Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/TjQa6mW6sIsDRXsBuaZyEHnmQ_A.roa
File: TjQa6mW6sIsDRXsBuaZyEHnmQ_A.roa (raw, json)
Hash identifier: o28F0UFqZ4+Uf8l7yK1zyaBVgChl4HQu9Bd05IGD6dI=
Subject key identifier: 4E:34:1A:EA:65:BA:B0:8B:03:45:7B:01:B9:A6:72:10:79:E6:43:F0
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 35B1
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/TjQa6mW6sIsDRXsBuaZyEHnmQ_A.roa
Signing time: Sun 31 Mar 2024 04:22:09 +0000
ROA not before: Sun 31 Mar 2024 04:22:09 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13745 (0x35b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 31 04:22:09 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4E341AEA65BAB08B03457B01B9A6721079E643F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:14:a7:c4:4f:00:34:cc:8e:d0:29:03:d8:87:
89:76:7e:1c:50:c2:b3:7a:89:ba:0f:b8:26:be:1f:
a7:ec:e4:91:45:14:91:a3:f8:b9:d9:86:60:b4:d1:
23:ba:b4:2d:ae:4d:d7:65:18:23:f0:18:a8:6f:e2:
37:f7:4e:32:3e:67:15:7d:d3:b7:31:bd:f9:30:a9:
64:4b:2c:4b:4a:67:ba:65:51:cb:85:68:19:2e:1c:
08:52:df:49:d4:f5:44:44:73:a3:25:a2:0b:6c:dd:
a3:fc:7b:3e:e2:43:c4:ca:2d:09:a0:0f:06:20:68:
f6:b6:b3:c0:f5:ad:e2:f8:96:08:9d:65:80:df:7b:
58:f2:68:f2:88:e2:b5:c4:81:bf:b2:1d:fe:34:ca:
dc:d0:21:d3:ae:dd:0d:09:3f:16:32:5d:2a:29:78:
42:7f:e3:12:f1:f6:57:3e:9a:c5:37:7f:fb:21:c6:
8c:74:91:7b:65:5e:1b:0b:73:43:da:e2:55:42:a7:
8b:1a:22:82:79:79:f5:2a:d7:e9:24:37:b1:44:3b:
42:f3:40:11:af:e2:04:f6:2e:37:fd:7f:97:e5:de:
6c:a0:3c:56:18:f9:72:54:3c:23:65:fe:24:0a:20:
32:91:9a:31:02:44:e8:61:b8:90:75:30:49:a5:5f:
17:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:34:1A:EA:65:BA:B0:8B:03:45:7B:01:B9:A6:72:10:79:E6:43:F0
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/TjQa6mW6sIsDRXsBuaZyEHnmQ_A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
0e:e8:bb:92:57:b4:da:97:11:0d:e9:c8:f4:1d:c7:8e:28:fa:
04:cc:d6:18:a0:80:a1:e2:25:fd:7c:63:16:f8:ef:2d:13:db:
03:96:0f:3e:3a:46:10:a8:29:27:d9:c3:51:a7:2e:5e:fa:12:
10:03:45:3b:57:15:db:04:3d:23:0a:f9:b9:ca:78:1f:0e:67:
4e:5c:28:7f:5e:3e:05:28:1c:cc:0b:af:7a:e9:22:15:10:b3:
33:cb:af:1d:9c:bc:44:5f:e1:95:ce:2b:6f:a2:10:72:0b:94:
27:42:43:b2:4f:b3:8c:48:7b:87:51:a8:94:48:ec:2a:b1:0b:
60:f1:e5:97:09:09:53:9c:53:97:f3:ec:06:54:a6:ee:c6:b8:
dd:16:92:5d:18:69:2a:da:ab:2e:91:42:01:3f:35:24:84:dc:
a8:5a:86:f1:f9:90:0c:af:3f:f0:b3:87:cc:36:f9:65:e7:27:
e4:b2:df:b0:e8:05:e6:f3:db:69:76:3b:3f:ae:f5:7f:f5:08:
6b:63:69:ec:9d:f2:11:30:72:59:73:9a:cf:11:eb:97:c1:f5:
66:66:73:d8:1a:44:c6:c5:32:57:a3:42:02:db:06:62:cb:8d:
4c:51:a3:c7:3a:57:05:72:bc:91:9d:92:48:fb:ed:f5:81:46:
45:c3:a7:a1
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICNbEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDAzMzEw
NDIyMDlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDRFMzQxQUVBNjVCQUIw
OEIwMzQ1N0IwMUI5QTY3MjEwNzlFNjQzRjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOFKfETwA0zI7QKQPYh4l2fhxQwrN6iboPuCa+H6fs5JFFFJGj
+LnZhmC00SO6tC2uTddlGCPwGKhv4jf3TjI+ZxV907cxvfkwqWRLLEtKZ7plUcuF
aBkuHAhS30nU9UREc6Mlogts3aP8ez7iQ8TKLQmgDwYgaPa2s8D1reL4lgidZYDf
e1jyaPKI4rXEgb+yHf40ytzQIdOu3Q0JPxYyXSopeEJ/4xLx9lc+msU3f/shxox0
kXtlXhsLc0Pa4lVCp4saIoJ5efUq1+kkN7FEO0LzQBGv4gT2Ljf9f5fl3mygPFYY
+XJUPCNl/iQKIDKRmjECROhhuJB1MEmlXxcBAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUTjQa6mW6sIsDRXsBuaZyEHnmQ/AwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1RqUWE2bVc2c0lzRFJY
c0J1YVp5RUhubVFfQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAA7ou5JXtNqXEQ3p
yPQdx44o+gTM1higgKHiJf18Yxb47y0T2wOWDz46RhCoKSfZw1GnLl76EhADRTtX
FdsEPSMK+bnKeB8OZ05cKH9ePgUoHMwLr3rpIhUQszPLrx2cvERf4ZXOK2+iEHIL
lCdCQ7JPs4xIe4dRqJRI7CqxC2Dx5ZcJCVOcU5fz7AZUpu7GuN0Wkl0YaSraqy6R
QgE/NSSE3KhahvH5kAyvP/Czh8w2+WXnJ+Sy37DoBebz22l2Oz+u9X/1CGtjaeyd
8hEwcllzms8R65fB9WZmc9gaRMbFMlejQgLbBmLLjUxRo8c6VwVyvJGdkkj77fWB
RkXDp6E=
-----END CERTIFICATE-----
Generated at Thu Jun 5 20:28:17 2025 by rpki-client