Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/G-4OA-_c-qjRqMAas1V8m4ohUdg.roa
File: G-4OA-_c-qjRqMAas1V8m4ohUdg.roa (raw, json)
Hash identifier: /3Ph0s0QK0uqhXsJQnwit6oIV0KE4QzcNaXCVVmMdXc=
Subject key identifier: 1B:EE:0E:03:EF:DC:FA:A8:D1:A8:C0:1A:B3:55:7C:9B:8A:21:51:D8
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5201
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/G-4OA-_c-qjRqMAas1V8m4ohUdg.roa
Signing time: Tue 07 May 2024 22:23:56 +0000
ROA not before: Tue 07 May 2024 22:23:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20993 (0x5201)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 7 22:23:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1BEE0E03EFDCFAA8D1A8C01AB3557C9B8A2151D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a9:df:e9:58:a8:89:d7:4e:fa:35:ba:44:86:
5d:6e:1d:09:50:ec:d2:b9:59:9f:8a:dc:78:97:d1:
bc:d6:b6:71:76:85:92:59:a3:ee:f4:57:22:be:26:
7c:25:5f:a5:5a:78:29:fd:11:e4:64:b0:8d:a8:f0:
90:b7:e6:a3:92:44:44:a9:ec:1f:c0:ec:23:41:72:
37:61:7b:5d:48:4d:d1:3a:7e:34:d5:83:ff:0f:21:
26:09:a9:f2:54:e7:ff:e3:74:73:ad:b5:8f:07:e5:
91:d8:39:21:f9:53:e3:03:f2:0e:8d:95:84:5f:a9:
53:cf:9c:e0:8e:1c:9a:c2:11:eb:f2:ed:e8:bd:0f:
0e:67:90:29:9e:7a:f8:7e:2f:88:15:c1:c3:07:fb:
b7:4f:96:9d:5b:ca:6a:0e:36:86:ba:86:e3:0c:58:
39:fc:06:a6:10:15:98:b4:45:d8:0c:c9:1e:f3:64:
e0:e7:fc:6d:de:37:4f:83:f1:58:7e:8a:1a:05:a3:
c5:2b:8c:52:bb:4c:01:0d:43:56:45:f0:61:f7:0c:
fa:32:51:15:e7:76:a4:34:d6:69:19:fd:04:f4:5a:
9b:95:53:19:e1:b2:30:a1:47:b0:e4:ca:f6:2e:c2:
fd:e3:3d:96:9b:fe:10:0d:5d:66:18:88:c2:38:57:
92:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EE:0E:03:EF:DC:FA:A8:D1:A8:C0:1A:B3:55:7C:9B:8A:21:51:D8
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/G-4OA-_c-qjRqMAas1V8m4ohUdg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
05:f0:eb:4d:19:d5:e7:0c:e7:10:e7:11:11:d4:e7:d6:25:16:
82:a0:02:a7:6d:52:92:d9:53:1d:ac:c9:ee:b3:7d:ac:d7:f4:
b3:9a:2e:63:9a:d5:35:c5:be:3b:b8:cb:7c:a7:a3:c9:ca:c6:
aa:43:ff:76:05:aa:28:d3:74:b6:95:85:b5:42:5b:05:27:38:
77:d3:18:83:ca:11:0d:a0:8b:1a:4c:59:40:26:6c:a0:5b:c4:
84:4c:55:1e:36:b3:f3:39:42:5a:31:e5:cf:52:64:a8:41:7a:
6e:4f:19:03:4c:1d:00:33:19:cb:c2:c1:70:b3:86:9e:f9:08:
8d:61:be:97:87:6b:95:41:3d:e5:2a:76:b2:b9:d6:cd:c0:b5:
cd:e4:24:45:f2:a5:e4:40:f6:83:ab:dc:1f:a4:ad:ed:ff:64:
fc:3a:06:68:da:6f:82:69:c1:91:30:e2:80:0e:f5:88:47:3d:
10:3e:21:f4:f7:30:ed:df:0f:13:c8:d4:f8:3e:b7:37:b5:c8:
ba:c7:ce:99:f8:e5:11:d9:dc:c9:30:46:40:8a:60:33:93:a6:
ae:0c:35:b2:ba:94:15:9f:ad:e9:22:7a:b3:2f:dd:26:78:f4:
ff:f6:c1:9f:d6:b6:fc:b0:a1:ec:9e:5a:f9:94:03:70:4c:56:
d9:15:cb:6d
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICUgEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDcy
MjIzNTZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDFCRUUwRTAzRUZEQ0ZB
QThEMUE4QzAxQUIzNTU3QzlCOEEyMTUxRDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDfqd/pWKiJ1076NbpEhl1uHQlQ7NK5WZ+K3HiX0bzWtnF2hZJZ
o+70VyK+JnwlX6VaeCn9EeRksI2o8JC35qOSRESp7B/A7CNBcjdhe11ITdE6fjTV
g/8PISYJqfJU5//jdHOttY8H5ZHYOSH5U+MD8g6NlYRfqVPPnOCOHJrCEevy7ei9
Dw5nkCmeevh+L4gVwcMH+7dPlp1bymoONoa6huMMWDn8BqYQFZi0RdgMyR7zZODn
/G3eN0+D8Vh+ihoFo8UrjFK7TAENQ1ZF8GH3DPoyURXndqQ01mkZ/QT0WpuVUxnh
sjChR7DkyvYuwv3jPZab/hANXWYYiMI4V5JRAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUG+4OA+/c+qjRqMAas1V8m4ohUdgwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0ctNE9BLV9jLXFqUnFN
QWFzMVY4bTRvaFVkZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAAXw600Z1ecM5xDn
ERHU59YlFoKgAqdtUpLZUx2sye6zfazX9LOaLmOa1TXFvju4y3yno8nKxqpD/3YF
qijTdLaVhbVCWwUnOHfTGIPKEQ2gixpMWUAmbKBbxIRMVR42s/M5Qlox5c9SZKhB
em5PGQNMHQAzGcvCwXCzhp75CI1hvpeHa5VBPeUqdrK51s3Atc3kJEXypeRA9oOr
3B+kre3/ZPw6Bmjab4JpwZEw4oAO9YhHPRA+IfT3MO3fDxPI1Pg+tze1yLrHzpn4
5RHZ3MkwRkCKYDOTpq4MNbK6lBWfrekierMv3SZ49P/2wZ/WtvywoeyeWvmUA3BM
VtkVy20=
-----END CERTIFICATE-----
Generated at Sat Jun 21 19:35:09 2025 by rpki-client