Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/QYXFNyJVcdbfSoO_qCRexbqDoAs.roa
File: QYXFNyJVcdbfSoO_qCRexbqDoAs.roa (raw, json)
Hash identifier: ojLl53ilmj/OlRle2rJhIildU3zk64oz4sjYRzVAUnc=
Subject key identifier: 41:85:C5:37:22:55:71:D6:DF:4A:83:BF:A8:24:5E:C5:BA:83:A0:0B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4E4D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/QYXFNyJVcdbfSoO_qCRexbqDoAs.roa
Signing time: Thu 02 May 2024 23:53:42 +0000
ROA not before: Thu 02 May 2024 23:53:42 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20045 (0x4e4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 2 23:53:42 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4185C537225571D6DF4A83BFA8245EC5BA83A00B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:97:13:02:7d:70:b8:47:2c:b3:b0:53:da:86:
24:e1:f9:4a:3b:f1:08:cf:5c:09:60:61:08:ad:1b:
4e:7c:29:c1:90:28:0e:1d:c2:c8:b8:00:47:b9:d3:
60:86:c6:f1:00:72:0f:dd:aa:57:f9:e1:10:27:b0:
f0:7e:bc:9b:52:28:11:87:4e:de:9a:e4:48:4a:c5:
d3:b8:59:26:28:9b:c5:8d:3e:db:74:ce:13:49:4e:
66:02:6b:b7:09:b8:be:c5:a9:e2:19:db:3e:32:f5:
a0:ab:c4:b2:88:20:36:d4:21:b2:04:b9:bd:93:6b:
ab:7f:fd:ea:79:58:c4:67:d7:3d:17:f6:83:33:a6:
f7:3c:45:6a:f7:ef:72:6c:f5:53:73:d3:10:14:44:
5a:b8:81:54:94:b2:38:3c:e7:ad:ff:f1:cc:3c:c7:
ee:8a:5c:30:dc:25:cf:02:62:dd:3b:7b:cb:ae:1b:
4e:1b:1d:fe:7b:82:6d:01:e3:3f:5e:c1:57:c4:39:
bc:3e:a8:ef:f9:8a:20:4d:38:61:1d:f1:b6:d9:93:
ad:a5:e4:ee:39:2f:aa:a3:c0:a1:0a:89:c8:26:65:
21:ae:59:3e:c9:05:71:77:36:a6:59:47:93:34:f0:
ae:3b:17:0d:ca:3b:6b:be:b2:01:94:aa:41:3d:2f:
b7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:85:C5:37:22:55:71:D6:DF:4A:83:BF:A8:24:5E:C5:BA:83:A0:0B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/QYXFNyJVcdbfSoO_qCRexbqDoAs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
19:1d:a7:c4:cb:b7:72:41:f1:96:4d:7d:22:9f:f9:8c:3b:d0:
50:0e:5a:c7:c6:f9:cb:4b:f0:cc:20:87:01:93:53:86:33:33:
54:cb:b7:2a:cf:2e:3d:26:69:69:b7:e5:8b:6a:22:7b:8b:41:
03:8d:2f:ef:58:df:44:5c:3f:fe:b4:c2:f9:3c:5b:ed:34:88:
fc:c1:29:da:85:96:55:fc:8e:22:be:a1:0e:78:63:84:d2:0f:
fd:89:1f:ba:23:b0:0a:88:d4:10:b2:e5:de:5f:e5:f0:73:3d:
69:4c:08:c6:3d:1f:0f:99:1d:6a:b1:02:dc:b7:11:ab:7d:09:
e0:0e:c0:e9:ae:24:18:23:99:80:6a:72:35:17:e6:3b:be:5b:
12:0e:12:97:66:57:ba:8d:f9:88:e6:d1:7d:8e:a4:79:b1:b7:
8f:8c:0c:9c:25:93:4e:cb:82:2e:d8:fe:5f:3d:db:07:2c:41:
23:a4:3f:ca:82:8e:02:2d:a1:5f:03:59:d3:8b:27:87:1b:22:
57:4a:cc:f0:bd:e7:2c:cf:d0:25:33:84:00:9a:5a:54:61:55:
e1:1e:ff:78:a6:a8:fe:86:88:34:45:3f:d3:99:78:86:7b:e5:
c8:5e:d6:01:5b:ec:0e:ed:84:eb:47:9d:71:77:e6:01:db:98:
da:86:4c:91
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgICTk0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA1MDIy
MzUzNDJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDQxODVDNTM3MjI1NTcx
RDZERjRBODNCRkE4MjQ1RUM1QkE4M0EwMEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDilxMCfXC4RyyzsFPahiTh+Uo78QjPXAlgYQitG058KcGQKA4d
wsi4AEe502CGxvEAcg/dqlf54RAnsPB+vJtSKBGHTt6a5EhKxdO4WSYom8WNPtt0
zhNJTmYCa7cJuL7FqeIZ2z4y9aCrxLKIIDbUIbIEub2Ta6t//ep5WMRn1z0X9oMz
pvc8RWr373Js9VNz0xAURFq4gVSUsjg8563/8cw8x+6KXDDcJc8CYt07e8uuG04b
Hf57gm0B4z9ewVfEObw+qO/5iiBNOGEd8bbZk62l5O45L6qjwKEKicgmZSGuWT7J
BXF3NqZZR5M08K47Fw3KO2u+sgGUqkE9L7edAgMBAAGjggH9MIIB+TAdBgNVHQ4E
FgQUQYXFNyJVcdbfSoO/qCRexbqDoAswHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L1FZWEZOeUpWY2RiZlNv
T19xQ1JleGJxRG9Bcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID
BAUr7wADBAVlTiADBAVnIwAwDQYJKoZIhvcNAQELBQADggEBABkdp8TLt3JB8ZZN
fSKf+Yw70FAOWsfG+ctL8MwghwGTU4YzM1TLtyrPLj0maWm35YtqInuLQQONL+9Y
30RcP/60wvk8W+00iPzBKdqFllX8jiK+oQ54Y4TSD/2JH7ojsAqI1BCy5d5f5fBz
PWlMCMY9Hw+ZHWqxAty3Eat9CeAOwOmuJBgjmYBqcjUX5ju+WxIOEpdmV7qN+Yjm
0X2OpHmxt4+MDJwlk07Lgi7Y/l892wcsQSOkP8qCjgItoV8DWdOLJ4cbIldKzPC9
5yzP0CUzhACaWlRhVeEe/3imqP6GiDRFP9OZeIZ75che1gFb7A7thOtHnXF35gHb
mNqGTJE=
-----END CERTIFICATE-----
Generated at Sun Jun 22 05:06:24 2025 by rpki-client