Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/NPpI9MM2K6QXipCsUd2k5wmyrbI.roa
File: NPpI9MM2K6QXipCsUd2k5wmyrbI.roa (raw, json)
Hash identifier: RML2woaZagpXyclZRhGn6knoy6Qq5R0DRRccTeeVdI8=
Subject key identifier: 34:FA:48:F4:C3:36:2B:A4:17:8A:90:AC:51:DD:A4:E7:09:B2:AD:B2
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 334A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/NPpI9MM2K6QXipCsUd2k5wmyrbI.roa
Signing time: Wed 27 Mar 2024 23:22:00 +0000
ROA not before: Wed 27 Mar 2024 23:22:00 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13130 (0x334a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 27 23:22:00 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=34FA48F4C3362BA4178A90AC51DDA4E709B2ADB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:58:c9:9d:87:ed:59:a9:2e:61:b9:c3:0c:c8:
01:22:a9:fa:a8:70:55:cb:f7:1a:59:a9:cb:a5:2b:
a8:8e:f3:3e:24:24:32:4a:ec:ef:7b:d1:50:f8:10:
bb:b2:c2:e1:c7:53:00:bb:91:64:c2:e9:93:8b:1b:
6c:31:44:ac:f3:b0:33:de:e0:f9:d6:06:d1:c2:ea:
20:65:a0:35:e9:d4:b1:97:55:77:a9:7d:0a:8e:2c:
aa:a9:6f:32:dd:ab:a2:0e:bc:bf:77:a1:de:29:cb:
3f:f8:4e:46:8a:bb:1a:16:46:df:ef:73:e0:bc:91:
0b:af:71:46:2b:09:e0:ed:97:f0:2c:fa:95:ad:2e:
29:6d:b2:30:a8:5c:66:b2:08:be:f2:5a:61:12:4e:
17:24:eb:5d:95:51:f2:a1:81:87:f0:f2:25:e6:61:
08:7f:85:48:5d:af:fb:3e:92:ce:38:56:bd:e8:85:
e3:bb:1d:3c:69:2e:3b:5e:d9:ef:02:51:8c:e4:cd:
a1:a1:6b:41:56:f0:ad:56:68:82:35:08:59:69:68:
1a:32:df:2a:6f:08:68:e8:6c:b9:09:7d:27:46:8f:
14:f3:04:6a:15:58:bb:3e:e2:80:d8:e8:21:33:ff:
80:2d:77:c4:bf:36:34:fd:bd:dd:11:05:d8:57:82:
a7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FA:48:F4:C3:36:2B:A4:17:8A:90:AC:51:DD:A4:E7:09:B2:AD:B2
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/NPpI9MM2K6QXipCsUd2k5wmyrbI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
88:ea:5a:f9:10:95:8f:13:dd:ca:9a:43:94:59:28:e4:e6:b2:
8c:f7:8c:ca:fa:d4:5b:9c:1b:1b:ea:91:64:fa:6c:8d:da:2c:
d4:2e:97:bb:b6:95:0c:72:34:9d:c4:24:a8:82:54:d5:25:2f:
98:78:32:cd:2b:c0:f9:75:5b:73:58:95:ab:af:f6:d5:f0:9d:
5e:ed:92:85:e1:f0:f8:d9:46:f9:30:85:3e:6c:9a:49:d0:81:
f5:76:68:94:b5:5e:3e:35:00:bb:12:bb:26:1d:11:c0:7b:95:
87:f0:b6:95:55:5e:66:34:f4:01:1f:79:ea:a7:27:a9:7f:7c:
d8:6a:17:a2:80:68:bd:4b:c4:e8:1a:51:77:f1:af:cb:c7:a5:
fa:e8:70:29:1b:84:c1:7c:9a:69:6e:7c:a3:d2:3c:c5:94:2b:
ed:e1:a2:6b:b6:b4:87:b7:0f:b2:c9:df:cd:5f:2c:7e:bb:3d:
1a:db:c4:54:ee:42:90:b5:33:22:8b:3a:41:ef:ab:50:b7:62:
b3:45:84:95:2a:e2:0c:81:27:01:e3:e8:cc:d0:48:4f:14:06:
41:8f:93:ab:77:6d:13:a4:3b:da:f5:29:b5:91:08:2d:d4:11:
d0:dd:a2:60:61:27:5e:c8:43:b7:98:5b:12:75:81:f0:04:8a:
5d:ba:61:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 09:53:25 2025 by rpki-client