Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/NWPAEfYrVltfUkbxlxULzDx52js.roa
File: NWPAEfYrVltfUkbxlxULzDx52js.roa (raw, json)
Hash identifier: wGWypVeIZ27y2by/yKjmFg3FwDCriZwNoJbjBzyeSfY=
Subject key identifier: 35:63:C0:11:F6:2B:56:5B:5F:52:46:F1:97:15:0B:CC:3C:79:DA:3B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4193
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/NWPAEfYrVltfUkbxlxULzDx52js.roa
Signing time: Tue 16 Apr 2024 00:22:55 +0000
ROA not before: Tue 16 Apr 2024 00:22:55 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16787 (0x4193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 16 00:22:55 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3563C011F62B565B5F5246F197150BCC3C79DA3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1c:ef:b1:0e:7d:fe:fa:cd:e7:16:9d:e3:38:
6b:d8:8f:42:98:d2:71:4f:74:87:7d:32:db:37:de:
f9:79:22:8a:f4:82:5e:d9:92:f1:6d:e1:b8:8d:fc:
15:85:1a:fe:7a:1a:5e:88:93:87:6f:46:47:83:74:
94:5f:3f:f3:84:eb:f7:e9:9f:4e:70:ba:fc:74:17:
2b:47:1c:cd:80:14:a3:4b:d1:a6:f8:54:da:c4:d2:
5e:c0:fa:6b:b5:0a:84:0d:a8:5a:a4:75:62:6b:13:
5f:1c:4a:38:93:f2:f3:cc:dc:1b:3e:d6:5a:91:15:
af:2a:d1:1f:41:7f:4a:27:45:6d:4e:10:3a:e1:6b:
e9:9e:5b:04:ff:60:d1:14:ed:28:89:eb:cd:de:ad:
bd:af:41:08:c7:a9:8d:40:9a:ea:d1:7b:cd:2d:8f:
c1:e4:5f:f7:2d:3d:fe:46:00:b4:af:bb:48:70:65:
3f:14:34:d7:6c:ef:6f:f6:8f:e2:0c:41:b3:2d:a7:
ba:3d:4c:78:c9:55:0c:ef:68:01:57:fd:8e:6e:52:
6f:a9:85:d2:a4:41:47:a2:cd:9c:90:d6:47:73:8e:
dd:ee:74:4a:70:38:59:5a:c9:fa:1b:ea:71:fa:78:
50:74:19:d9:58:37:3b:01:df:d0:28:63:37:2f:9f:
14:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:63:C0:11:F6:2B:56:5B:5F:52:46:F1:97:15:0B:CC:3C:79:DA:3B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/NWPAEfYrVltfUkbxlxULzDx52js.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
76:c5:45:eb:44:c8:c8:39:85:61:50:1f:9e:00:2e:ef:84:0a:
6c:99:57:2e:53:1c:16:43:5d:64:8b:2e:5c:63:9c:b5:d3:52:
e2:fe:10:e2:50:f3:22:97:e0:ca:4d:93:08:77:19:4f:53:5b:
75:d7:1d:3f:bd:cd:ec:58:e5:97:e3:54:25:35:c8:6e:0d:94:
c0:04:e4:0d:4a:82:eb:41:d7:4b:a8:20:45:56:ac:8d:5b:ab:
6e:22:a2:35:fb:68:01:3f:97:37:02:3a:e0:45:cc:3c:2b:90:
f8:5f:53:fb:b1:e6:93:63:ea:3b:b2:80:f7:8c:56:f3:a4:f8:
fc:6e:22:6f:23:d3:c1:5c:77:35:d1:4c:24:1e:9c:85:b1:b5:
6f:3c:6f:bd:c1:5c:a8:68:87:94:b9:d1:3a:72:e0:3f:10:1d:
be:ae:86:de:2c:66:94:ef:f9:f0:0b:7d:74:1a:95:9d:eb:8a:
1e:09:8b:a0:0e:e8:39:2f:6b:d2:bb:54:62:b8:66:8e:20:a6:
ae:56:ab:a3:a4:18:60:76:a7:50:09:7b:8b:54:f5:16:0f:05:
65:96:6f:2f:ee:58:53:39:1d:50:49:51:c8:14:68:b2:7a:f0:
c8:9f:b4:30:bc:b2:b1:41:46:71:02:6d:cb:2b:9c:2a:c1:74:
89:1c:eb:65
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICQZMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTYw
MDIyNTVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDM1NjNDMDExRjYyQjU2
NUI1RjUyNDZGMTk3MTUwQkNDM0M3OURBM0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCrHO+xDn3++s3nFp3jOGvYj0KY0nFPdId9Mts33vl5Ior0gl7Z
kvFt4biN/BWFGv56Gl6Ik4dvRkeDdJRfP/OE6/fpn05wuvx0FytHHM2AFKNL0ab4
VNrE0l7A+mu1CoQNqFqkdWJrE18cSjiT8vPM3Bs+1lqRFa8q0R9Bf0onRW1OEDrh
a+meWwT/YNEU7SiJ683erb2vQQjHqY1AmurRe80tj8HkX/ctPf5GALSvu0hwZT8U
NNds72/2j+IMQbMtp7o9THjJVQzvaAFX/Y5uUm+phdKkQUeizZyQ1kdzjt3udEpw
OFlayfob6nH6eFB0GdlYNzsB39AoYzcvnxRvAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUNWPAEfYrVltfUkbxlxULzDx52jswHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L05XUEFFZllyVmx0ZlVr
YnhseFVMekR4NTJqcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBAHbFRetEyMg5hWFQH54ALu+ECmyZVy5T
HBZDXWSLLlxjnLXTUuL+EOJQ8yKX4MpNkwh3GU9TW3XXHT+9zexY5ZfjVCU1yG4N
lMAE5A1KgutB10uoIEVWrI1bq24iojX7aAE/lzcCOuBFzDwrkPhfU/ux5pNj6juy
gPeMVvOk+PxuIm8j08FcdzXRTCQenIWxtW88b73BXKhoh5S50Tpy4D8QHb6uht4s
ZpTv+fALfXQalZ3rih4Ji6AO6Dkva9K7VGK4Zo4gpq5Wq6OkGGB2p1AJe4tU9RYP
BWWWby/uWFM5HVBJUcgUaLJ68MiftDC8srFBRnECbcsrnCrBdIkc62U=
-----END CERTIFICATE-----
Generated at Sat Jun 21 10:22:07 2025 by rpki-client