Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/QHNd3I8Bq0Ov97BI3eLu6QtS3ag.roa
File: QHNd3I8Bq0Ov97BI3eLu6QtS3ag.roa (raw, json)
Hash identifier: uYqK/VG6LQs6UptFK7olUxNrxFg6P+5xJGIQbKtug34=
Subject key identifier: 40:73:5D:DC:8F:01:AB:43:AF:F7:B0:48:DD:E2:EE:E9:0B:52:DD:A8
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4C27
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/QHNd3I8Bq0Ov97BI3eLu6QtS3ag.roa
Signing time: Tue 30 Apr 2024 02:53:32 +0000
ROA not before: Tue 30 Apr 2024 02:53:32 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19495 (0x4c27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 30 02:53:32 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=40735DDC8F01AB43AFF7B048DDE2EEE90B52DDA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:36:63:22:77:d7:19:d6:7c:3d:14:e6:ce:a9:
c9:a4:4b:71:90:dc:6f:cf:34:91:9b:e4:46:5b:e3:
b1:00:bf:ca:79:81:10:c0:e8:fc:95:6a:f2:00:fa:
19:d4:84:59:26:86:8b:92:11:d4:88:f5:87:59:24:
7b:fc:f9:2a:54:45:8a:a1:0c:7f:ce:ab:53:da:ef:
10:99:19:18:34:8d:bd:d7:a9:ca:30:70:60:b0:7a:
f6:40:6b:61:3b:8a:67:5e:fd:b4:93:9e:71:45:19:
00:29:84:16:25:51:9a:f1:ad:16:c9:ad:fe:c9:fd:
56:c3:f4:05:8c:2c:c7:58:db:ba:4e:bd:7a:22:d9:
95:e8:27:11:6f:37:3c:ae:00:e9:84:c1:ad:9b:42:
09:97:bb:21:f7:11:67:cc:24:a6:a3:2d:66:a3:c5:
17:70:e6:e3:9e:7a:57:8b:eb:1d:ba:48:38:dd:44:
bd:81:21:b1:c3:a3:77:b1:c6:ab:11:2a:83:d8:dd:
21:41:a1:92:4e:11:97:01:44:e0:ff:fd:c0:83:14:
9c:9d:7c:14:8c:79:21:d2:11:22:d0:0a:2c:e4:67:
1f:d2:4d:da:93:6a:b6:52:c8:d2:46:d0:ff:04:56:
73:c5:1d:9b:24:38:5c:26:4a:ba:1d:9c:26:23:2e:
bf:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:73:5D:DC:8F:01:AB:43:AF:F7:B0:48:DD:E2:EE:E9:0B:52:DD:A8
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/QHNd3I8Bq0Ov97BI3eLu6QtS3ag.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
08:07:db:c8:b1:31:9d:f3:07:43:86:27:53:2e:f7:e2:15:9a:
23:82:a9:25:84:f2:08:e4:b4:93:f5:bc:6a:35:e6:47:a1:ca:
e6:a8:8a:79:a2:dc:d3:0b:b0:63:c6:25:4e:a0:c2:d7:9b:9b:
b1:19:b7:61:ee:1e:7c:44:d8:05:de:6c:f2:83:4f:c5:96:c4:
39:8c:4d:0f:8e:e7:b4:43:0c:b8:18:8a:b9:31:ad:6a:07:48:
af:3b:a5:55:eb:67:88:94:2d:68:d0:c6:fd:2c:f9:f2:ed:35:
9e:6a:c9:c5:34:b1:db:b8:0c:dc:fc:92:1c:63:e7:d6:c8:af:
fa:d3:63:1f:0c:c7:a0:b6:da:17:3f:d3:7d:92:a7:4c:88:01:
42:03:cf:b8:39:0e:6e:3b:f8:24:9c:aa:e7:ba:6f:bc:16:98:
68:20:36:04:71:cf:63:15:85:bb:6d:e2:0d:bd:1c:c1:44:d3:
3a:7f:91:60:c7:39:a9:63:4a:f0:a9:b8:c1:1a:37:d8:59:86:
c3:03:c7:70:2f:3b:f5:00:f7:e3:5a:2b:77:21:37:6b:b4:51:
54:7d:22:fa:f1:01:99:0d:62:6d:3a:b2:a6:28:7b:a5:85:d3:
88:95:9c:0b:51:68:ac:6f:b9:25:f0:63:32:13:59:65:02:b8:
b8:c6:c8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:17:06 2025 by rpki-client