Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/CfX1N5DwEo9z92XiClpNRYCE2-g.roa
File: CfX1N5DwEo9z92XiClpNRYCE2-g.roa (raw, json)
Hash identifier: vtXXEgMBXbTzSwU+4xGiPHKHp0Tw2t/oq/WbOQKEG2o=
Subject key identifier: 09:F5:F5:37:90:F0:12:8F:73:F7:65:E2:0A:5A:4D:45:80:84:DB:E8
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4F06
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/CfX1N5DwEo9z92XiClpNRYCE2-g.roa
Signing time: Fri 03 May 2024 22:53:48 +0000
ROA not before: Fri 03 May 2024 22:53:48 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20230 (0x4f06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 3 22:53:48 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=09F5F53790F0128F73F765E20A5A4D458084DBE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a8:a1:e6:d0:1c:da:9e:12:38:be:08:bf:53:
be:df:09:bd:ac:62:d2:de:2e:ba:51:b2:80:f4:bf:
98:d3:9e:43:20:9b:c7:50:f0:86:7f:49:a7:18:df:
00:66:6a:50:7c:e2:51:56:f4:08:05:98:38:34:89:
bb:ec:75:79:97:34:16:9e:1b:14:02:24:b4:01:eb:
07:27:b3:a6:c2:66:7c:26:db:f5:0f:f9:6e:84:3b:
d0:d4:c3:9f:9d:6a:12:48:1e:17:22:aa:d1:89:97:
8b:98:ee:d9:f9:5e:e7:f5:39:fb:1d:1d:df:31:e9:
4f:1f:bb:5b:11:42:4d:72:4b:5b:9e:ef:d9:7c:12:
76:e4:7a:9d:75:45:76:27:40:fc:dc:29:19:cd:9a:
b9:4d:93:60:fc:be:7a:44:1d:1c:b6:68:d8:a5:9e:
7d:61:56:06:ee:8c:99:cf:72:4f:a2:19:37:93:3a:
8f:af:35:af:19:f1:21:55:6d:76:ad:76:68:c1:20:
d0:55:a4:7e:d7:24:c3:d9:8d:45:76:f7:8a:8e:3e:
92:ba:7a:42:96:d6:73:ef:12:e4:11:6a:75:6a:28:
dc:bb:1e:b3:2e:fe:35:3e:b8:19:9e:5c:a8:9d:f1:
0d:11:19:45:29:c0:3c:c4:25:49:e5:c6:4c:d2:ed:
1d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F5:F5:37:90:F0:12:8F:73:F7:65:E2:0A:5A:4D:45:80:84:DB:E8
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/CfX1N5DwEo9z92XiClpNRYCE2-g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
52:32:b6:77:bf:4e:9b:a8:51:83:c8:95:ea:0a:6c:99:4d:f3:
8f:9e:b2:04:ca:9a:d6:32:3a:17:a1:69:7c:92:7f:fa:da:44:
8a:ec:bb:41:e9:2f:24:b6:d6:c2:7a:dc:84:4b:7f:79:a3:77:
a4:83:04:bb:c3:0f:d2:87:1c:73:97:f0:e9:84:42:ca:7f:87:
99:89:c1:75:0b:17:e9:73:0a:49:44:ae:df:b3:2f:ae:16:7e:
07:e8:74:48:fa:47:f4:0c:60:4b:b7:97:95:cd:7f:e7:05:60:
4a:a2:a3:3f:ed:e9:3a:be:f5:c7:06:d2:cd:82:20:4e:be:dc:
51:db:2e:05:ca:82:fd:d7:f3:36:89:23:42:d2:54:33:13:d5:
13:76:30:ed:30:ee:31:68:13:ab:fd:0d:43:67:53:9b:df:06:
81:a4:d8:2a:c5:c7:ed:c2:6d:29:e1:a2:b1:bd:71:11:27:cc:
85:ff:e6:06:b2:38:84:6c:61:ee:51:e5:9a:82:af:04:b7:fe:
14:cd:ad:90:86:10:34:04:f0:4e:89:b2:03:f4:44:29:06:36:
6a:65:08:46:82:82:06:89:3b:25:5d:27:c3:05:1e:9a:5e:89:
13:e0:bb:f3:9e:83:16:4d:97:57:5e:10:cf:39:6e:f8:51:41:
3f:67:a2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 09:53:09 2025 by rpki-client