Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/A_CmueiJMcOewWFu93aQFa8KmqQ.roa
File: A_CmueiJMcOewWFu93aQFa8KmqQ.roa (raw, json)
Hash identifier: sSSAyjl7Db4F2TIRT65gibc4ODOyN0+dTe9+E+Vswj8=
Subject key identifier: 03:F0:A6:B9:E8:89:31:C3:9E:C1:61:6E:F7:76:90:15:AF:0A:9A:A4
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3AE6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/A_CmueiJMcOewWFu93aQFa8KmqQ.roa
Signing time: Sun 07 Apr 2024 02:52:29 +0000
ROA not before: Sun 07 Apr 2024 02:52:29 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15078 (0x3ae6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 7 02:52:29 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=03F0A6B9E88931C39EC1616EF7769015AF0A9AA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:44:54:00:18:c8:20:30:ee:9e:03:fe:a5:1a:
f5:0f:b6:c6:67:10:41:68:4c:5c:58:da:3a:57:83:
5c:53:4a:2b:dd:2d:83:bd:a1:00:4c:b3:a7:69:22:
45:b8:2d:f4:5e:79:1e:70:62:2a:71:da:3c:bc:4c:
80:1d:a2:70:7c:8d:72:22:8f:ec:e6:2a:ee:99:da:
57:67:68:f0:71:c9:98:ad:20:b4:ab:17:90:73:ae:
d0:bc:6c:2f:72:6c:b0:b6:cc:5b:ff:f3:26:03:33:
f6:69:f0:50:ff:40:3c:a1:f1:cc:8f:6a:70:70:05:
1c:26:44:59:d8:8f:a0:54:4b:60:9b:e1:a5:30:c4:
0b:75:b4:1c:d1:68:51:b1:4d:ea:3a:74:f0:28:6e:
20:69:aa:55:71:97:99:e8:dd:a1:8e:b0:99:31:5e:
4e:91:44:64:6b:f6:32:b4:58:29:6c:df:ec:bf:a8:
09:2b:fe:07:49:0d:99:e5:58:64:06:6f:3f:7d:b4:
73:90:e7:67:d4:e0:03:0a:98:20:53:db:dd:38:c5:
fd:34:d7:21:2f:94:0c:83:73:34:df:e6:a2:18:fa:
02:b7:2c:28:ba:ef:d2:55:e2:3e:e8:7a:aa:e5:a3:
99:b4:88:aa:18:34:ac:27:ee:46:8a:a9:3c:52:06:
b8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F0:A6:B9:E8:89:31:C3:9E:C1:61:6E:F7:76:90:15:AF:0A:9A:A4
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/A_CmueiJMcOewWFu93aQFa8KmqQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
57:d0:5c:26:69:0c:38:cd:3a:cf:fa:f5:c5:73:99:d1:ab:9a:
ad:d3:34:4b:18:30:e1:80:23:34:ed:1d:28:ff:a8:bf:d5:fb:
6b:55:e7:47:1b:2e:1c:d4:b5:43:b5:5e:9b:92:9f:7f:84:55:
7e:36:3f:7f:d0:04:7b:62:cf:61:9a:7c:02:f5:2f:ba:17:09:
c0:34:2e:d8:5b:0b:65:20:d6:d8:33:0d:42:a1:93:a4:5e:4d:
ed:57:ed:88:8d:91:37:d2:e5:c6:de:14:7d:fd:4f:8b:9d:9b:
15:21:32:8c:76:ab:2d:5e:d7:3f:4f:7b:ba:b3:ed:df:63:7a:
82:d4:9c:ab:55:0b:db:20:b1:3b:5b:dc:37:5d:0f:34:24:10:
35:c8:8f:1c:bd:92:15:a4:47:01:90:98:52:c0:4e:ab:4a:83:
dc:04:e5:31:88:41:7a:e9:fd:b8:66:5d:5e:be:52:e4:df:f8:
31:6b:e7:cb:fc:79:a0:ad:f2:bd:b2:84:c8:92:38:ec:5c:29:
2f:ef:83:b3:c0:b2:8f:18:a1:6a:df:4d:8c:74:1b:ae:ed:3f:
a7:f5:c1:43:33:ca:17:1f:19:61:88:84:07:d6:ee:f3:34:fd:
d8:02:75:97:33:f2:6a:22:3b:e5:46:26:ea:88:d5:63:58:7e:
5d:5b:8e:8b
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICOuYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDcw
MjUyMjlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDAzRjBBNkI5RTg4OTMx
QzM5RUMxNjE2RUY3NzY5MDE1QUYwQTlBQTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNRFQAGMggMO6eA/6lGvUPtsZnEEFoTFxY2jpXg1xTSivdLYO9
oQBMs6dpIkW4LfReeR5wYipx2jy8TIAdonB8jXIij+zmKu6Z2ldnaPBxyZitILSr
F5BzrtC8bC9ybLC2zFv/8yYDM/Zp8FD/QDyh8cyPanBwBRwmRFnYj6BUS2Cb4aUw
xAt1tBzRaFGxTeo6dPAobiBpqlVxl5no3aGOsJkxXk6RRGRr9jK0WCls3+y/qAkr
/gdJDZnlWGQGbz99tHOQ52fU4AMKmCBT2904xf001yEvlAyDczTf5qIY+gK3LCi6
79JV4j7oeqrlo5m0iKoYNKwn7kaKqTxSBriTAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUA/CmueiJMcOewWFu93aQFa8KmqQwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0FfQ211ZWlKTWNPZXdX
RnU5M2FRRmE4S21xUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAV9BcJmkMOM06z/r1xXOZ0auardM0Sxgw
4YAjNO0dKP+ov9X7a1XnRxsuHNS1Q7Vem5Kff4RVfjY/f9AEe2LPYZp8AvUvuhcJ
wDQu2FsLZSDW2DMNQqGTpF5N7VftiI2RN9Llxt4Uff1Pi52bFSEyjHarLV7XP097
urPt32N6gtScq1UL2yCxO1vcN10PNCQQNciPHL2SFaRHAZCYUsBOq0qD3ATlMYhB
eun9uGZdXr5S5N/4MWvny/x5oK3yvbKEyJI47FwpL++Ds8Cyjxihat9NjHQbru0/
p/XBQzPKFx8ZYYiEB9bu8zT92AJ1lzPyaiI75UYm6ojVY1h+XVuOiw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:21 2024 by rpki-client on console-ams.rpki-client.org