Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/CmD-73z0tdiDJq53rMtuRbUcCcQ.roa
File: CmD-73z0tdiDJq53rMtuRbUcCcQ.roa (raw, json)
Hash identifier: sNc3Smstbzu8w6ewK/VYw5jRiD7DOcBG716x3OCc7g8=
Subject key identifier: 0A:60:FE:EF:7C:F4:B5:D8:83:26:AE:77:AC:CB:6E:45:B5:1C:09:C4
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3C55
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/CmD-73z0tdiDJq53rMtuRbUcCcQ.roa
Signing time: Tue 09 Apr 2024 00:52:35 +0000
ROA not before: Tue 09 Apr 2024 00:52:35 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15445 (0x3c55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 9 00:52:35 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0A60FEEF7CF4B5D88326AE77ACCB6E45B51C09C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5c:b5:76:28:4f:17:63:ef:00:0c:dd:b1:7a:
22:95:75:2d:ae:f9:fe:25:29:31:79:5e:0e:9a:53:
d0:45:55:13:3d:f7:ff:22:16:2c:b3:f3:9f:bd:56:
3f:e3:ec:1c:57:6a:af:2b:dc:85:29:06:de:7a:73:
ad:34:79:01:11:62:eb:fc:2f:e6:c8:35:9e:5f:ac:
69:17:a5:14:97:af:a7:dd:75:18:b0:d5:02:a0:e7:
68:3c:07:87:97:d2:db:7e:af:60:90:41:df:78:8c:
63:a1:0d:b0:40:df:92:42:c6:4c:6c:4f:b9:4b:90:
8e:76:22:35:20:f9:15:03:30:b0:18:34:88:ba:b8:
35:35:75:12:1d:a9:9c:4f:21:d8:4d:b3:c0:b1:c4:
0a:03:7d:fd:72:bc:29:aa:e1:4b:23:f6:2a:6e:3b:
92:f9:11:89:db:98:7f:86:f2:d4:6a:0d:b7:d8:fe:
eb:eb:30:8c:5b:4c:e2:15:eb:9b:f3:dd:6a:1e:bc:
3f:69:e5:53:98:08:6f:13:b2:93:d1:5e:4d:26:4d:
07:08:31:2d:0d:8a:62:3e:19:c4:7c:f8:be:7a:fd:
86:46:51:41:b7:16:e5:07:96:54:52:19:3c:11:b2:
8c:ce:5f:71:bd:e3:1d:73:c7:ce:a2:ee:f6:bf:79:
de:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:60:FE:EF:7C:F4:B5:D8:83:26:AE:77:AC:CB:6E:45:B5:1C:09:C4
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/CmD-73z0tdiDJq53rMtuRbUcCcQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
71:7c:8d:0e:5f:c7:19:a9:83:89:2a:6a:54:19:eb:69:1c:0f:
6e:9d:5d:3f:bc:42:b7:4f:06:c1:4a:02:07:01:95:d7:89:09:
af:9d:32:f5:e5:2e:3f:88:c3:6d:f0:74:b1:7c:af:9d:d3:1d:
6b:6a:19:b1:ea:a7:1b:8a:e1:a8:16:53:48:cb:ea:4e:ae:5f:
96:2c:bb:8a:28:fc:16:87:98:5d:7e:2d:49:21:a7:4c:fb:62:
e3:3a:cf:d1:4f:21:cf:f0:e8:af:47:2b:5d:66:29:12:4a:af:
62:34:3f:7b:f8:83:33:47:9c:f6:c0:17:d5:bb:ee:b2:1d:d2:
ce:f5:83:9d:45:9a:a9:66:34:5c:0a:35:1a:72:3e:72:40:56:
54:d4:3d:74:a8:86:ea:c9:ea:96:c8:5c:19:78:be:f0:06:4a:
54:b5:ca:8f:7b:15:60:4d:80:1e:37:26:b3:8d:f0:26:ec:9c:
d3:89:1d:ee:02:72:e6:cb:4e:01:2c:c8:5e:c4:33:c9:38:6c:
00:0f:3b:81:e0:02:8f:2f:a8:4c:cd:c8:19:20:40:eb:91:0f:
5c:1b:0f:49:d7:59:52:eb:c6:b6:af:3b:20:cf:cf:68:1c:00:
44:e4:d9:ad:ff:fd:96:d8:e8:d4:ec:a1:59:44:1f:bd:99:2f:
63:89:08:45
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICPFUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDkw
MDUyMzVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDBBNjBGRUVGN0NGNEI1
RDg4MzI2QUU3N0FDQ0I2RTQ1QjUxQzA5QzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBXLV2KE8XY+8ADN2xeiKVdS2u+f4lKTF5Xg6aU9BFVRM99/8i
Fiyz85+9Vj/j7BxXaq8r3IUpBt56c600eQERYuv8L+bINZ5frGkXpRSXr6fddRiw
1QKg52g8B4eX0tt+r2CQQd94jGOhDbBA35JCxkxsT7lLkI52IjUg+RUDMLAYNIi6
uDU1dRIdqZxPIdhNs8CxxAoDff1yvCmq4Usj9ipuO5L5EYnbmH+G8tRqDbfY/uvr
MIxbTOIV65vz3WoevD9p5VOYCG8TspPRXk0mTQcIMS0NimI+GcR8+L56/YZGUUG3
FuUHllRSGTwRsozOX3G94x1zx86i7va/ed5nAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUCmD+73z0tdiDJq53rMtuRbUcCcQwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0NtRC03M3owdGRpREpx
NTNyTXR1UmJVY0NjUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAHF8jQ5fxxmpg4kq
alQZ62kcD26dXT+8QrdPBsFKAgcBldeJCa+dMvXlLj+Iw23wdLF8r53THWtqGbHq
pxuK4agWU0jL6k6uX5Ysu4oo/BaHmF1+LUkhp0z7YuM6z9FPIc/w6K9HK11mKRJK
r2I0P3v4gzNHnPbAF9W77rId0s71g51FmqlmNFwKNRpyPnJAVlTUPXSohurJ6pbI
XBl4vvAGSlS1yo97FWBNgB43JrON8CbsnNOJHe4CcubLTgEsyF7EM8k4bAAPO4Hg
Ao8vqEzNyBkgQOuRD1wbD0nXWVLrxravOyDPz2gcAETk2a3//ZbY6NTsoVlEH72Z
L2OJCEU=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:47:05 2025 by rpki-client