Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/ZbR_IHMHm3H2TIyBrvQO5fuWJJc.roa
File: ZbR_IHMHm3H2TIyBrvQO5fuWJJc.roa (raw, json)
Hash identifier: /XEeIy6G/IJGFsF0q8+Puc+UZfem0y5Lp5s9u7Ao9iM=
Subject key identifier: 65:B4:7F:20:73:07:9B:71:F6:4C:8C:81:AE:F4:0E:E5:FB:96:24:97
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5487
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ZbR_IHMHm3H2TIyBrvQO5fuWJJc.roa
Signing time: Sat 11 May 2024 06:54:03 +0000
ROA not before: Sat 11 May 2024 06:54:03 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21639 (0x5487)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 11 06:54:03 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=65B47F2073079B71F64C8C81AEF40EE5FB962497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0f:63:8c:3c:c1:b8:3e:71:aa:1d:5a:30:d7:
cc:5d:04:0a:e6:bc:b8:45:c5:26:a9:11:f6:13:3c:
f3:a8:90:83:f6:e4:7e:a8:7a:ef:6b:b0:23:0c:04:
81:bc:41:2a:36:84:56:a3:00:a5:a0:64:bd:0e:7b:
ea:d7:c3:7f:ba:e2:f3:01:d5:5a:09:b9:01:12:be:
92:4d:c7:9a:41:89:eb:4f:4e:a7:d9:6f:5a:80:2b:
cd:34:5b:92:b1:1c:30:ea:7a:b8:df:80:ac:41:1c:
93:65:ab:82:dd:78:56:f6:2b:07:f2:11:43:c7:e9:
fe:f4:0e:d6:4a:0d:a5:84:30:ed:41:23:10:f6:fc:
ed:05:3d:9d:90:42:47:12:af:47:11:3f:c9:bb:88:
36:74:3e:91:80:8c:3f:b1:36:eb:fe:6c:e4:d6:24:
8f:bc:6f:a1:80:55:a0:d7:53:36:05:63:1f:62:73:
c1:f8:21:fc:db:44:90:7e:d9:45:bc:c6:bb:b6:85:
56:45:ce:04:c5:31:f8:46:7a:e3:a3:14:cc:9c:59:
94:c1:4a:4d:f9:52:74:3b:68:14:93:c1:85:4d:c2:
24:7f:fb:e8:8f:e6:63:46:0f:fa:0e:1d:83:2d:86:
8a:1f:1b:6d:f6:b6:8a:56:f7:86:48:8a:67:df:ee:
b4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B4:7F:20:73:07:9B:71:F6:4C:8C:81:AE:F4:0E:E5:FB:96:24:97
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/ZbR_IHMHm3H2TIyBrvQO5fuWJJc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
41:2a:80:3e:22:ec:69:5e:9e:31:76:a2:2c:61:b9:ba:28:68:
4f:b9:06:ec:e9:a8:e3:3b:a2:08:28:cd:c3:b7:09:b7:21:85:
6d:28:6e:f9:48:0d:e8:90:b4:4d:1e:9e:02:a8:1b:4f:f0:08:
0c:67:55:b5:2b:59:9b:52:98:19:3c:72:a7:62:de:e0:ec:b2:
db:e5:62:76:b8:2c:2d:34:b0:22:56:63:bb:4f:6f:2f:61:94:
e1:32:4b:90:51:cd:35:b1:62:15:a5:75:5b:1b:68:c9:93:6b:
59:3f:35:62:f0:34:52:56:98:b5:2b:8b:d5:f4:e7:d4:4b:d5:
fe:8b:28:38:6b:1a:69:ee:68:80:05:fc:fe:7c:b6:d3:85:86:
e2:28:84:37:ae:6a:69:fc:47:0c:95:9e:5b:62:41:22:df:e1:
0c:c1:c4:29:45:ce:35:37:2b:fe:f5:59:a6:cd:88:1e:bb:ae:
b9:9c:4b:71:4f:e1:5f:fd:26:09:75:5f:65:8d:cb:64:4f:3c:
79:67:a7:33:1f:2d:6e:a9:25:0f:0a:26:67:c5:96:91:db:ed:
f6:22:f1:42:20:e4:e8:d2:28:21:f0:74:1a:2e:d6:a0:0d:71:
2c:e8:67:b0:d5:5b:3f:16:bd:c4:4b:03:82:43:26:81:6a:b7:
3a:c6:4f:d3
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICVIcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MTEw
NjU0MDNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDY1QjQ3RjIwNzMwNzlC
NzFGNjRDOEM4MUFFRjQwRUU1RkI5NjI0OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDD2OMPMG4PnGqHVow18xdBArmvLhFxSapEfYTPPOokIP25H6o
eu9rsCMMBIG8QSo2hFajAKWgZL0Oe+rXw3+64vMB1VoJuQESvpJNx5pBietPTqfZ
b1qAK800W5KxHDDqerjfgKxBHJNlq4LdeFb2KwfyEUPH6f70DtZKDaWEMO1BIxD2
/O0FPZ2QQkcSr0cRP8m7iDZ0PpGAjD+xNuv+bOTWJI+8b6GAVaDXUzYFYx9ic8H4
IfzbRJB+2UW8xru2hVZFzgTFMfhGeuOjFMycWZTBSk35UnQ7aBSTwYVNwiR/++iP
5mNGD/oOHYMthoofG232topW94ZIimff7rRLAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUZbR/IHMHm3H2TIyBrvQO5fuWJJcwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1piUl9JSE1IbTNIMlRJ
eUJydlFPNWZ1V0pKYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAEEqgD4i7GlenjF2oixhubooaE+5Buzp
qOM7oggozcO3CbchhW0obvlIDeiQtE0engKoG0/wCAxnVbUrWZtSmBk8cqdi3uDs
stvlYna4LC00sCJWY7tPby9hlOEyS5BRzTWxYhWldVsbaMmTa1k/NWLwNFJWmLUr
i9X059RL1f6LKDhrGmnuaIAF/P58ttOFhuIohDeuamn8RwyVnltiQSLf4QzBxClF
zjU3K/71WabNiB67rrmcS3FP4V/9Jgl1X2WNy2RPPHlnpzMfLW6pJQ8KJmfFlpHb
7fYi8UIg5OjSKCHwdBou1qANcSzoZ7DVWz8WvcRLA4JDJoFqtzrGT9M=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:09:41 2025 by rpki-client