Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/JkdNER8mEF5Oxok3RbnxVrG1nlo.roa
File: JkdNER8mEF5Oxok3RbnxVrG1nlo.roa (raw, json)
Hash identifier: YoUBe9g1WGXXf/QpEIfGhscxDxOHNN/TkUpJymPOWrk=
Subject key identifier: 26:47:4D:11:1F:26:10:5E:4E:C6:89:37:45:B9:F1:56:B1:B5:9E:5A
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3E91
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/JkdNER8mEF5Oxok3RbnxVrG1nlo.roa
Signing time: Fri 12 Apr 2024 00:23:15 +0000
ROA not before: Fri 12 Apr 2024 00:23:15 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16017 (0x3e91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 12 00:23:15 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=26474D111F26105E4EC6893745B9F156B1B59E5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:90:da:fc:f7:36:d4:20:80:90:91:da:6a:2a:
dd:0c:a6:c3:6f:37:fa:b2:ce:d7:7c:c4:21:18:62:
01:29:38:3a:7d:cf:a0:67:dc:02:4a:67:86:83:10:
eb:20:6d:c9:f5:e5:e9:42:89:11:66:2d:36:80:e0:
c8:34:db:65:79:8a:9f:f5:c5:32:af:3b:c1:9d:84:
81:7d:4d:0a:4f:b8:75:3e:c4:f4:a3:03:df:9c:25:
b7:48:99:40:39:22:1e:f2:0e:d7:eb:eb:00:c1:2a:
e9:21:dd:20:bd:82:a0:0d:cb:22:c5:b0:81:14:ff:
f4:e4:18:c6:ce:f0:f3:e0:f1:5f:34:0e:c9:fc:dd:
86:3b:b5:49:4f:9e:9a:9b:b7:03:7a:6b:39:a8:ec:
cc:e8:1e:34:22:6e:de:62:0c:87:ac:2e:c8:fa:f1:
72:57:13:3f:eb:dd:3d:b4:3e:d3:85:32:75:4e:9e:
d4:90:ad:83:cc:ee:8c:75:4c:00:e7:61:7c:fb:a5:
0d:58:40:53:78:f2:df:30:c9:d2:7b:ee:c5:ab:5a:
5e:87:a8:92:d9:52:47:0e:be:5f:2e:a7:29:24:5e:
a7:c4:7a:09:30:f1:5d:9b:f3:f3:6c:95:32:75:9b:
e3:a1:fa:07:5c:4d:9d:b0:8a:ad:db:af:fb:25:5f:
22:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:47:4D:11:1F:26:10:5E:4E:C6:89:37:45:B9:F1:56:B1:B5:9E:5A
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/JkdNER8mEF5Oxok3RbnxVrG1nlo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
56:69:c7:2a:62:b2:4b:57:cd:00:e3:c5:44:b1:05:4c:cb:fc:
27:64:36:00:8b:99:b5:57:bd:a9:ce:7e:a0:dc:06:74:c1:69:
f1:e5:51:b1:0d:08:a8:c5:10:32:6c:82:26:02:71:af:e0:f5:
6f:db:83:37:49:be:09:c7:27:4b:30:08:30:0c:11:56:95:ee:
d0:88:79:7f:da:2e:7b:62:50:cf:37:bc:fb:32:d2:9e:32:f2:
75:58:33:d9:89:2e:e6:47:63:fc:6b:0e:0f:21:ef:da:d1:80:
11:3f:6f:8d:36:a7:29:01:bc:c3:17:58:28:1d:63:37:61:be:
99:7d:10:ee:d8:38:37:15:ef:66:e8:65:88:20:9a:b9:c0:80:
11:42:9c:3f:2c:1b:28:86:38:29:e2:13:f8:68:e2:0d:62:39:
a5:6a:e4:f0:70:d5:ae:ba:a3:4e:a6:9e:3c:ba:6a:ea:18:28:
8a:80:5c:d6:c3:c5:19:89:23:2d:b1:6b:b0:42:03:7a:54:ba:
d5:ad:13:ea:cc:53:27:82:0a:b3:d8:8a:85:0f:b1:d3:07:96:
8c:7c:04:7f:6d:d1:0e:be:2c:30:4f:10:3b:d9:1f:9c:be:af:
d2:eb:8b:e1:f5:16:53:5f:45:5f:b8:b1:4c:4c:86:1d:b5:dd:
52:30:3e:88
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICPpEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTIw
MDIzMTVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDI2NDc0RDExMUYyNjEw
NUU0RUM2ODkzNzQ1QjlGMTU2QjFCNTlFNUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRkNr89zbUIICQkdpqKt0MpsNvN/qyztd8xCEYYgEpODp9z6Bn
3AJKZ4aDEOsgbcn15elCiRFmLTaA4Mg022V5ip/1xTKvO8GdhIF9TQpPuHU+xPSj
A9+cJbdImUA5Ih7yDtfr6wDBKukh3SC9gqANyyLFsIEU//TkGMbO8PPg8V80Dsn8
3YY7tUlPnpqbtwN6azmo7MzoHjQibt5iDIesLsj68XJXEz/r3T20PtOFMnVOntSQ
rYPM7ox1TADnYXz7pQ1YQFN48t8wydJ77sWrWl6HqJLZUkcOvl8upykkXqfEegkw
8V2b8/NslTJ1m+Oh+gdcTZ2wiq3br/slXyJNAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUJkdNER8mEF5Oxok3RbnxVrG1nlowHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L0prZE5FUjhtRUY1T3hv
azNSYm54VnJHMW5sby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBAFZpxypisktXzQDj
xUSxBUzL/CdkNgCLmbVXvanOfqDcBnTBafHlUbENCKjFEDJsgiYCca/g9W/bgzdJ
vgnHJ0swCDAMEVaV7tCIeX/aLntiUM83vPsy0p4y8nVYM9mJLuZHY/xrDg8h79rR
gBE/b402pykBvMMXWCgdYzdhvpl9EO7YODcV72boZYggmrnAgBFCnD8sGyiGOCni
E/ho4g1iOaVq5PBw1a66o06mnjy6auoYKIqAXNbDxRmJIy2xa7BCA3pUutWtE+rM
UyeCCrPYioUPsdMHlox8BH9t0Q6+LDBPEDvZH5y+r9Lri+H1FlNfRV+4sUxMhh21
3VIwPog=
-----END CERTIFICATE-----
Generated at Sun Jun 15 10:01:41 2025 by rpki-client