Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/HziuWaXC2dufY2a8HsDfCv6_NyM.roa
File: HziuWaXC2dufY2a8HsDfCv6_NyM.roa (raw, json)
Hash identifier: Fe04UOT8kVyFP6zhrCqSnTatFCpTZ2ErAmIDcX6kPh0=
Subject key identifier: 1F:38:AE:59:A5:C2:D9:DB:9F:63:66:BC:1E:C0:DF:0A:FE:BF:37:23
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3F22
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/HziuWaXC2dufY2a8HsDfCv6_NyM.roa
Signing time: Fri 12 Apr 2024 18:22:49 +0000
ROA not before: Fri 12 Apr 2024 18:22:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16162 (0x3f22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 12 18:22:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1F38AE59A5C2D9DB9F6366BC1EC0DF0AFEBF3723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e4:90:81:e8:bf:52:a2:59:3d:c8:6c:40:18:
44:4c:f4:e7:b7:d1:f2:9e:05:9b:83:9e:1e:bb:ad:
26:49:b8:00:35:f9:80:3f:54:4c:eb:56:1e:cb:fa:
62:ee:89:6d:3b:8a:40:43:73:bc:6c:c2:88:95:79:
43:9e:85:c2:a9:38:b8:91:98:b1:5d:38:14:f8:14:
2c:ca:ff:9b:90:e6:53:81:f2:46:a8:fb:cb:cb:eb:
a2:f8:16:34:b7:4b:c4:56:9d:61:1c:f4:97:fc:15:
47:3d:89:0c:11:ea:93:b4:df:41:bd:a1:e7:ed:55:
ac:f7:df:46:d4:d8:e3:ea:42:4e:82:1c:d6:8f:43:
80:c9:70:5c:ce:2d:c2:8e:cf:6a:9b:d8:42:fb:03:
3a:32:e5:e7:0a:d3:de:49:f6:f1:9a:f0:e1:b9:64:
36:c9:98:55:f4:ab:85:44:c2:56:50:cb:38:e5:eb:
36:f6:6d:1d:c5:1d:62:9a:c4:59:fb:24:82:9e:20:
45:b0:52:85:0a:e3:eb:57:83:82:a7:75:b9:ea:62:
87:7c:e2:75:26:48:82:50:0e:dc:d3:eb:6d:e6:07:
19:3b:19:86:8b:4f:24:1b:ca:13:04:da:67:6c:0c:
d7:d9:b7:77:1a:7b:38:3c:b0:28:20:14:99:28:35:
de:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:38:AE:59:A5:C2:D9:DB:9F:63:66:BC:1E:C0:DF:0A:FE:BF:37:23
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/HziuWaXC2dufY2a8HsDfCv6_NyM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b4:39:14:66:67:ed:e5:26:df:d6:65:7d:4b:70:e8:a2:d1:26:
04:67:6d:35:6e:d8:93:6f:99:12:6b:5e:04:0b:6e:b6:fe:93:
0f:42:20:bd:9e:c9:d7:51:1f:bf:15:7f:95:df:9d:ed:75:87:
1c:6a:7e:9b:15:e4:fb:6f:72:40:4a:5d:8b:9c:05:71:73:a2:
8c:2e:89:42:d6:dc:e4:01:a9:16:3f:94:cf:c6:94:42:ea:5f:
61:3c:69:35:a2:96:00:f1:06:44:db:29:47:8f:99:96:63:77:
bb:fb:e5:79:be:e7:26:31:aa:76:1f:2c:6e:23:86:a8:b8:d4:
1c:83:0d:92:0e:83:b8:72:6d:bf:5f:f9:d6:89:c7:28:a2:2d:
e3:d3:56:00:cb:7a:23:20:74:ea:97:4d:3a:ee:08:ad:91:9a:
d4:b8:d8:7a:e5:e2:9f:3e:0d:64:de:bd:cc:f2:73:02:72:97:
28:9f:53:26:e5:4d:57:73:ff:05:28:f1:97:ec:fd:e3:04:cd:
1c:39:1a:c3:df:b4:ec:13:3e:a3:3d:5f:25:64:58:d0:dd:84:
5d:b0:bc:b8:10:0a:86:87:6d:91:94:59:96:81:80:28:36:8f:
23:37:12:f4:a8:1b:1c:ec:57:92:63:d6:4e:fd:c5:50:bb:29:
4f:7a:e2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 04:38:10 2025 by rpki-client