Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/42y-I4zl1rib86y5u_kEtxUJjOo.roa
File: 42y-I4zl1rib86y5u_kEtxUJjOo.roa (raw, json)
Hash identifier: bUF0aIYVuEvS4puHOPYP9mzi3WK6ccih3/DvllCnZ68=
Subject key identifier: E3:6C:BE:23:8C:E5:D6:B8:9B:F3:AC:B9:BB:F9:04:B7:15:09:8C:EA
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4311
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/42y-I4zl1rib86y5u_kEtxUJjOo.roa
Signing time: Thu 18 Apr 2024 00:22:59 +0000
ROA not before: Thu 18 Apr 2024 00:22:59 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17169 (0x4311)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 18 00:22:59 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E36CBE238CE5D6B89BF3ACB9BBF904B715098CEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:53:66:a1:d3:76:c4:9c:d8:24:b9:c3:cb:9b:
63:da:62:ad:90:1c:cd:db:4e:84:4e:5f:ac:ec:9d:
02:20:57:c0:16:f7:cd:39:a5:76:de:55:d5:21:62:
34:32:04:c3:29:df:93:91:6c:f7:b4:39:d0:06:f0:
b8:d4:90:ee:a8:9e:b2:f9:1a:d8:80:e6:1f:71:37:
11:cf:ec:28:50:aa:e4:19:ed:32:96:41:4d:45:5f:
b7:82:f9:5a:3b:01:0d:8d:ce:fe:70:ac:59:c2:0a:
db:75:14:b3:33:52:31:3f:a3:67:7f:16:30:8c:35:
a1:fe:2a:6e:2a:5a:24:f0:e9:8b:53:a8:45:99:f1:
ff:88:ed:5d:ad:d0:1f:79:2e:ab:02:39:27:df:fa:
b6:12:03:10:59:ef:52:96:54:0f:03:04:11:0e:d4:
12:82:17:81:30:ce:e3:74:93:6e:5c:f4:4d:eb:f7:
fb:23:fc:ff:1f:9b:6a:07:bb:71:3f:57:95:10:64:
19:d7:20:32:3e:b2:15:f6:ec:e7:7f:32:fa:4d:9d:
9a:0a:16:92:b2:77:5e:4d:f2:ad:d2:f6:0e:a6:d6:
b7:2b:78:d5:b9:30:e8:b3:3c:23:31:c3:70:10:b6:
c2:35:b0:22:47:95:44:8b:92:a0:d6:6a:ff:63:56:
46:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6C:BE:23:8C:E5:D6:B8:9B:F3:AC:B9:BB:F9:04:B7:15:09:8C:EA
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/42y-I4zl1rib86y5u_kEtxUJjOo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
1e:69:f0:9e:e3:6b:ba:76:eb:ec:f3:0c:48:17:61:6e:44:63:
0d:bc:44:b8:83:b3:d9:cf:7e:54:89:28:c6:e1:0d:0a:bb:26:
6f:2d:3a:31:a0:ed:b3:1c:7d:11:45:fe:7c:5c:4b:54:a6:dc:
39:b1:84:03:94:1d:35:09:21:40:40:09:85:c5:cf:19:37:15:
a5:19:ff:03:de:54:d4:e0:70:6a:14:8f:45:f0:a4:ba:6d:94:
a7:ec:fb:75:fe:f7:ff:41:1d:d0:d2:31:e6:03:aa:ab:47:74:
d9:2b:ea:91:83:23:c4:fb:8c:bc:af:7a:dc:d4:6a:73:6f:46:
d8:ed:5a:09:bd:94:e8:df:7a:43:b4:3f:ea:8e:5a:95:1a:59:
c1:77:4e:f5:82:2f:8e:93:24:ee:3c:62:8a:18:21:2e:2d:ef:
e9:96:ba:27:41:bf:45:80:98:58:ec:3d:20:0d:72:4d:1d:1d:
3c:a2:48:09:c4:4c:7b:a9:48:5e:78:be:0a:33:65:bb:72:e9:
c3:34:49:ad:3e:de:22:96:b5:ce:56:1f:b9:8a:b4:7d:37:ca:
4f:4c:3f:75:75:d0:d3:e7:4b:85:40:50:2c:47:2a:31:10:20:
6f:ba:6d:00:5e:f2:46:3e:ae:8d:0e:a6:00:dd:31:60:4b:e3:
79:46:87:82
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICQxEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTgw
MDIyNTlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEUzNkNCRTIzOENFNUQ2
Qjg5QkYzQUNCOUJCRjkwNEI3MTUwOThDRUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSU2ah03bEnNgkucPLm2PaYq2QHM3bToROX6zsnQIgV8AW9805
pXbeVdUhYjQyBMMp35ORbPe0OdAG8LjUkO6onrL5GtiA5h9xNxHP7ChQquQZ7TKW
QU1FX7eC+Vo7AQ2Nzv5wrFnCCtt1FLMzUjE/o2d/FjCMNaH+Km4qWiTw6YtTqEWZ
8f+I7V2t0B95LqsCOSff+rYSAxBZ71KWVA8DBBEO1BKCF4EwzuN0k25c9E3r9/sj
/P8fm2oHu3E/V5UQZBnXIDI+shX27Od/MvpNnZoKFpKyd15N8q3S9g6m1rcreNW5
MOizPCMxw3AQtsI1sCJHlUSLkqDWav9jVkZJAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQU42y+I4zl1rib86y5u/kEtxUJjOowHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzQyeS1JNHpsMXJpYjg2
eTV1X2tFdHhVSmpPby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAB5p8J7ja7p26+zz
DEgXYW5EYw28RLiDs9nPflSJKMbhDQq7Jm8tOjGg7bMcfRFF/nxcS1Sm3DmxhAOU
HTUJIUBACYXFzxk3FaUZ/wPeVNTgcGoUj0XwpLptlKfs+3X+9/9BHdDSMeYDqqtH
dNkr6pGDI8T7jLyvetzUanNvRtjtWgm9lOjfekO0P+qOWpUaWcF3TvWCL46TJO48
YooYIS4t7+mWuidBv0WAmFjsPSANck0dHTyiSAnETHupSF54vgozZbty6cM0Sa0+
3iKWtc5WH7mKtH03yk9MP3V10NPnS4VAUCxHKjEQIG+6bQBe8kY+ro0OpgDdMWBL
43lGh4I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:13 2024 by rpki-client on console-ams.rpki-client.org