Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Z9POgFtuILqbx5ZSBqyOP5kwvq0.roa
File: Z9POgFtuILqbx5ZSBqyOP5kwvq0.roa (raw, json)
Hash identifier: LDmLPLKcxMPqNRrmepK+/iMqeUN03ABMUqb2fBx/5ds=
Subject key identifier: 67:D3:CE:80:5B:6E:20:BA:9B:C7:96:52:06:AC:8E:3F:99:30:BE:AD
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4A69
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Z9POgFtuILqbx5ZSBqyOP5kwvq0.roa
Signing time: Sat 27 Apr 2024 19:23:22 +0000
ROA not before: Sat 27 Apr 2024 19:23:22 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19049 (0x4a69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 27 19:23:22 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=67D3CE805B6E20BA9BC7965206AC8E3F9930BEAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e1:b9:58:a1:5e:eb:6a:de:96:26:03:ad:fa:
64:b9:91:94:57:93:bb:11:f7:65:6f:cc:9a:a9:fe:
9a:9a:b8:88:a0:38:d0:b6:bb:d4:78:72:44:3b:ac:
0e:0e:94:7f:a2:5b:c8:bb:c3:6c:0f:70:8e:4b:ee:
da:ba:0e:b3:1d:01:49:bc:18:2d:f1:e0:f7:b6:7d:
be:12:1c:3e:92:03:87:57:f3:4f:d3:d3:43:3f:73:
8c:99:b5:e0:27:d6:ff:66:ae:f4:2b:c4:e8:8d:df:
eb:cc:54:2f:28:f9:fb:f6:04:f5:a8:d0:2f:26:b7:
6d:a8:7b:f3:9f:ac:75:43:fc:48:46:12:53:3d:62:
67:84:c9:36:3b:9d:09:4a:7e:59:3d:0a:a9:60:94:
5f:60:b9:44:4d:b0:49:c9:79:a4:d3:46:30:5e:fa:
3a:8d:f9:52:5f:08:ad:c2:ba:ca:55:5a:a1:cd:4d:
fb:66:e5:8e:c0:9d:3d:96:a4:f8:f0:5b:42:88:84:
aa:32:8f:f8:ae:c6:05:5e:93:86:10:43:8e:66:32:
fb:41:ce:82:b9:ba:00:7b:cc:1d:fd:2c:21:51:20:
0a:ff:3d:5c:4f:b7:f7:f3:22:fd:0d:3b:c5:2d:06:
fa:10:b1:a9:48:b5:09:d6:5c:d0:c1:75:ed:87:b8:
01:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D3:CE:80:5B:6E:20:BA:9B:C7:96:52:06:AC:8E:3F:99:30:BE:AD
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Z9POgFtuILqbx5ZSBqyOP5kwvq0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
63:72:40:c7:a4:ed:ff:47:01:b0:96:d8:da:42:33:cb:75:ff:
31:c0:f5:fb:a2:70:fe:a1:94:dc:30:a5:dc:9c:9f:c8:d3:81:
9a:50:33:0b:6a:6e:71:b3:62:59:a1:09:80:96:a4:93:3a:c4:
0e:df:59:14:46:71:b8:24:14:b0:ff:39:4b:56:1f:50:26:0c:
a9:53:4b:4a:e9:5f:fb:e5:99:bc:86:7c:1c:77:2d:8a:bc:0a:
6b:2d:d1:19:16:0c:a1:de:c7:20:38:da:77:3a:7d:53:8a:06:
81:99:d5:38:98:35:9a:80:96:7d:f8:44:4f:59:9d:8b:e1:73:
b1:ed:38:44:da:27:d8:7a:55:51:82:b5:ef:e4:ec:d1:73:d0:
a8:b2:f8:40:ec:38:fd:5f:33:5b:7d:d9:80:8c:63:42:1f:e8:
68:32:56:c9:45:a4:1f:58:84:d5:73:04:1a:f2:63:25:1f:cc:
5f:7e:78:a8:93:66:68:15:ae:37:72:4f:90:c9:10:30:ea:91:
2f:d5:56:87:6b:21:35:cd:b3:4c:89:43:d8:8f:dc:fa:9e:7d:
1a:76:4e:03:2f:c3:8e:68:f5:32:67:ea:dc:0f:11:28:47:20:
86:3b:4a:51:d8:9f:0f:be:71:9d:aa:4b:c3:e0:3f:44:4b:f6:
5f:86:e0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:55:43 2025 by rpki-client