Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Lzr8bAOP4ne5Mg-pypm96l47fZ4.roa
File: Lzr8bAOP4ne5Mg-pypm96l47fZ4.roa (raw, json)
Hash identifier: 2fUb+qV9Gx5W+0M2JQyQUjNrAezEPs9hISNNcTjSJvY=
Subject key identifier: 2F:3A:FC:6C:03:8F:E2:77:B9:32:0F:A9:CA:99:BD:EA:5E:3B:7D:9E
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 39FD
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Lzr8bAOP4ne5Mg-pypm96l47fZ4.roa
Signing time: Fri 05 Apr 2024 21:52:28 +0000
ROA not before: Fri 05 Apr 2024 21:52:28 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14845 (0x39fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 5 21:52:28 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2F3AFC6C038FE277B9320FA9CA99BDEA5E3B7D9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f1:4c:12:49:97:d0:7f:0d:d0:39:f9:3b:f6:
04:c0:c5:54:c8:a1:36:fa:48:77:dd:44:f4:fa:22:
fd:9a:ed:ad:0a:c5:01:b6:0a:4e:35:59:c8:d5:d6:
5b:20:7c:84:54:87:fd:aa:d7:c7:fe:13:6a:c7:03:
0d:8b:ce:e7:cc:7c:f5:68:e7:f3:6c:07:46:68:88:
f0:df:46:6c:4f:9f:a5:f0:58:e4:4d:e5:34:56:29:
d4:c2:9d:54:9b:49:51:7e:3f:cb:99:67:35:aa:f6:
e5:bc:b1:7c:c6:4d:00:2c:4d:d3:6b:4c:6e:45:51:
c9:c0:08:9b:1a:8f:c0:d3:16:26:32:88:7f:72:62:
2a:72:7e:70:e8:57:4d:cf:c7:5b:e3:c6:64:da:47:
71:12:c6:3a:a3:3d:a0:91:79:1c:4d:ec:f3:0d:69:
b7:71:72:cc:04:8d:21:3a:ce:ff:04:3c:7e:d6:8e:
6a:d7:a3:66:6c:d9:54:31:6c:11:f3:93:64:e7:22:
ef:e2:55:1e:1b:92:a1:dd:47:80:87:29:0e:34:b0:
16:c8:df:6e:43:56:9a:f0:ff:5b:2a:b1:75:a8:f5:
23:57:0f:b4:5d:1c:b1:45:ea:c7:60:a3:ee:65:0b:
f7:30:49:ee:70:5c:94:21:6f:2a:8e:0d:cf:1f:fa:
38:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3A:FC:6C:03:8F:E2:77:B9:32:0F:A9:CA:99:BD:EA:5E:3B:7D:9E
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Lzr8bAOP4ne5Mg-pypm96l47fZ4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
30:82:6e:30:9a:ac:fa:83:d5:e2:67:bc:ca:a1:6f:60:74:ff:
8c:76:56:64:bf:6b:59:13:08:83:d8:04:23:7d:eb:ab:46:7e:
23:4a:db:2d:e5:d7:58:d2:96:b4:76:cd:8b:c6:20:e4:bf:a2:
e3:aa:15:c3:92:c2:52:30:4d:bf:ac:56:d9:43:ee:e6:59:6c:
4a:62:d5:f6:50:d6:dc:5e:62:6f:d0:ec:1a:ed:57:90:08:8e:
16:a1:81:02:d4:b5:da:2d:5f:4c:d4:4c:86:fa:6e:82:1d:84:
21:a6:75:44:d8:bb:a2:58:06:b7:a3:e9:56:8f:d6:99:cd:33:
5e:95:01:0e:28:64:b7:29:14:b0:c9:d9:d4:53:95:fb:6a:ce:
92:73:8f:b4:0f:10:86:19:a3:8a:8a:d5:b0:fc:0e:fc:d8:fb:
44:7a:8d:c2:5c:24:67:27:07:59:ba:39:ac:77:ba:fd:65:a1:
29:94:70:e8:e8:e9:a6:ab:7f:94:73:bd:f8:4c:33:dd:36:0e:
62:86:af:0e:9b:fa:88:24:d8:35:10:f4:b4:23:a2:fc:b0:5e:
a8:fc:5b:e3:26:1a:70:a3:e8:8e:7b:d6:59:8c:15:f2:cb:ff:
7f:5e:c7:22:b8:c3:e7:5c:bc:68:54:3a:4b:86:6d:11:95:31:
f5:fd:64:6a
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICOf0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDUy
MTUyMjhaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDJGM0FGQzZDMDM4RkUy
NzdCOTMyMEZBOUNBOTlCREVBNUUzQjdEOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCd8UwSSZfQfw3QOfk79gTAxVTIoTb6SHfdRPT6Iv2a7a0KxQG2
Ck41WcjV1lsgfIRUh/2q18f+E2rHAw2LzufMfPVo5/NsB0ZoiPDfRmxPn6XwWORN
5TRWKdTCnVSbSVF+P8uZZzWq9uW8sXzGTQAsTdNrTG5FUcnACJsaj8DTFiYyiH9y
YipyfnDoV03Px1vjxmTaR3ESxjqjPaCReRxN7PMNabdxcswEjSE6zv8EPH7WjmrX
o2Zs2VQxbBHzk2TnIu/iVR4bkqHdR4CHKQ40sBbI325DVprw/1sqsXWo9SNXD7Rd
HLFF6sdgo+5lC/cwSe5wXJQhbyqODc8f+jihAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQULzr8bAOP4ne5Mg+pypm96l47fZ4wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0x6cjhiQU9QNG5lNU1n
LXB5cG05Nmw0N2ZaNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBADCCbjCarPqD1eJn
vMqhb2B0/4x2VmS/a1kTCIPYBCN966tGfiNK2y3l11jSlrR2zYvGIOS/ouOqFcOS
wlIwTb+sVtlD7uZZbEpi1fZQ1txeYm/Q7BrtV5AIjhahgQLUtdotX0zUTIb6boId
hCGmdUTYu6JYBrej6VaP1pnNM16VAQ4oZLcpFLDJ2dRTlftqzpJzj7QPEIYZo4qK
1bD8DvzY+0R6jcJcJGcnB1m6Oax3uv1loSmUcOjo6aarf5RzvfhMM902DmKGrw6b
+ogk2DUQ9LQjovywXqj8W+MmGnCj6I571lmMFfLL/39exyK4w+dcvGhUOkuGbRGV
MfX9ZGo=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:21:42 2025 by rpki-client