Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/TcdGupdclXdwbN76vkBs9LzHzeg.roa
File: TcdGupdclXdwbN76vkBs9LzHzeg.roa (raw, json)
Hash identifier: 4zglqTVQLMCbxQwCGP5k9sLr6uZaywcdqjmiYay/tLo=
Subject key identifier: 4D:C7:46:BA:97:5C:95:77:70:6C:DE:FA:BE:40:6C:F4:BC:C7:CD:E8
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3DCD
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/TcdGupdclXdwbN76vkBs9LzHzeg.roa
Signing time: Wed 10 Apr 2024 23:53:12 +0000
ROA not before: Wed 10 Apr 2024 23:53:12 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15821 (0x3dcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 10 23:53:12 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4DC746BA975C9577706CDEFABE406CF4BCC7CDE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3b:d4:6a:93:18:57:c6:79:81:74:7c:ee:92:
4d:74:06:98:25:ad:4c:43:e5:ef:27:ee:61:b5:ba:
35:db:76:71:f0:b5:65:e6:a1:8c:0f:c6:5f:77:38:
e3:c5:89:94:ef:e8:8d:16:cb:6f:a4:1c:e2:d4:a8:
74:2b:db:80:68:47:88:7d:93:44:e7:10:bc:8d:13:
69:52:25:c7:05:17:3f:6b:71:a5:d2:f3:d3:b3:99:
78:d9:fd:b0:86:ba:df:5a:4f:3f:c5:87:c1:8e:e4:
a3:64:1e:71:e3:28:0b:df:b0:9e:ca:7a:f4:98:64:
11:af:3f:28:53:4f:b2:59:e3:e2:73:a1:60:02:ba:
20:90:ef:45:b7:9a:30:9e:68:db:34:78:67:06:32:
78:ef:cc:22:a3:55:52:72:ed:6b:f8:51:1d:40:2f:
46:d7:24:33:2d:b6:f6:b1:b8:7c:1b:1b:96:ab:ac:
ef:88:96:49:90:be:db:49:8d:88:94:69:6f:47:26:
40:7d:09:20:7c:82:8f:b8:e9:a9:4a:93:c8:ba:fe:
3a:17:6c:ef:6e:c0:f3:17:a9:54:0e:a3:47:bc:76:
da:32:b0:4c:af:bd:44:0e:1e:eb:05:a7:9d:c2:40:
f0:8d:0b:28:3b:cc:5a:3e:f4:3d:f4:ee:8f:cd:9c:
e8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C7:46:BA:97:5C:95:77:70:6C:DE:FA:BE:40:6C:F4:BC:C7:CD:E8
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/TcdGupdclXdwbN76vkBs9LzHzeg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
4a:9c:e5:b6:47:72:df:19:51:26:5b:dc:2b:54:32:9b:d1:53:
a8:fb:ba:82:c6:5e:eb:cf:2d:d3:b4:80:95:f9:8c:61:8b:b2:
b1:a0:1e:a5:9d:ee:8b:cd:8e:a3:c9:a3:f0:ee:d9:38:0b:0e:
21:86:e6:3d:59:d2:df:ee:1e:ff:f9:33:d0:3c:be:6c:32:4a:
f4:6e:32:7f:99:f0:e6:f8:e0:ff:7b:c9:2c:54:78:f5:c2:95:
82:32:0b:ad:b7:3d:a5:b4:37:d7:d1:08:96:d5:9a:ec:6b:5e:
83:47:cc:ab:8d:5d:d4:8b:17:ac:f8:2c:c5:e3:a8:90:d0:80:
1c:53:a4:18:05:73:29:fe:3f:a9:9d:7a:d3:48:4f:e9:f0:2b:
0a:67:18:cc:94:a8:f4:81:0f:9e:39:ed:0b:1e:fe:69:bb:a2:
6b:68:a6:71:8c:87:1b:33:0b:64:2d:2b:97:86:31:6c:00:91:
bf:6a:91:32:c0:cb:9b:c0:26:73:4e:3f:77:eb:53:a1:2c:9d:
1d:25:38:53:a2:01:81:1b:e9:68:13:5f:f5:b3:e1:db:73:72:
2c:30:ed:cc:e6:9a:8d:bc:1c:55:4a:5d:58:e2:fb:7b:5a:de:
c9:54:27:e3:cd:76:f8:79:6d:4f:cb:81:0c:79:a1:01:1c:2a:
db:65:9d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 10:33:30 2025 by rpki-client