:92:10:a6:10:d6:37:93:2c:14:b1:a9:
4f:a6:4e:70:b8:c1:18:ec:0a:73:63:fe:11:5c:0d:
fc:da:1c:3d:e5:1c:f9:11:69:b4:69:69:bf:c1:57:
57:67:c0:9e:43:33:8d:02:5b:28:5c:ba:bd:4a:6a:
f2:f1:a2:ec:8a:41:28:53:55:d6:fa:08:f5:c2:3d:
73:d6:2d:24:85:a3:80:1f:db:7c:52:bd:b3:bd:0b:
80:cf:b7:7d:53:03:d3:de:da:af:a0:9a:e2:f9:85:
91:fa:5a:55:89:12:5d:73:e1:b1:a6:fb:dd:81:df:
19:c3:37:bf:9c:d8:c8:61:87:69:d5:c9:7a:91:1c:
7f:66:47:04:81:26:71:67:5e:0c:df:09:67:23:ff:
37:8e:cb:94:dc:b9:3d:3f:4d:53:be:1b:9c:5c:4c:
e3:3e:c8:28:f9:10:57:75:d9:12:98:81:6e:92:4f:
85:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:87:6E:EE:C1:67:A8:11:EB:9D:1A:E0:85:B3:F2:D2:72:E4:C0:6D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/-odu7sFnqBHrnRrghbPy0nLkwG0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
a9:f2:fa:7d:0b:5b:9f:a4:95:fa:30:60:b5:8b:21:d1:44:f3:
54:a5:08:21:f2:10:c2:a6:ae:36:36:16:a6:e7:f2:a0:7c:9f:
4e:93:4b:77:f9:7a:2e:3d:5d:19:a0:26:4d:57:87:41:44:0e:
0d:04:17:c2:10:47:a9:7f:60:4b:35:af:fa:06:f9:66:1c:79:
38:63:67:e2:e5:a4:6d:b6:ca:88:6f:f8:c6:8a:d9:60:72:a2:
bb:3b:4a:54:f4:bb:f2:20:b4:37:53:5a:d8:d3:0f:c6:7d:42:
4e:45:77:e0:f4:4e:07:fd:ba:f2:54:72:55:82:c5:6e:b4:ca:
33:37:6d:31:3b:11:b2:ca:73:9a:8c:48:86:29:87:c6:c0:8b:
8f:80:6a:13:2e:e5:40:f4:ae:50:25:5a:8d:53:5c:6b:16:66:
d3:52:dd:a4:5b:f7:67:e7:f5:a3:f6:f0:6b:e4:71:e3:5a:0a:
fe:e7:74:17:65:44:d2:a7:3f:3a:10:d2:9e:37:a0:f0:da:8e:
6f:11:f1:11:7e:74:5e:30:77:60:d6:4c:bf:a7:68:a5:ab:c5:
4a:05:bc:6d:58:23:88:26:e2:ff:22:e1:2a:5c:30:6a:e7:97:
af:aa:47:2c:7b:aa:fd:71:ec:14:1a:fc:6a:e8:ef:e3:a7:c2:
41:28:aa:8f
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICSEUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MjQy
MjUzMThaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEZBODc2RUVFQzE2N0E4
MTFFQjlEMUFFMDg1QjNGMkQyNzJFNEMwNkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXRE9TLL1j8mv0teFqhwmeFkrvOf/pm2RP9y7+7920itPv3aqS
tyeiHWzPhpeDOsPZltnWqRijZ1gy5Lin5t8wuPQ4syxsNsJ60fOuBauSEKYQ1jeT
LBSxqU+mTnC4wRjsCnNj/hFcDfzaHD3lHPkRabRpab/BV1dnwJ5DM40CWyhcur1K
avLxouyKQShTVdb6CPXCPXPWLSSFo4Af23xSvbO9C4DPt31TA9Pe2q+gmuL5hZH6
WlWJEl1z4bGm+92B3xnDN7+c2Mhhh2nVyXqRHH9mRwSBJnFnXgzfCWcj/zeOy5Tc
uT0/TVO+G5xcTOM+yCj5EFd12RKYgW6ST4VPAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQU+odu7sFnqBHrnRrghbPy0nLkwG0wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3Ly1vZHU3c0ZucUJIcm5S
cmdoYlB5MG5Ma3dHMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAKny+n0LW5+klfow
YLWLIdFE81SlCCHyEMKmrjY2Fqbn8qB8n06TS3f5ei49XRmgJk1Xh0FEDg0EF8IQ
R6l/YEs1r/oG+WYceThjZ+LlpG22yohv+MaK2WByors7SlT0u/IgtDdTWtjTD8Z9
Qk5Fd+D0Tgf9uvJUclWCxW60yjM3bTE7EbLKc5qMSIYph8bAi4+AahMu5UD0rlAl
Wo1TXGsWZtNS3aRb92fn9aP28GvkceNaCv7ndBdlRNKnPzoQ0p43oPDajm8R8RF+
dF4wd2DWTL+naKWrxUoFvG1YI4gm4v8i4SpcMGrnl6+qRyx7qv1x7BQa/Gro7+On
wkEoqo8=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:33:14 2025 by rpki-client