Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/vUFqN1JgBsiUArBXEetmmh5DNOI.roa
File: vUFqN1JgBsiUArBXEetmmh5DNOI.roa (raw, json)
Hash identifier: W51abnINk+xXB6EMrST0ZbIJYaQ1I/AQvEN/d1h6wh0=
Subject key identifier: BD:41:6A:37:52:60:06:C8:94:02:B0:57:11:EB:66:9A:1E:43:34:E2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4011
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vUFqN1JgBsiUArBXEetmmh5DNOI.roa
Signing time: Sun 14 Apr 2024 00:22:55 +0000
ROA not before: Sun 14 Apr 2024 00:22:55 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16401 (0x4011)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 14 00:22:55 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BD416A37526006C89402B05711EB669A1E4334E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1d:25:c3:e6:6d:f4:37:76:be:00:7e:b9:d4:
6c:c1:3d:1c:d4:28:87:bb:f8:95:4a:ed:d2:e6:1a:
28:ea:2c:06:0d:ed:47:77:73:fd:96:81:cf:f5:24:
2c:97:2c:84:19:ff:71:4f:f1:de:e3:72:66:d4:bd:
52:87:cc:99:a3:e4:f5:8e:70:9b:b1:08:2a:79:31:
70:f0:4c:31:11:53:be:0a:3d:c5:bd:fc:60:07:52:
c8:c8:47:bc:29:2a:b2:a6:72:da:ce:21:c6:d2:82:
ab:6d:22:ee:e2:96:32:2e:b0:6f:29:ce:ec:cf:55:
78:81:d1:36:26:a1:f3:d9:5c:b7:b3:5d:c6:ca:ce:
43:00:33:dc:3a:d7:53:c5:91:93:95:fb:9d:5d:a8:
09:bb:ed:f9:ec:4d:e0:83:8c:a2:a1:59:18:6b:6d:
1c:ae:22:53:21:76:cd:bf:8c:a9:ec:14:26:6c:05:
2f:00:0a:88:27:39:0e:c7:6a:da:6e:20:bd:ca:02:
ef:19:28:b1:0b:a0:e2:54:a6:92:76:97:44:b6:de:
89:16:29:f3:d8:ea:db:ba:ed:3d:9a:2e:d4:43:83:
df:5b:88:53:82:d9:ac:a9:89:3b:21:b3:1e:08:38:
a9:96:43:d9:91:41:39:04:02:e6:8e:f7:09:3f:d7:
9f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:41:6A:37:52:60:06:C8:94:02:B0:57:11:EB:66:9A:1E:43:34:E2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vUFqN1JgBsiUArBXEetmmh5DNOI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
04:8d:2c:a3:71:54:9f:e2:95:bc:81:cf:52:23:bf:95:d8:fc:
bb:9f:b3:82:9a:5d:ce:d6:09:32:87:68:70:f1:b4:b8:12:2f:
cd:d3:20:bd:96:e7:dd:56:a5:29:eb:a8:58:12:fa:bb:5e:b3:
2e:45:b1:ed:db:51:b9:8b:be:88:07:fd:d8:db:cb:f7:a0:e6:
fc:ac:7f:bc:f2:b2:4b:40:6d:c2:fc:97:58:bf:2c:7a:e9:8e:
2e:2a:1f:b9:11:04:57:db:07:b3:42:18:35:c2:4d:9a:04:5e:
25:5d:7e:bf:33:41:93:92:30:bd:4f:12:7f:d3:c0:79:5e:36:
54:31:19:31:c5:b8:f7:7a:24:4d:c3:b9:0f:69:72:84:e8:12:
cf:04:ac:3c:52:2a:3b:19:d0:5c:26:50:87:8a:e9:dc:b6:24:
b4:ac:d9:be:95:3d:78:c5:3d:fb:a9:31:c6:82:a6:5e:ac:70:
c9:2e:b4:1c:10:d4:d4:a1:a4:30:51:35:ea:4f:8f:ef:b2:d2:
6e:6c:eb:26:9a:87:0b:f2:58:87:9f:d4:d4:e9:f5:74:2e:3b:
52:4e:d7:ed:9a:05:08:9d:38:40:ec:bc:79:0f:ff:ba:a9:2c:
5e:55:58:af:4b:d0:88:b2:36:53:fb:9f:29:80:8c:c0:94:f4:
ed:89:7e:96
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICQBEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTQw
MDIyNTVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEJENDE2QTM3NTI2MDA2
Qzg5NDAyQjA1NzExRUI2NjlBMUU0MzM0RTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpHSXD5m30N3a+AH651GzBPRzUKIe7+JVK7dLmGijqLAYN7Ud3
c/2Wgc/1JCyXLIQZ/3FP8d7jcmbUvVKHzJmj5PWOcJuxCCp5MXDwTDERU74KPcW9
/GAHUsjIR7wpKrKmctrOIcbSgqttIu7iljIusG8pzuzPVXiB0TYmofPZXLezXcbK
zkMAM9w611PFkZOV+51dqAm77fnsTeCDjKKhWRhrbRyuIlMhds2/jKnsFCZsBS8A
CognOQ7HatpuIL3KAu8ZKLELoOJUppJ2l0S23okWKfPY6tu67T2aLtRDg99biFOC
2aypiTshsx4IOKmWQ9mRQTkEAuaO9wk/15/3AgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUvUFqN1JgBsiUArBXEetmmh5DNOIwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3ZVRnFOMUpnQnNpVUFy
QlhFZXRtbWg1RE5PSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAASNLKNxVJ/ilbyB
z1Ijv5XY/Lufs4KaXc7WCTKHaHDxtLgSL83TIL2W591WpSnrqFgS+rtesy5Fse3b
UbmLvogH/djby/eg5vysf7zysktAbcL8l1i/LHrpji4qH7kRBFfbB7NCGDXCTZoE
XiVdfr8zQZOSML1PEn/TwHleNlQxGTHFuPd6JE3DuQ9pcoToEs8ErDxSKjsZ0Fwm
UIeK6dy2JLSs2b6VPXjFPfupMcaCpl6scMkutBwQ1NShpDBRNepPj++y0m5s6yaa
hwvyWIef1NTp9XQuO1JO1+2aBQidOEDsvHkP/7qpLF5VWK9L0IiyNlP7nymAjMCU
9O2JfpY=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:45:38 2025 by rpki-client