Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/CHoVNFUuIBQBcmBPtLnJOD3ksQk.roa
File: CHoVNFUuIBQBcmBPtLnJOD3ksQk.roa (raw, json)
Hash identifier: 53WPJkvcbfLaPOl0SjxcFJN95f9jhqLfqNjael1KLeo=
Subject key identifier: 08:7A:15:34:55:2E:20:14:01:72:60:4F:B4:B9:C9:38:3D:E4:B1:09
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3593
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/CHoVNFUuIBQBcmBPtLnJOD3ksQk.roa
Signing time: Sun 31 Mar 2024 00:22:09 +0000
ROA not before: Sun 31 Mar 2024 00:22:09 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13715 (0x3593)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 31 00:22:09 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=087A1534552E20140172604FB4B9C9383DE4B109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cf:70:e3:93:95:0f:a9:fa:41:0d:41:eb:24:
82:b4:e9:d5:0c:b1:68:92:ac:80:e8:2e:bb:0e:ae:
c5:a9:6f:c7:1c:9a:25:52:f7:70:c8:bf:0e:56:c1:
84:94:81:00:d8:5b:6f:3f:5b:6a:70:16:49:3d:f6:
9d:8c:67:0c:cc:24:66:ad:f7:aa:82:64:af:25:ec:
4d:df:47:55:aa:7d:d5:e0:19:9a:a0:84:7d:f5:3e:
a2:aa:b5:0e:18:b7:3c:08:7c:20:de:f6:f5:c6:80:
96:d5:2d:4b:02:23:f9:b8:64:be:c0:86:33:28:00:
65:6c:b2:48:88:63:96:37:f0:c5:9c:1d:22:36:39:
11:3f:50:7f:93:08:2c:38:03:2a:46:a3:5f:01:65:
98:19:79:96:bc:e8:49:ed:65:19:80:73:3e:be:00:
a5:25:69:d4:08:2f:c2:ba:14:5c:45:80:df:41:24:
75:6f:4c:15:94:b4:61:34:c8:79:2c:b2:f9:f5:7e:
d7:a8:52:92:d1:93:68:c2:33:24:f6:3a:25:5c:b2:
b9:f8:91:e0:b7:4c:08:a6:9f:1f:75:cc:7f:6b:72:
d5:cc:e8:c8:e8:55:33:26:d9:d2:4b:98:b5:1b:d7:
3e:96:bb:bf:f4:11:31:36:4a:43:2d:13:e0:08:18:
a9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7A:15:34:55:2E:20:14:01:72:60:4F:B4:B9:C9:38:3D:E4:B1:09
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/CHoVNFUuIBQBcmBPtLnJOD3ksQk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
8b:6e:60:39:de:90:3f:c8:23:2b:06:e8:64:f5:a7:53:50:61:
95:15:22:bd:fe:5c:53:95:27:17:89:c4:41:01:d3:85:64:db:
42:0f:f9:f6:73:64:9f:b4:f5:de:a1:81:30:d2:e8:68:82:c1:
2a:0d:74:21:36:30:19:20:36:ce:5f:92:00:db:e9:e2:f4:f2:
f9:bb:48:ad:54:57:09:08:8c:cd:76:8b:64:15:4c:d1:07:04:
2d:56:1a:79:ac:7a:ae:d1:85:b4:10:e1:dd:0b:37:11:77:65:
77:f3:bc:35:6f:90:01:1d:a9:6c:b4:2b:b3:47:18:25:ee:d4:
1e:a3:4a:be:09:9b:9e:dd:58:14:59:78:9f:e8:1d:82:19:5a:
bd:42:9c:a6:06:52:0c:fd:11:94:87:ab:8e:53:60:f1:59:ff:
fc:0f:a6:58:76:66:99:92:36:06:85:b5:33:a6:53:89:67:c2:
35:7d:85:a3:1c:a2:9e:88:47:43:9a:6a:b6:f5:f9:14:81:14:
5f:0b:49:ed:f1:c7:91:dd:60:1f:08:3c:92:b5:e8:fd:c2:6e:
1f:7e:3a:7f:78:4b:ee:d5:e8:b5:e7:da:d1:61:0e:b0:b4:47:
ba:08:c8:5d:18:7e:12:02:6b:1c:6f:36:aa:2d:c3:5d:1f:ad:
6e:7e:15:e3
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICNZMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDAzMzEw
MDIyMDlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDA4N0ExNTM0NTUyRTIw
MTQwMTcyNjA0RkI0QjlDOTM4M0RFNEIxMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGz3Djk5UPqfpBDUHrJIK06dUMsWiSrIDoLrsOrsWpb8ccmiVS
93DIvw5WwYSUgQDYW28/W2pwFkk99p2MZwzMJGat96qCZK8l7E3fR1WqfdXgGZqg
hH31PqKqtQ4YtzwIfCDe9vXGgJbVLUsCI/m4ZL7AhjMoAGVsskiIY5Y38MWcHSI2
ORE/UH+TCCw4AypGo18BZZgZeZa86EntZRmAcz6+AKUladQIL8K6FFxFgN9BJHVv
TBWUtGE0yHkssvn1fteoUpLRk2jCMyT2OiVcsrn4keC3TAimnx91zH9rctXM6Mjo
VTMm2dJLmLUb1z6Wu7/0ETE2SkMtE+AIGKnrAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUCHoVNFUuIBQBcmBPtLnJOD3ksQkwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0NIb1ZORlV1SUJRQmNt
QlB0TG5KT0Qza3NRay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAItuYDnekD/IIysG6GT1p1NQYZUVIr3+
XFOVJxeJxEEB04Vk20IP+fZzZJ+09d6hgTDS6GiCwSoNdCE2MBkgNs5fkgDb6eL0
8vm7SK1UVwkIjM12i2QVTNEHBC1WGnmseq7RhbQQ4d0LNxF3ZXfzvDVvkAEdqWy0
K7NHGCXu1B6jSr4Jm57dWBRZeJ/oHYIZWr1CnKYGUgz9EZSHq45TYPFZ//wPplh2
ZpmSNgaFtTOmU4lnwjV9haMcop6IR0Oaarb1+RSBFF8LSe3xx5HdYB8IPJK16P3C
bh9+On94S+7V6LXn2tFhDrC0R7oIyF0YfhICaxxvNqotw10frW5+FeM=
-----END CERTIFICATE-----
Generated at Fri Jun 20 15:11:18 2025 by rpki-client