Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Nfect9SkMNJDqahfrvsWxHNRQYw.roa
File: Nfect9SkMNJDqahfrvsWxHNRQYw.roa (raw, json)
Hash identifier: /XQ9FGAgXlN10iU8cuEH30w9SW+B+z8B63TTLXD1hEk=
Subject key identifier: 35:F7:9C:B7:D4:A4:30:D2:43:A9:A8:5F:AE:FB:16:C4:73:51:41:8C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 41D5
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Nfect9SkMNJDqahfrvsWxHNRQYw.roa
Signing time: Tue 16 Apr 2024 08:52:56 +0000
ROA not before: Tue 16 Apr 2024 08:52:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16853 (0x41d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 16 08:52:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=35F79CB7D4A430D243A9A85FAEFB16C47351418C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:61:e2:85:3c:64:dd:07:8f:c4:12:f9:a1:5d:
ec:3d:49:35:e7:f6:39:db:08:12:b5:88:a7:e1:56:
c5:c7:f5:91:cf:2e:45:1e:9e:4a:3c:1a:4c:bd:14:
77:bf:c2:74:7d:24:81:7e:7a:43:79:43:a8:e8:ef:
40:6f:da:20:e5:8d:8a:ab:e1:fe:44:52:d1:ac:bd:
26:1a:68:f0:9a:fa:a5:6e:85:17:10:1c:fa:c0:8e:
6d:0a:da:7b:ba:87:09:f9:84:c4:67:3e:72:83:0e:
1f:c1:7d:05:3c:45:61:cc:44:b1:d1:97:73:02:90:
ee:cc:71:78:08:c8:9d:87:40:6e:2d:d0:99:33:aa:
4e:cd:1d:c8:27:38:8a:e7:9f:a6:5d:b2:b9:af:77:
f7:82:5a:29:a0:11:be:88:de:f6:69:af:4a:77:00:
06:55:ff:87:a5:4d:4c:ef:81:d1:64:ea:4d:7e:51:
92:12:ca:36:d2:bf:cc:53:18:29:75:f5:51:ee:c3:
6d:b7:98:1e:4c:7b:34:e1:38:8e:6f:5e:30:c9:91:
da:17:32:47:97:84:16:c0:f0:bc:a4:80:b1:dd:07:
d2:ab:13:ee:89:db:bd:2e:2f:be:bc:98:55:78:d1:
d2:33:6f:2a:74:58:03:4e:2f:df:68:b7:0f:c9:9a:
0f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F7:9C:B7:D4:A4:30:D2:43:A9:A8:5F:AE:FB:16:C4:73:51:41:8C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Nfect9SkMNJDqahfrvsWxHNRQYw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
10:7b:80:f6:dd:75:77:e7:bf:59:6d:15:ea:20:41:43:62:70:
ba:90:e4:89:28:27:6e:19:cb:db:dc:5f:72:dd:e6:4a:f0:35:
ff:c6:9b:ff:b5:30:6d:b3:d8:58:3f:dc:da:5a:4d:60:c4:2d:
20:1d:28:03:ca:dc:64:84:b2:e6:78:f5:37:a5:fc:53:a0:40:
ac:eb:b4:5e:0e:c3:da:8f:49:11:ac:ac:57:2a:56:c6:cf:04:
fc:46:c2:75:67:df:01:bc:c0:60:ce:18:16:a4:b2:c2:27:bc:
77:b0:02:62:79:9f:81:ca:c2:f3:2d:88:1a:4d:5f:c4:a5:52:
42:98:84:9d:e5:74:2a:e5:6a:f0:7f:d1:a5:66:14:c9:b9:ff:
0e:16:7a:d6:c6:ef:6a:d3:24:94:be:1e:1e:7d:39:4b:a3:c2:
fe:ff:ca:e2:ac:f7:3e:fa:cf:73:d9:9b:f9:02:7a:95:f6:37:
90:db:af:ee:4c:32:d2:4b:ac:69:03:fd:2b:5f:ce:25:0b:d9:
1c:eb:a1:9e:7c:6b:8f:eb:18:46:e9:1c:52:5f:ca:73:6b:8b:
d7:1b:02:07:19:cd:1b:61:d5:0e:a6:ba:94:0f:bb:8f:8d:f8:
42:5a:4e:40:c5:c5:f6:6b:f2:b6:25:9d:36:8c:27:a4:1b:ae:
17:e0:76:d2
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICQdUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTYw
ODUyNTZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDM1Rjc5Q0I3RDRBNDMw
RDI0M0E5QTg1RkFFRkIxNkM0NzM1MTQxOEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2YeKFPGTdB4/EEvmhXew9STXn9jnbCBK1iKfhVsXH9ZHPLkUe
nko8Gky9FHe/wnR9JIF+ekN5Q6jo70Bv2iDljYqr4f5EUtGsvSYaaPCa+qVuhRcQ
HPrAjm0K2nu6hwn5hMRnPnKDDh/BfQU8RWHMRLHRl3MCkO7McXgIyJ2HQG4t0Jkz
qk7NHcgnOIrnn6Zdsrmvd/eCWimgEb6I3vZpr0p3AAZV/4elTUzvgdFk6k1+UZIS
yjbSv8xTGCl19VHuw223mB5MezThOI5vXjDJkdoXMkeXhBbA8LykgLHdB9KrE+6J
270uL768mFV40dIzbyp0WANOL99otw/Jmg/VAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUNfect9SkMNJDqahfrvsWxHNRQYwwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L05mZWN0OVNrTU5KRHFh
aGZydnNXeEhOUlFZdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBABB7gPbddXfnv1lt
FeogQUNicLqQ5IkoJ24Zy9vcX3Ld5krwNf/Gm/+1MG2z2Fg/3NpaTWDELSAdKAPK
3GSEsuZ49Tel/FOgQKzrtF4Ow9qPSRGsrFcqVsbPBPxGwnVn3wG8wGDOGBakssIn
vHewAmJ5n4HKwvMtiBpNX8SlUkKYhJ3ldCrlavB/0aVmFMm5/w4WetbG72rTJJS+
Hh59OUujwv7/yuKs9z76z3PZm/kCepX2N5Dbr+5MMtJLrGkD/StfziUL2RzroZ58
a4/rGEbpHFJfynNri9cbAgcZzRth1Q6mupQPu4+N+EJaTkDFxfZr8rYlnTaMJ6Qb
rhfgdtI=
-----END CERTIFICATE-----
Generated at Fri Apr 11 12:09:55 2025 by rpki-client