Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/mzxetrhUE3NaU2rnP2BIURfK0wM.roa
File: mzxetrhUE3NaU2rnP2BIURfK0wM.roa (raw, json)
Hash identifier: C+V1AcZi1AO0OSOva74MSdTU1LXozI+0bNRCS7iKs6Q=
Subject key identifier: 9B:3C:5E:B6:B8:54:13:73:5A:53:6A:E7:3F:60:48:51:17:CA:D3:03
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4B8A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/mzxetrhUE3NaU2rnP2BIURfK0wM.roa
Signing time: Mon 29 Apr 2024 07:23:39 +0000
ROA not before: Mon 29 Apr 2024 07:23:39 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19338 (0x4b8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 29 07:23:39 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9B3C5EB6B85413735A536AE73F60485117CAD303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e8:2d:96:db:80:16:12:69:7e:90:a4:46:8f:
b5:e5:c5:11:bf:64:62:26:49:c7:c4:c2:f2:65:8b:
52:c8:e1:4b:93:16:dc:60:42:03:5d:97:09:59:4f:
f0:de:d2:d2:8d:9a:a7:ab:cc:6a:c8:7d:5d:b8:1b:
1c:73:26:6b:70:0b:c3:c9:40:23:d0:0b:78:34:67:
92:2d:a4:83:13:7e:d0:33:b8:b9:8e:11:61:db:56:
f9:28:bd:b5:57:f4:ee:1a:bd:91:59:95:ad:a9:80:
24:0c:4e:f6:6a:72:a0:51:64:4f:93:a5:5b:85:d3:
9d:9e:c3:7f:6d:dd:8b:09:66:fb:8d:b6:ff:9d:8c:
10:ed:8b:f0:6f:ca:1d:48:b1:96:a4:31:0c:ec:16:
f8:47:71:b0:04:c3:11:ef:f4:27:57:44:e5:8f:63:
4e:b7:9b:4e:d6:19:1c:23:3b:45:ac:6b:84:64:d8:
dd:6a:99:9d:0f:7c:85:15:aa:b0:a2:34:a6:b0:f5:
40:36:2f:b3:f4:95:b7:2f:bc:72:c6:df:43:f6:ed:
bd:50:a7:ad:ad:0c:10:fa:a3:99:d0:48:ba:b8:47:
9f:5f:3a:0f:c9:a7:69:67:ac:95:e4:92:91:ff:2c:
b9:91:5a:1a:55:ed:44:c9:d4:be:7d:17:c9:be:ae:
68:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:3C:5E:B6:B8:54:13:73:5A:53:6A:E7:3F:60:48:51:17:CA:D3:03
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/mzxetrhUE3NaU2rnP2BIURfK0wM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6c:1a:2f:47:94:57:ff:70:d0:fd:ae:cc:06:78:3a:98:4d:86:
2f:db:fc:02:48:a4:b5:07:53:3d:d2:1f:b8:91:0c:33:47:ba:
6a:3c:04:b2:8b:0b:17:17:a4:01:7a:39:a0:ed:34:f1:43:2c:
fa:1a:8e:c1:cf:b5:4b:96:24:39:00:3c:6d:69:41:f3:a4:a5:
4d:d8:21:5a:35:1a:a2:d7:20:11:0c:ad:99:a9:75:ea:0f:b9:
6f:b9:6c:69:45:20:29:44:05:0f:7c:a4:24:0d:ef:de:89:a7:
a2:77:76:2d:94:fe:d9:9d:85:ea:a9:38:d2:10:7b:a1:e6:d3:
33:13:f8:6f:ba:40:bf:ae:83:0f:e7:58:a7:7b:b1:5a:7e:cb:
af:76:03:dd:1a:3b:cb:2f:51:7f:81:b8:fc:3e:4b:86:8f:d1:
4e:6a:42:0c:01:f4:d4:30:03:ff:c2:aa:89:61:26:2a:9d:18:
e1:aa:ce:11:4c:b2:aa:78:ab:1c:83:6f:6e:be:50:58:63:9c:
21:c1:61:37:e2:ed:a6:41:94:f8:73:98:42:bc:cc:76:16:54:
0b:f7:63:64:ef:71:98:0e:59:a7:8a:36:9d:5c:41:15:b0:bd:
c9:68:6d:1a:bc:47:53:44:e2:41:27:8f:c1:f1:96:6d:f0:9e:
a3:fe:ec:a4
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICS4owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0Mjkw
NzIzMzlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDlCM0M1RUI2Qjg1NDEz
NzM1QTUzNkFFNzNGNjA0ODUxMTdDQUQzMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC16C2W24AWEml+kKRGj7XlxRG/ZGImScfEwvJli1LI4UuTFtxg
QgNdlwlZT/De0tKNmqerzGrIfV24GxxzJmtwC8PJQCPQC3g0Z5ItpIMTftAzuLmO
EWHbVvkovbVX9O4avZFZla2pgCQMTvZqcqBRZE+TpVuF052ew39t3YsJZvuNtv+d
jBDti/Bvyh1IsZakMQzsFvhHcbAEwxHv9CdXROWPY063m07WGRwjO0Wsa4Rk2N1q
mZ0PfIUVqrCiNKaw9UA2L7P0lbcvvHLG30P27b1Qp62tDBD6o5nQSLq4R59fOg/J
p2lnrJXkkpH/LLmRWhpV7UTJ1L59F8m+rmjTAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUmzxetrhUE3NaU2rnP2BIURfK0wMwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L216eGV0cmhVRTNOYVUy
cm5QMkJJVVJmSzB3TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAbBovR5RX/3DQ/a7MBng6mE2GL9v8Akik
tQdTPdIfuJEMM0e6ajwEsosLFxekAXo5oO008UMs+hqOwc+1S5YkOQA8bWlB86Sl
TdghWjUaotcgEQytmal16g+5b7lsaUUgKUQFD3ykJA3v3omnond2LZT+2Z2F6qk4
0hB7oebTMxP4b7pAv66DD+dYp3uxWn7Lr3YD3Ro7yy9Rf4G4/D5Lho/RTmpCDAH0
1DAD/8KqiWEmKp0Y4arOEUyyqnirHINvbr5QWGOcIcFhN+LtpkGU+HOYQrzMdhZU
C/djZO9xmA5Zp4o2nVxBFbC9yWhtGrxHU0TiQSePwfGWbfCeo/7spA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:47:17 2025 by rpki-client