Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Q3tLTA2ehtcjWaPavqFt29lemFM.roa
File: Q3tLTA2ehtcjWaPavqFt29lemFM.roa (raw, json)
Hash identifier: lN7nlSWFxtB+C9dvJKqQWXN7//8Ec0KU6lHatizM2k4=
Subject key identifier: 43:7B:4B:4C:0D:9E:86:D7:23:59:A3:DA:BE:A1:6D:DB:D9:5E:98:53
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 361E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Q3tLTA2ehtcjWaPavqFt29lemFM.roa
Signing time: Sun 31 Mar 2024 17:52:11 +0000
ROA not before: Sun 31 Mar 2024 17:52:11 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13854 (0x361e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 31 17:52:11 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=437B4B4C0D9E86D72359A3DABEA16DDBD95E9853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ae:b2:d1:7e:b3:eb:74:63:bd:c0:50:d6:e1:
8d:65:bd:0a:3d:fb:6d:29:3a:a0:f5:7a:8c:42:99:
42:32:f7:59:10:0d:29:2b:96:a1:f9:12:a4:2f:25:
cc:08:ed:5e:fd:1e:29:6a:bb:cf:02:f8:53:2f:62:
95:a6:85:31:29:86:e4:98:fc:88:82:86:90:8a:9f:
c8:4f:16:7b:fb:61:e5:39:2b:b8:ac:d7:95:6e:be:
b1:c0:32:ef:ea:42:db:f5:d4:6e:c4:b6:a6:88:8b:
2b:e6:2f:a1:f1:92:0e:e0:e6:99:b4:97:47:e9:66:
c1:13:4c:52:f1:cb:f5:86:30:81:5b:ad:6f:71:66:
1a:bb:4d:ca:b3:1b:84:c2:22:1b:33:6b:f3:53:bc:
b7:8e:fc:d9:03:e8:af:14:ce:10:b9:b5:bc:ff:41:
3b:fd:3e:df:d0:02:f5:7a:88:0e:c1:32:46:3f:a8:
98:52:a7:3c:3a:97:bc:24:58:8e:07:de:44:78:16:
3d:b8:db:3e:3c:fd:7b:63:7c:38:09:b2:8c:0e:02:
5d:16:2f:6a:65:53:2b:e1:e7:01:25:40:4c:26:4c:
a5:28:9f:5a:2a:c0:7c:be:2c:7a:a4:e6:88:ac:95:
82:59:a5:80:d1:74:74:c7:be:1d:64:1e:97:c0:ca:
e9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7B:4B:4C:0D:9E:86:D7:23:59:A3:DA:BE:A1:6D:DB:D9:5E:98:53
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Q3tLTA2ehtcjWaPavqFt29lemFM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a4:65:45:3b:8a:45:1c:94:4f:46:be:e0:02:73:ad:43:42:e2:
00:41:75:9d:26:42:37:7f:84:7e:8a:83:f9:af:b9:16:03:00:
18:b1:ed:37:ac:7b:ca:32:31:5a:54:4c:38:5c:1c:12:d5:ab:
75:9f:2a:dc:0f:96:fd:17:c7:09:b2:bd:55:8b:59:3e:6f:6e:
59:47:a7:e3:d8:73:30:dc:a0:b6:86:1c:22:85:26:a6:da:86:
7f:f3:6f:0c:75:90:f0:99:d9:1a:0e:6d:00:a6:96:cb:e2:41:
0e:39:eb:49:d8:1e:36:61:80:b9:bc:11:ec:ba:8a:b1:7c:de:
7d:78:4f:3a:35:5c:9b:0c:ce:da:d0:be:15:4a:39:2b:84:1f:
cf:f1:59:84:21:71:b4:5b:d2:51:80:cf:6e:b4:87:91:23:9a:
28:c6:42:5a:0e:d0:cf:bc:68:53:00:e4:b5:e1:39:49:58:de:
67:3b:58:2b:a1:de:09:4c:6e:c9:19:6f:05:e4:74:f5:6e:b3:
98:de:9b:ec:1f:3d:46:e6:a4:7a:1f:88:7b:96:52:27:50:00:
fd:9e:7f:d5:89:b7:0a:5c:6e:1d:83:71:56:3c:0e:4c:00:4e:
be:c8:4a:d0:5b:4d:ed:41:33:a7:dc:3c:04:b6:89:4b:d8:e8:
db:2b:dc:ee
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICNh4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDAzMzEx
NzUyMTFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDQzN0I0QjRDMEQ5RTg2
RDcyMzU5QTNEQUJFQTE2RERCRDk1RTk4NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+rrLRfrPrdGO9wFDW4Y1lvQo9+20pOqD1eoxCmUIy91kQDSkr
lqH5EqQvJcwI7V79Hilqu88C+FMvYpWmhTEphuSY/IiChpCKn8hPFnv7YeU5K7is
15VuvrHAMu/qQtv11G7EtqaIiyvmL6Hxkg7g5pm0l0fpZsETTFLxy/WGMIFbrW9x
Zhq7TcqzG4TCIhsza/NTvLeO/NkD6K8UzhC5tbz/QTv9Pt/QAvV6iA7BMkY/qJhS
pzw6l7wkWI4H3kR4Fj242z48/XtjfDgJsowOAl0WL2plUyvh5wElQEwmTKUon1oq
wHy+LHqk5oislYJZpYDRdHTHvh1kHpfAyum5AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUQ3tLTA2ehtcjWaPavqFt29lemFMwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1EzdExUQTJlaHRjaldh
UGF2cUZ0MjlsZW1GTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEApGVFO4pFHJRPRr7gAnOtQ0LiAEF1nSZC
N3+EfoqD+a+5FgMAGLHtN6x7yjIxWlRMOFwcEtWrdZ8q3A+W/RfHCbK9VYtZPm9u
WUen49hzMNygtoYcIoUmptqGf/NvDHWQ8JnZGg5tAKaWy+JBDjnrSdgeNmGAubwR
7LqKsXzefXhPOjVcmwzO2tC+FUo5K4Qfz/FZhCFxtFvSUYDPbrSHkSOaKMZCWg7Q
z7xoUwDkteE5SVjeZztYK6HeCUxuyRlvBeR09W6zmN6b7B89Ruakeh+Ie5ZSJ1AA
/Z5/1Ym3ClxuHYNxVjwOTABOvshK0FtN7UEzp9w8BLaJS9jo2yvc7g==
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:47:21 2025 by rpki-client