Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/DdEbqfBEotcPeXlstjIDVMr1miQ.roa
File: DdEbqfBEotcPeXlstjIDVMr1miQ.roa (raw, json)
Hash identifier: OxdfTMtz2Oy9MK9p6qRgwYcPLX0KqqQLl21WTNpjk2E=
Subject key identifier: 0D:D1:1B:A9:F0:44:A2:D7:0F:79:79:6C:B6:32:03:54:CA:F5:9A:24
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4CDA
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/DdEbqfBEotcPeXlstjIDVMr1miQ.roa
Signing time: Wed 01 May 2024 01:23:36 +0000
ROA not before: Wed 01 May 2024 01:23:36 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19674 (0x4cda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 1 01:23:36 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0DD11BA9F044A2D70F79796CB6320354CAF59A24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:56:67:8d:af:b0:c5:87:17:36:13:ef:64:83:
9c:8d:f7:91:32:5d:f6:b8:ee:ae:9c:a1:08:13:98:
b3:ea:6e:6e:cc:f0:ad:75:b6:68:10:1d:4a:a8:5e:
8c:23:a7:e4:11:fb:20:31:b6:b7:59:92:81:bc:23:
af:31:6c:63:9f:85:14:d9:50:55:39:7b:40:9e:dd:
c2:8d:a0:4c:62:20:16:31:eb:ea:8a:7b:bf:62:1e:
ac:cb:4a:f3:b6:77:94:1c:74:ae:9c:75:49:f8:c6:
b6:ce:e0:e8:19:e7:f1:c4:b3:f8:18:38:da:ad:22:
0d:8a:88:58:45:8a:a2:49:77:1b:ec:c2:8e:9c:0b:
ff:01:fe:29:0c:9e:01:4f:c6:de:41:8d:7b:b0:24:
8e:2e:0e:5f:93:e0:fd:93:a1:4d:4d:e8:9b:ad:21:
90:50:bb:e4:c3:db:bf:aa:1e:6e:a4:b7:43:84:88:
09:d1:64:e0:0e:f6:78:fa:b3:ed:d5:2e:d0:aa:93:
e8:df:4b:51:fe:36:58:ed:0f:5c:de:7e:76:bd:03:
ca:b6:b1:47:a9:7d:1f:f8:f4:b6:aa:6b:5f:0e:27:
dc:1f:24:f1:3d:46:61:e4:ea:04:b2:6b:ce:7a:da:
19:74:83:81:e6:30:d8:78:a2:4e:aa:c7:14:0c:75:
f6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D1:1B:A9:F0:44:A2:D7:0F:79:79:6C:B6:32:03:54:CA:F5:9A:24
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/DdEbqfBEotcPeXlstjIDVMr1miQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0a:79:34:51:75:00:2c:a7:06:eb:42:b9:09:f2:f3:86:d1:9a:
0d:3e:75:29:65:64:30:70:95:c7:09:d2:8e:81:f6:02:e5:2c:
c3:0d:34:02:fc:03:30:30:89:d8:27:fc:d6:30:97:f4:1f:a1:
b2:e1:4a:4b:a3:58:8b:d6:6d:6b:e7:73:12:7e:db:c5:07:7a:
fd:5f:1e:d6:c3:34:4a:a0:97:ea:e5:3f:c8:02:95:6e:33:2b:
a6:a3:a2:1c:ba:98:23:b1:d4:ea:6d:00:fd:86:8d:23:82:f4:
16:1d:83:07:08:31:58:30:12:89:35:7b:21:03:24:72:a6:a8:
ff:4e:31:f6:4d:e3:99:7e:f6:16:9d:45:1e:3e:61:e8:44:25:
b6:60:d0:ff:77:86:0b:6d:5e:b3:6f:30:d6:83:2b:7f:7c:46:
1c:c3:75:af:44:4a:72:c8:2c:17:60:88:0b:61:61:07:bd:99:
41:df:b7:aa:29:04:59:29:0c:df:c0:ce:ca:89:04:96:6b:4b:
de:a8:66:ee:44:bd:23:b8:75:79:4f:df:8d:fc:82:3e:cc:3d:
60:58:fd:ef:90:5b:d5:13:12:c8:cd:88:06:16:32:c3:3f:21:
a1:45:85:93:84:5e:2a:15:2d:00:10:bc:5c:e8:0a:a5:1a:86:
82:a0:e9:79
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICTNowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDEw
MTIzMzZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDBERDExQkE5RjA0NEEy
RDcwRjc5Nzk2Q0I2MzIwMzU0Q0FGNTlBMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXVmeNr7DFhxc2E+9kg5yN95EyXfa47q6coQgTmLPqbm7M8K11
tmgQHUqoXowjp+QR+yAxtrdZkoG8I68xbGOfhRTZUFU5e0Ce3cKNoExiIBYx6+qK
e79iHqzLSvO2d5QcdK6cdUn4xrbO4OgZ5/HEs/gYONqtIg2KiFhFiqJJdxvswo6c
C/8B/ikMngFPxt5BjXuwJI4uDl+T4P2ToU1N6JutIZBQu+TD27+qHm6kt0OEiAnR
ZOAO9nj6s+3VLtCqk+jfS1H+NljtD1zefna9A8q2sUepfR/49Laqa18OJ9wfJPE9
RmHk6gSya8562hl0g4HmMNh4ok6qxxQMdfY1AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUDdEbqfBEotcPeXlstjIDVMr1miQwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0RkRWJxZkJFb3RjUGVY
bHN0aklEVk1yMW1pUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEACnk0UXUALKcG60K5CfLzhtGaDT51KWVk
MHCVxwnSjoH2AuUsww00AvwDMDCJ2Cf81jCX9B+hsuFKS6NYi9Zta+dzEn7bxQd6
/V8e1sM0SqCX6uU/yAKVbjMrpqOiHLqYI7HU6m0A/YaNI4L0Fh2DBwgxWDASiTV7
IQMkcqao/04x9k3jmX72Fp1FHj5h6EQltmDQ/3eGC21es28w1oMrf3xGHMN1r0RK
csgsF2CIC2FhB72ZQd+3qikEWSkM38DOyokElmtL3qhm7kS9I7h1eU/fjfyCPsw9
YFj975Bb1RMSyM2IBhYywz8hoUWFk4ReKhUtABC8XOgKpRqGgqDpeQ==
-----END CERTIFICATE-----
Generated at Sun Jun 22 09:52:07 2025 by rpki-client