Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/9MJmL015E3KA74NT9wYfCpLxKKk.roa
File: 9MJmL015E3KA74NT9wYfCpLxKKk.roa (raw, json)
Hash identifier: XPkZtZmsru3XUqCI+m5RDVgIilvX5tgK3mdcmAR22pU=
Subject key identifier: F4:C2:66:2F:4D:79:13:72:80:EF:83:53:F7:06:1F:0A:92:F1:28:A9
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3B83
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9MJmL015E3KA74NT9wYfCpLxKKk.roa
Signing time: Sun 07 Apr 2024 22:22:37 +0000
ROA not before: Sun 07 Apr 2024 22:22:37 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15235 (0x3b83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 7 22:22:37 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F4C2662F4D79137280EF8353F7061F0A92F128A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:a5:9f:aa:7a:00:3d:ef:1f:8d:12:45:99:8c:
59:91:45:05:98:16:1b:55:f7:62:12:c2:b2:08:57:
77:64:91:2c:fc:c4:3e:fd:35:59:06:63:22:a5:9c:
52:9b:c9:d4:6a:53:66:53:c2:ef:29:ea:f1:c6:02:
67:ea:9d:2d:67:30:c4:75:75:36:58:38:de:a8:9b:
b0:84:5d:56:20:00:9a:75:96:c4:65:3f:e1:69:b1:
cc:b3:0e:c9:ad:fc:f8:62:b6:26:24:5f:7c:a6:15:
e7:65:fa:28:43:17:34:19:95:c7:aa:c9:4f:59:f7:
c7:6b:34:d7:08:95:f4:fb:33:78:b6:3c:97:3f:b2:
2c:83:33:3f:2b:e3:c1:40:8b:c8:1a:63:f7:0e:f6:
5d:0d:a8:0e:74:7d:67:7d:12:73:f8:a7:02:70:13:
3a:85:e7:73:56:45:ea:cb:68:9d:fb:98:f6:05:59:
bc:12:8e:9a:72:39:a5:67:a1:a5:5f:b3:67:d1:3a:
43:5c:7c:87:54:17:28:bc:24:fa:ef:29:6b:32:e6:
70:b0:e8:68:9c:36:10:cd:fe:df:a5:20:7c:43:11:
87:e8:ea:74:f6:3a:08:64:ed:9f:18:44:e0:41:fe:
18:3b:bc:5b:3b:15:28:03:30:a2:93:32:5b:fa:4e:
40:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C2:66:2F:4D:79:13:72:80:EF:83:53:F7:06:1F:0A:92:F1:28:A9
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/9MJmL015E3KA74NT9wYfCpLxKKk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
61:f5:14:9c:64:10:2b:d0:38:17:1d:84:b6:73:43:4f:5f:33:
81:25:fd:67:11:25:64:6d:31:9d:3e:61:b5:2c:b6:97:12:4c:
4a:76:a3:6a:af:10:3d:7e:02:2a:df:9d:0e:07:f6:81:fb:7e:
91:68:c2:b0:b1:d8:13:e9:cb:b6:d6:70:3c:ba:d3:e5:a8:29:
aa:5a:5d:72:e6:51:e8:7d:6f:8d:5d:3d:b6:c2:e1:39:aa:29:
7a:5e:cc:75:cc:23:bf:46:84:91:64:b7:bc:c9:67:d2:24:57:
9a:f8:ea:99:a2:c3:50:7d:f6:e1:c5:dc:a6:ee:98:3c:4a:e6:
30:5b:94:b0:b0:d6:51:b7:2c:81:ee:10:0a:3f:5c:2b:7e:b2:
8a:51:5e:2b:c3:1d:8b:57:69:9b:63:0f:f1:03:0b:29:61:80:
69:f5:88:02:e3:12:85:5e:c0:87:19:e4:7e:34:25:7c:53:62:
7c:c2:c3:d1:8d:09:d7:fa:5f:29:52:b7:11:0f:68:9d:8e:7b:
2f:a7:d2:23:68:8b:14:97:84:92:b1:c5:98:2a:24:47:ca:5c:
8c:ba:85:48:f0:02:0f:7c:9c:82:bc:83:81:50:44:b6:4b:e0:
7e:e1:3d:ef:c1:92:78:32:70:44:cf:25:23:57:79:90:24:0e:
f3:17:73:30
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICO4MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDcy
MjIyMzdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEY0QzI2NjJGNEQ3OTEz
NzI4MEVGODM1M0Y3MDYxRjBBOTJGMTI4QTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD5pZ+qegA97x+NEkWZjFmRRQWYFhtV92ISwrIIV3dkkSz8xD79
NVkGYyKlnFKbydRqU2ZTwu8p6vHGAmfqnS1nMMR1dTZYON6om7CEXVYgAJp1lsRl
P+FpscyzDsmt/PhitiYkX3ymFedl+ihDFzQZlceqyU9Z98drNNcIlfT7M3i2PJc/
siyDMz8r48FAi8gaY/cO9l0NqA50fWd9EnP4pwJwEzqF53NWRerLaJ37mPYFWbwS
jppyOaVnoaVfs2fROkNcfIdUFyi8JPrvKWsy5nCw6GicNhDN/t+lIHxDEYfo6nT2
Oghk7Z8YROBB/hg7vFs7FSgDMKKTMlv6TkDlAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU9MJmL015E3KA74NT9wYfCpLxKKkwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzlNSm1MMDE1RTNLQTc0
TlQ5d1lmQ3BMeEtLay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAGH1FJxkECvQOBcdhLZzQ09fM4El/WcR
JWRtMZ0+YbUstpcSTEp2o2qvED1+AirfnQ4H9oH7fpFowrCx2BPpy7bWcDy60+Wo
KapaXXLmUeh9b41dPbbC4TmqKXpezHXMI79GhJFkt7zJZ9IkV5r46pmiw1B99uHF
3KbumDxK5jBblLCw1lG3LIHuEAo/XCt+sopRXivDHYtXaZtjD/EDCylhgGn1iALj
EoVewIcZ5H40JXxTYnzCw9GNCdf6XylStxEPaJ2Oey+n0iNoixSXhJKxxZgqJEfK
XIy6hUjwAg98nIK8g4FQRLZL4H7hPe/BkngycETPJSNXeZAkDvMXczA=
-----END CERTIFICATE-----
Generated at Sat Jun 21 19:35:29 2025 by rpki-client