Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/0Z5lZTLI2hO3-Sw7zABWtCPy_wk.roa
File: 0Z5lZTLI2hO3-Sw7zABWtCPy_wk.roa (raw, json)
Hash identifier: ThneH3jVnxUSZEb5SmQBFAvvonz5cayRKxA5Rmm2l90=
Subject key identifier: D1:9E:65:65:32:C8:DA:13:B7:F9:2C:3B:CC:00:56:B4:23:F2:FF:09
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 529A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0Z5lZTLI2hO3-Sw7zABWtCPy_wk.roa
Signing time: Wed 08 May 2024 17:23:57 +0000
ROA not before: Wed 08 May 2024 17:23:57 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21146 (0x529a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 8 17:23:57 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D19E656532C8DA13B7F92C3BCC0056B423F2FF09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3b:a0:9d:14:60:82:ea:12:7b:6f:83:a3:f0:
b1:b9:f0:01:66:68:35:41:af:c9:6b:e0:3f:07:83:
9e:41:f1:98:be:06:48:9c:42:29:3f:c9:6f:9b:95:
38:b2:2c:c1:8e:75:46:8d:eb:4e:e1:16:fe:58:cf:
75:ab:b9:7a:19:a1:c0:16:0c:cd:5e:0c:e1:32:4b:
3d:7b:01:be:68:e6:56:c0:ba:c5:fb:96:c8:05:4d:
68:a2:c4:be:36:74:23:fe:22:fa:ab:2a:c5:41:7f:
ac:ea:77:a5:5b:dc:8d:e0:02:bc:91:b9:a5:df:ad:
77:1b:95:07:e2:d9:f1:2e:ca:01:94:ac:33:7a:d9:
03:6c:72:03:20:03:d4:93:b0:4b:b7:d1:80:98:f3:
bf:32:d4:0d:59:0d:bb:6d:51:e3:d8:4a:49:57:d7:
92:29:74:0f:b2:3a:6d:62:a2:b1:a6:8f:1d:9f:77:
1f:c4:25:26:7f:e7:74:8d:3c:99:24:73:6f:55:7a:
5d:0c:3d:af:a9:42:f1:5f:c3:3b:93:13:dc:f9:a1:
61:09:b8:b6:e3:e3:eb:3a:0c:e9:af:95:04:ae:c5:
20:04:fb:97:2f:4d:43:6f:cf:93:b5:79:e6:66:64:
86:35:07:d7:ce:40:15:2c:e3:07:d9:10:82:81:bd:
07:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9E:65:65:32:C8:DA:13:B7:F9:2C:3B:CC:00:56:B4:23:F2:FF:09
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/0Z5lZTLI2hO3-Sw7zABWtCPy_wk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
52:d7:fa:40:68:bd:71:34:84:f6:64:13:5a:b8:1c:a3:49:a9:
ae:f0:cc:e6:92:b9:54:32:46:ce:25:3d:5a:af:d4:e9:41:cf:
86:33:4a:3c:d3:8b:00:77:86:76:f8:ea:35:c3:1c:9e:42:fa:
a8:5d:3e:01:a2:ff:8b:44:1f:67:89:03:01:bc:61:71:8d:07:
29:fe:be:68:58:ad:6b:b0:e1:5c:ee:97:b3:c4:0e:18:c8:72:
34:ab:f8:5a:74:54:7a:82:e5:fb:c7:a3:00:2e:aa:2e:5d:39:
25:cf:32:0b:85:89:ad:bf:51:e4:ff:3a:37:ee:70:4c:0c:a4:
45:8e:b6:32:cc:36:1a:f1:04:85:6a:be:dc:0c:8a:55:ab:ff:
5b:bf:c4:5c:4f:17:00:52:a3:8b:60:02:71:18:96:fc:01:5c:
44:f1:09:fb:1d:d2:f1:35:fe:84:73:e7:ff:e1:95:eb:24:b7:
28:36:2c:e6:35:22:08:69:e8:2f:dd:4a:b4:38:b8:f9:65:87:
3d:cb:1b:19:c0:27:f3:01:ca:06:60:54:b5:ff:85:04:4a:90:
0a:52:53:6f:81:5e:95:db:41:35:d2:4c:16:5b:a1:87:b7:e1:
f7:7b:a2:55:67:64:b7:63:2b:19:36:2a:2d:54:1a:84:36:04:
02:cf:05:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:07:45 2025 by rpki-client