Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/6U6XbP0kPaHnssx8iPtX2c0dFuI.roa
File: 6U6XbP0kPaHnssx8iPtX2c0dFuI.roa (raw, json)
Hash identifier: eW22MxGju2pJRCXMp2h0pSLcE5lXQ17AVG2+LZ9srM8=
Subject key identifier: E9:4E:97:6C:FD:24:3D:A1:E7:B2:CC:7C:88:FB:57:D9:CD:1D:16:E2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 51D9
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6U6XbP0kPaHnssx8iPtX2c0dFuI.roa
Signing time: Tue 07 May 2024 17:23:55 +0000
ROA not before: Tue 07 May 2024 17:23:55 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20953 (0x51d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 7 17:23:55 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E94E976CFD243DA1E7B2CC7C88FB57D9CD1D16E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:40:28:0e:86:81:6b:b0:62:70:3a:7d:ab:03:
9b:20:e5:63:7b:67:0c:df:34:88:f8:32:ad:d3:20:
d0:ef:25:8f:a5:c2:77:c9:5c:73:f4:cb:61:fe:af:
6b:f5:f8:15:ef:d3:90:7f:db:2a:b2:60:ff:94:77:
63:38:4f:88:3c:57:25:da:60:3f:bd:c3:1f:65:97:
fa:ab:1d:cb:7d:29:dd:bd:b8:09:dc:3b:ac:cc:ed:
02:35:78:5a:1c:de:b3:36:00:e6:13:e2:fc:5a:14:
bd:d7:5e:b7:d5:df:46:c4:06:b5:b4:a9:db:fd:b4:
fb:2c:87:8e:7b:1a:8f:af:4a:ec:d7:2d:7c:ed:c0:
6f:6b:31:5e:b1:83:1e:ad:ca:53:b9:64:c9:d7:6a:
10:93:c6:6d:8e:73:24:55:ab:8a:86:66:be:63:3f:
00:6b:19:d9:42:a6:87:43:1d:cf:fb:05:bd:5c:cb:
1c:28:7f:fb:9c:cb:fc:7f:96:e7:07:fc:31:09:16:
85:32:4b:6c:ee:01:f8:16:17:45:7e:e8:2b:a9:11:
e7:d3:a0:cd:c7:a6:ca:20:58:3d:8a:95:bc:0f:f1:
5e:92:05:07:80:ef:2d:38:c2:0d:52:82:44:f7:50:
5a:b1:4d:a5:03:52:70:35:80:11:74:18:8c:f4:54:
a3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:4E:97:6C:FD:24:3D:A1:E7:B2:CC:7C:88:FB:57:D9:CD:1D:16:E2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6U6XbP0kPaHnssx8iPtX2c0dFuI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
02:4c:b7:1c:27:43:77:b2:8d:5b:fe:98:f4:00:ce:2f:62:d7:
42:6a:19:b1:bf:1c:dc:57:96:7d:a8:bb:4e:e8:4d:57:0e:5d:
0c:a0:ca:50:fd:39:96:69:f6:03:2a:9d:eb:f3:f1:a4:03:bc:
4a:f3:19:df:a6:42:65:c2:11:f4:29:75:45:96:11:0e:c3:ef:
28:00:2d:89:0f:11:a9:91:94:4b:b8:e0:48:be:3e:2f:d4:40:
5d:bc:43:90:23:39:e0:44:bc:01:74:aa:c5:15:08:b1:aa:6c:
4d:19:4f:87:c0:64:38:2b:a4:80:3d:53:39:cc:f2:52:3c:c8:
37:f1:3b:e5:9a:2b:ff:2c:1e:08:bd:cc:8d:46:62:42:77:c7:
a6:a5:b1:39:2e:a0:0f:cb:dc:a7:e3:06:28:bd:3f:1a:d4:d0:
5e:c2:a9:33:52:a9:77:94:94:ed:1f:13:bf:d0:c6:2f:16:70:
c7:c5:42:dc:f8:cc:80:6c:ff:b3:bc:81:1c:c1:a2:ae:fc:db:
80:45:fc:81:2f:fb:0c:fe:f9:8b:97:67:0d:13:06:73:24:30:
8b:02:9a:03:0e:09:64:94:a9:cf:12:6b:89:ab:f2:04:88:9b:
da:09:80:31:82:09:4d:83:29:91:ed:25:0e:8b:f4:2a:64:f4:
0a:15:91:b3
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICUdkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDcx
NzIzNTVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEU5NEU5NzZDRkQyNDNE
QTFFN0IyQ0M3Qzg4RkI1N0Q5Q0QxRDE2RTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCrQCgOhoFrsGJwOn2rA5sg5WN7ZwzfNIj4Mq3TINDvJY+lwnfJ
XHP0y2H+r2v1+BXv05B/2yqyYP+Ud2M4T4g8VyXaYD+9wx9ll/qrHct9Kd29uAnc
O6zM7QI1eFoc3rM2AOYT4vxaFL3XXrfV30bEBrW0qdv9tPssh457Go+vSuzXLXzt
wG9rMV6xgx6tylO5ZMnXahCTxm2OcyRVq4qGZr5jPwBrGdlCpodDHc/7Bb1cyxwo
f/ucy/x/lucH/DEJFoUyS2zuAfgWF0V+6CupEefToM3HpsogWD2KlbwP8V6SBQeA
7y04wg1SgkT3UFqxTaUDUnA1gBF0GIz0VKP1AgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQU6U6XbP0kPaHnssx8iPtX2c0dFuIwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzZVNlhiUDBrUGFIbnNz
eDhpUHRYMmMwZEZ1SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAAJMtxwnQ3eyjVv+
mPQAzi9i10JqGbG/HNxXln2ou07oTVcOXQygylD9OZZp9gMqnevz8aQDvErzGd+m
QmXCEfQpdUWWEQ7D7ygALYkPEamRlEu44Ei+Pi/UQF28Q5AjOeBEvAF0qsUVCLGq
bE0ZT4fAZDgrpIA9UznM8lI8yDfxO+WaK/8sHgi9zI1GYkJ3x6alsTkuoA/L3Kfj
Bii9PxrU0F7CqTNSqXeUlO0fE7/Qxi8WcMfFQtz4zIBs/7O8gRzBoq7824BF/IEv
+wz++YuXZw0TBnMkMIsCmgMOCWSUqc8Sa4mr8gSIm9oJgDGCCU2DKZHtJQ6L9Cpk
9AoVkbM=
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:34:39 2025 by rpki-client