Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/_RT9vk3zTkEPf5dryLUhB-71rvA.roa
File: _RT9vk3zTkEPf5dryLUhB-71rvA.roa (raw, json)
Hash identifier: YSnXNyYQXasA5HcLsjEqWfpAs34k04UWglx8zY0QQXU=
Subject key identifier: FD:14:FD:BE:4D:F3:4E:41:0F:7F:97:6B:C8:B5:21:07:EE:F5:AE:F0
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3591
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_RT9vk3zTkEPf5dryLUhB-71rvA.roa
Signing time: Sun 31 Mar 2024 00:22:09 +0000
ROA not before: Sun 31 Mar 2024 00:22:09 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13713 (0x3591)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 31 00:22:09 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FD14FDBE4DF34E410F7F976BC8B52107EEF5AEF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d9:5f:c7:b0:13:f2:5f:7d:74:b3:4e:52:a7:
c2:54:5d:cd:ef:54:0e:d7:7a:2a:f0:cd:bd:72:d1:
11:28:bf:d0:d0:a0:18:78:e0:92:08:bd:d6:a7:f4:
84:ba:52:36:40:0e:a9:cd:a6:74:12:3b:9e:f5:f9:
31:6e:03:56:20:20:fd:24:33:7c:bd:d7:be:ad:13:
30:c8:be:de:6e:6e:3b:01:fb:06:c4:2f:7c:6d:18:
9f:7a:e0:e2:b4:6e:e0:a4:e3:f0:35:b7:56:1b:fc:
29:c7:51:7c:58:1f:ff:6d:9b:bb:7f:f0:dd:1d:7e:
3e:46:80:41:6e:6c:4b:86:38:f8:aa:69:f7:9f:68:
14:e2:94:8c:03:2f:84:25:7b:9c:ac:d2:ec:c5:9c:
3a:46:ee:3d:2a:da:89:67:ab:c1:fc:55:8e:12:68:
74:3d:2e:0f:9c:4f:6e:ed:a4:d7:22:00:5e:8e:16:
22:9d:60:3e:8f:b5:cd:ba:5e:33:2c:ee:64:63:d2:
b8:d0:d5:6e:38:ab:01:59:6e:8c:a9:de:66:8c:ae:
b4:0c:70:1e:f9:e5:f2:b9:b1:4d:4f:cf:bb:02:27:
18:f7:67:8c:e9:86:ad:19:32:3f:20:ba:d5:b0:42:
a2:b1:a0:54:51:7d:fa:18:5d:22:05:d1:d5:31:9a:
fb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:14:FD:BE:4D:F3:4E:41:0F:7F:97:6B:C8:B5:21:07:EE:F5:AE:F0
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_RT9vk3zTkEPf5dryLUhB-71rvA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
5f:a4:23:46:2a:b1:4a:7b:96:81:b4:8e:eb:15:30:c2:6a:1c:
c8:d5:26:f2:07:78:95:20:f9:36:64:16:06:ee:30:a7:2b:ef:
57:36:3a:ef:6e:9a:a8:b8:a2:40:09:1f:70:8a:fa:b1:6c:57:
04:f1:3c:17:95:a3:06:5e:eb:6f:11:6d:93:43:e4:cf:04:1d:
64:84:d9:7d:69:5a:4a:35:6a:f9:c2:12:75:f6:5d:02:3f:33:
86:22:73:4f:c6:0e:5f:75:71:6c:50:34:d6:2b:af:9f:e1:ea:
51:33:b8:a6:83:7c:56:c7:87:5e:d6:1c:4d:f7:05:60:1b:c5:
f9:6a:e8:00:e4:b4:61:f3:8e:74:d0:4b:5e:07:ce:cc:7d:c5:
bd:7d:1c:75:2c:a4:fd:f0:c1:7a:78:2e:cb:9a:66:e5:2c:04:
03:bc:44:1d:58:b2:56:60:e0:9f:e3:4f:b9:b8:aa:4f:18:d5:
9a:c6:2b:84:84:2e:41:48:83:7f:b6:9c:6e:d1:69:86:2f:f6:
f4:75:52:d1:f2:7a:7f:9d:8a:45:5d:6b:ae:65:cc:95:cf:9f:
55:5f:06:82:15:dc:b6:28:fc:7e:45:38:e8:1c:01:dd:c4:c7:
bc:d7:e0:f7:7a:52:61:3c:09:3e:c3:f5:12:36:58:e7:ae:c2:
7a:d2:a4:a9
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICNZEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDAzMzEw
MDIyMDlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEZEMTRGREJFNERGMzRF
NDEwRjdGOTc2QkM4QjUyMTA3RUVGNUFFRjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDn2V/HsBPyX310s05Sp8JUXc3vVA7Xeirwzb1y0REov9DQoBh4
4JIIvdan9IS6UjZADqnNpnQSO571+TFuA1YgIP0kM3y9176tEzDIvt5ubjsB+wbE
L3xtGJ964OK0buCk4/A1t1Yb/CnHUXxYH/9tm7t/8N0dfj5GgEFubEuGOPiqafef
aBTilIwDL4Qle5ys0uzFnDpG7j0q2olnq8H8VY4SaHQ9Lg+cT27tpNciAF6OFiKd
YD6Ptc26XjMs7mRj0rjQ1W44qwFZboyp3maMrrQMcB755fK5sU1Pz7sCJxj3Z4zp
hq0ZMj8gutWwQqKxoFRRffoYXSIF0dUxmvsBAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQU/RT9vk3zTkEPf5dryLUhB+71rvAwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L19SVDl2azN6VGtFUGY1
ZHJ5TFVoQi03MXJ2QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAF+kI0YqsUp7loG0
jusVMMJqHMjVJvIHeJUg+TZkFgbuMKcr71c2Ou9umqi4okAJH3CK+rFsVwTxPBeV
owZe628RbZND5M8EHWSE2X1pWko1avnCEnX2XQI/M4Yic0/GDl91cWxQNNYrr5/h
6lEzuKaDfFbHh17WHE33BWAbxflq6ADktGHzjnTQS14Hzsx9xb19HHUspP3wwXp4
LsuaZuUsBAO8RB1YslZg4J/jT7m4qk8Y1ZrGK4SELkFIg3+2nG7RaYYv9vR1UtHy
en+dikVda65lzJXPn1VfBoIV3LYo/H5FOOgcAd3Ex7zX4Pd6UmE8CT7D9RI2WOeu
wnrSpKk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:33 2024 by rpki-client on console-fra.rpki-client.org