Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/8qqFLnV9TYA6ChXAFLVF8OApD_Q.roa
File: 8qqFLnV9TYA6ChXAFLVF8OApD_Q.roa (raw, json)
Hash identifier: +dMMk9KKTI7VqQ1LYm748CxhkWOH7Nia09Pcq8K1JsM=
Subject key identifier: F2:AA:85:2E:75:7D:4D:80:3A:0A:15:C0:14:B5:45:F0:E0:29:0F:F4
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4FF5
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8qqFLnV9TYA6ChXAFLVF8OApD_Q.roa
Signing time: Sun 05 May 2024 04:53:49 +0000
ROA not before: Sun 05 May 2024 04:53:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20469 (0x4ff5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 5 04:53:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F2AA852E757D4D803A0A15C014B545F0E0290FF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:54:eb:38:ed:5c:33:49:ba:98:a1:ee:59:e6:
35:3b:6f:a3:ed:e0:54:d7:3a:e7:f4:c0:c6:6a:f8:
36:bb:1f:e3:21:c9:3d:6c:c6:51:da:24:f3:83:e8:
fe:99:4a:fc:7b:39:5d:ea:64:5b:d5:57:d3:43:bd:
7d:53:d9:ba:a4:fe:a1:a7:8c:2f:0c:69:3f:38:ac:
c2:fe:b5:2b:0e:6c:97:5a:a1:f7:35:a5:ce:63:5b:
6d:48:e7:0c:88:b5:4d:0e:f4:9b:28:88:7e:18:f8:
83:ff:aa:2e:fc:d5:c7:76:82:a7:6f:ae:23:b4:25:
d6:33:56:d3:f5:cc:c0:40:c5:92:b6:df:be:b2:a4:
8e:c8:58:68:7c:38:6b:f2:02:bf:6a:20:08:b7:a9:
54:57:11:65:e8:02:65:5d:72:48:47:0c:2d:16:5a:
51:84:b8:0c:30:4f:11:64:ad:0a:90:ac:08:04:82:
47:42:29:cd:6c:cf:5e:c3:e6:77:34:74:81:86:8d:
4e:6c:a4:c1:92:04:67:64:13:41:27:b4:65:08:6d:
03:64:c8:3b:1c:6d:6e:ac:13:19:f5:29:02:d9:e8:
09:c8:32:a2:5c:b1:fa:94:09:87:a2:61:79:92:33:
14:35:7e:46:82:ab:d3:9c:ed:bd:a1:3b:e6:21:6a:
0d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AA:85:2E:75:7D:4D:80:3A:0A:15:C0:14:B5:45:F0:E0:29:0F:F4
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/8qqFLnV9TYA6ChXAFLVF8OApD_Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
78:03:9a:ee:e9:68:3e:6f:34:15:42:32:15:a0:00:13:8b:c1:
22:69:17:45:60:79:a1:5a:5e:a5:90:3d:12:af:4d:7f:b2:84:
e1:6e:77:5f:b8:80:20:c3:54:12:30:33:47:f1:4b:0e:39:fd:
67:3e:da:a1:fe:1c:22:86:76:ce:8a:ec:b0:da:06:37:de:eb:
2c:41:96:bf:bd:04:17:ef:9a:66:63:dc:40:cb:77:6b:17:d3:
8f:7f:2d:f3:02:5e:e2:42:5e:c6:cb:b4:5c:0f:d6:9a:79:ff:
71:9e:76:a8:0a:a7:9e:c7:bc:5f:de:c7:4c:55:eb:e8:1a:e9:
01:af:27:8b:30:59:74:04:da:75:e1:4c:15:4b:40:73:88:af:
e2:c5:97:d2:5a:6e:ac:a4:98:72:97:71:c7:1b:0e:dd:09:8a:
c3:de:22:46:39:b7:a2:51:4a:b1:95:db:98:15:e0:bf:d9:b2:
dc:ef:df:0f:03:63:92:10:27:5c:77:aa:42:d1:36:a2:6e:d2:
2f:51:e4:15:0c:ad:fd:bc:fc:9e:3a:2e:2d:2f:b0:1f:de:1b:
7a:a7:51:b0:ef:e3:17:67:95:31:fc:1a:11:23:4d:71:89:db:
08:bd:64:68:71:f4:0d:a8:ad:6f:6d:b2:ae:0d:1c:5a:e2:ce:
7e:22:34:8b
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICT/UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDUw
NDUzNDlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEYyQUE4NTJFNzU3RDRE
ODAzQTBBMTVDMDE0QjU0NUYwRTAyOTBGRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLVOs47VwzSbqYoe5Z5jU7b6Pt4FTXOuf0wMZq+Da7H+MhyT1s
xlHaJPOD6P6ZSvx7OV3qZFvVV9NDvX1T2bqk/qGnjC8MaT84rML+tSsObJdaofc1
pc5jW21I5wyItU0O9JsoiH4Y+IP/qi781cd2gqdvriO0JdYzVtP1zMBAxZK2376y
pI7IWGh8OGvyAr9qIAi3qVRXEWXoAmVdckhHDC0WWlGEuAwwTxFkrQqQrAgEgkdC
Kc1sz17D5nc0dIGGjU5spMGSBGdkE0EntGUIbQNkyDscbW6sExn1KQLZ6AnIMqJc
sfqUCYeiYXmSMxQ1fkaCq9Oc7b2hO+Yhag3RAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQU8qqFLnV9TYA6ChXAFLVF8OApD/QwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzhxcUZMblY5VFlBNkNo
WEFGTFZGOE9BcERfUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAHgDmu7paD5vNBVC
MhWgABOLwSJpF0VgeaFaXqWQPRKvTX+yhOFud1+4gCDDVBIwM0fxSw45/Wc+2qH+
HCKGds6K7LDaBjfe6yxBlr+9BBfvmmZj3EDLd2sX049/LfMCXuJCXsbLtFwP1pp5
/3GedqgKp57HvF/ex0xV6+ga6QGvJ4swWXQE2nXhTBVLQHOIr+LFl9JabqykmHKX
cccbDt0JisPeIkY5t6JRSrGV25gV4L/Zstzv3w8DY5IQJ1x3qkLRNqJu0i9R5BUM
rf28/J46Li0vsB/eG3qnUbDv4xdnlTH8GhEjTXGJ2wi9ZGhx9A2orW9tsq4NHFri
zn4iNIs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:19 2024 by rpki-client on console-ams.rpki-client.org