Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Rv7QsPppFOjiCriJKYxJXGn-SY0.roa
File: Rv7QsPppFOjiCriJKYxJXGn-SY0.roa (raw, json)
Hash identifier: YaUSkXgNfKesSCRTfwM3wlNMTbJS3SyBtEqJbJqdpf0=
Subject key identifier: 46:FE:D0:B0:FA:69:14:E8:E2:0A:B8:89:29:8C:49:5C:69:FE:49:8D
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 359D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Rv7QsPppFOjiCriJKYxJXGn-SY0.roa
Signing time: Sun 31 Mar 2024 01:52:09 +0000
ROA not before: Sun 31 Mar 2024 01:52:08 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13725 (0x359d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 31 01:52:08 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=46FED0B0FA6914E8E20AB889298C495C69FE498D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fc:88:4c:75:13:db:58:da:95:23:c4:3b:37:
79:d9:66:50:e2:ad:c2:3d:49:e0:2b:03:c2:97:e9:
b5:c5:83:9a:80:a8:71:e8:e9:6e:e4:7a:80:ef:26:
04:9e:d6:77:d3:71:54:80:92:69:6e:bf:88:e8:e5:
51:30:6a:fc:f5:34:80:c8:bc:10:ec:62:12:ae:22:
25:30:fd:05:1d:b2:7f:3f:d4:26:e6:38:05:a8:37:
8a:ef:c9:e1:bf:96:27:2a:47:5e:76:6f:01:91:94:
7a:09:ae:37:84:2f:f4:30:bf:dc:8f:c9:3f:b7:bc:
c4:1d:1a:8d:83:d6:3d:4e:01:55:86:61:e4:34:9a:
6c:6b:c3:1b:08:cf:41:64:b0:65:68:91:a5:4f:75:
f2:9c:55:87:a9:fe:27:f5:13:c6:08:0e:31:15:5d:
49:c5:db:66:c6:1b:df:0a:4d:42:04:38:6b:39:16:
dc:07:a0:1b:ee:10:88:73:f5:eb:e0:71:18:26:c2:
e5:9a:b7:df:18:56:d2:91:be:19:6e:36:6b:e2:20:
0e:f2:91:9f:68:f0:1f:ce:1e:f5:f7:98:b7:1e:6f:
2b:4e:67:54:b0:1b:e9:03:82:4e:e3:a5:4f:6e:39:
4c:f8:4e:f8:5a:30:5f:34:c3:c8:de:1b:13:55:f0:
3b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FE:D0:B0:FA:69:14:E8:E2:0A:B8:89:29:8C:49:5C:69:FE:49:8D
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Rv7QsPppFOjiCriJKYxJXGn-SY0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
4d:a0:fd:d5:e3:d8:29:cc:c6:23:dd:ab:b6:1a:ed:b1:24:13:
4a:fa:47:28:27:73:39:55:c3:2c:3e:af:a1:1d:f4:1b:02:36:
2c:09:76:c9:1b:02:be:7a:0a:8c:ef:fe:03:8c:6e:8d:63:b7:
09:cb:97:23:0e:60:74:9a:4e:ac:07:a5:68:ea:73:8b:71:e0:
c3:ee:fa:af:f7:73:c3:b3:dc:f9:6e:a3:29:38:10:7d:77:35:
fb:36:aa:69:d7:58:19:9f:5b:a5:21:47:3b:13:13:29:b6:2d:
d8:96:93:0b:ed:30:83:af:18:68:b3:fb:67:bb:c7:c7:a5:25:
ed:53:fb:2f:ed:ce:ea:41:04:de:a5:83:b1:da:f1:8e:2c:0e:
60:ad:42:ff:d4:8a:8d:1a:f7:1e:4f:27:4c:cc:d7:4e:ab:c1:
a0:7e:a8:17:88:79:bd:a5:e8:cb:99:9e:b7:9e:19:1a:6b:48:
30:3a:42:ca:65:85:a6:61:cb:22:0b:f5:a9:b4:98:da:70:17:
e7:d2:bc:81:51:c4:91:3b:1a:ba:c5:85:f0:0c:ed:53:9a:b3:
f0:a1:e3:bf:af:8d:cd:b1:75:81:b6:e2:4e:dc:fd:63:be:e0:
30:9e:ff:ef:cf:ef:48:1b:a3:4e:a5:bb:70:7b:43:ff:ae:22:
db:e1:46:97
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICNZ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDAzMzEw
MTUyMDhaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDQ2RkVEMEIwRkE2OTE0
RThFMjBBQjg4OTI5OEM0OTVDNjlGRTQ5OEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCe/IhMdRPbWNqVI8Q7N3nZZlDircI9SeArA8KX6bXFg5qAqHHo
6W7keoDvJgSe1nfTcVSAkmluv4jo5VEwavz1NIDIvBDsYhKuIiUw/QUdsn8/1Cbm
OAWoN4rvyeG/licqR152bwGRlHoJrjeEL/Qwv9yPyT+3vMQdGo2D1j1OAVWGYeQ0
mmxrwxsIz0FksGVokaVPdfKcVYep/if1E8YIDjEVXUnF22bGG98KTUIEOGs5FtwH
oBvuEIhz9evgcRgmwuWat98YVtKRvhluNmviIA7ykZ9o8B/OHvX3mLcebytOZ1Sw
G+kDgk7jpU9uOUz4TvhaMF80w8jeGxNV8DvdAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQURv7QsPppFOjiCriJKYxJXGn+SY0wHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1J2N1FzUHBwRk9qaUNy
aUpLWXhKWEduLVNZMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAE2g/dXj2CnMxiPd
q7Ya7bEkE0r6RygnczlVwyw+r6Ed9BsCNiwJdskbAr56Cozv/gOMbo1jtwnLlyMO
YHSaTqwHpWjqc4tx4MPu+q/3c8Oz3Pluoyk4EH13Nfs2qmnXWBmfW6UhRzsTEym2
LdiWkwvtMIOvGGiz+2e7x8elJe1T+y/tzupBBN6lg7Ha8Y4sDmCtQv/Uio0a9x5P
J0zM106rwaB+qBeIeb2l6MuZnreeGRprSDA6QsplhaZhyyIL9am0mNpwF+fSvIFR
xJE7GrrFhfAM7VOas/Ch47+vjc2xdYG24k7c/WO+4DCe/+/P70gbo06lu3B7Q/+u
ItvhRpc=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:36:16 2025 by rpki-client