Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/AcNwFKIxH8_RtqSGZatCSqHo66g.roa
File: AcNwFKIxH8_RtqSGZatCSqHo66g.roa (raw, json)
Hash identifier: vMjM4Niv9xMehmyqv0LnCMMF6uhcuuqQvclV4NDr3Hc=
Subject key identifier: 01:C3:70:14:A2:31:1F:CF:D1:B6:A4:86:65:AB:42:4A:A1:E8:EB:A8
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3EA7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/AcNwFKIxH8_RtqSGZatCSqHo66g.roa
Signing time: Fri 12 Apr 2024 02:52:48 +0000
ROA not before: Fri 12 Apr 2024 02:52:48 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16039 (0x3ea7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 12 02:52:48 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=01C37014A2311FCFD1B6A48665AB424AA1E8EBA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cb:29:28:3b:63:af:80:c7:90:86:15:9c:bb:
60:01:18:b1:ae:a9:4a:76:9a:b8:de:2a:ce:6d:0e:
4f:05:51:21:f3:0c:cb:80:dc:dd:7e:95:0f:35:78:
c0:6b:b7:b0:b1:06:ce:f3:a6:0c:0e:ae:d8:0e:6e:
3b:3a:39:2f:61:48:b3:ed:4e:5a:1b:3c:f6:73:0b:
6b:d2:16:3e:8c:1d:99:c8:f0:34:f6:ab:38:65:fd:
7c:fe:48:ca:ae:d3:50:3a:ad:18:6c:15:e0:0f:91:
9b:56:3d:cc:eb:2e:77:15:44:8a:10:b0:09:31:ba:
3d:dc:94:0c:da:81:05:0c:ec:46:e9:e8:b2:74:57:
c8:ac:6b:6a:2a:78:cf:90:0f:e7:e5:66:dc:9b:04:
06:8c:57:2d:b8:8b:2b:7e:da:aa:fb:74:dd:86:df:
08:22:6f:8c:be:02:d6:b4:6f:42:13:d8:0d:95:13:
15:a3:74:10:d9:0d:7a:08:3e:03:56:2a:52:b5:12:
e2:50:07:6a:b8:46:a4:77:5b:e6:c6:35:03:b9:14:
9a:b9:64:00:1a:49:25:c2:5c:ef:09:d1:04:7c:83:
95:61:39:1e:52:05:05:66:1d:10:45:f9:7c:3d:d4:
f1:80:4e:2d:24:ca:88:35:71:04:da:8c:fa:b2:b9:
cd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C3:70:14:A2:31:1F:CF:D1:B6:A4:86:65:AB:42:4A:A1:E8:EB:A8
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/AcNwFKIxH8_RtqSGZatCSqHo66g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
6d:09:c4:a5:d1:34:67:03:17:46:a5:66:e9:14:3c:eb:13:b2:
eb:0b:fa:79:4b:25:dd:20:fa:e7:39:87:61:c5:5c:96:b0:1a:
7a:0e:d1:36:f0:6b:72:88:19:6c:6b:a5:bd:e2:13:11:aa:3c:
25:cf:db:a9:7c:09:46:5a:f8:90:79:4c:3f:23:4f:d6:73:21:
62:d7:f7:80:e7:43:36:60:69:75:73:70:53:38:91:3a:99:e4:
e0:4b:cf:a5:2f:7c:eb:13:03:80:33:73:6e:d8:79:ed:4a:23:
ea:27:77:e4:df:b1:40:8a:ed:79:a5:e2:f7:4f:2b:dd:d1:f9:
93:37:9b:0c:50:99:e9:6c:63:ec:c1:d7:26:87:63:73:67:3a:
81:34:81:ec:4d:83:91:5e:7d:b3:34:24:29:80:ad:38:87:a0:
86:a4:80:51:fe:e8:01:5f:29:b0:ad:a2:62:55:ab:f8:31:6d:
e1:1a:16:75:99:56:0a:d6:a1:8f:1b:5a:d5:39:ca:90:85:a8:
68:2b:55:fc:8c:6d:db:e8:54:82:48:dc:b2:38:25:c8:45:00:
cd:04:07:46:7d:ec:37:a1:f6:c5:1a:f5:a7:24:69:c7:29:b1:
61:cd:28:d1:5a:df:75:77:f7:5e:2f:69:7d:01:38:9f:f2:83:
98:ed:85:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:10:31 2025 by rpki-client