Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/U01cflCnxnWfSyaMo74sK7-k-Qk.roa
File: U01cflCnxnWfSyaMo74sK7-k-Qk.roa (raw, json)
Hash identifier: JzXOnf84xZ3dgZsBGbSmVfteXqoIoyYjqSH/MF0YYR8=
Subject key identifier: 53:4D:5C:7E:50:A7:C6:75:9F:4B:26:8C:A3:BE:2C:2B:BF:A4:F9:09
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 418B
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/U01cflCnxnWfSyaMo74sK7-k-Qk.roa
Signing time: Mon 15 Apr 2024 23:22:55 +0000
ROA not before: Mon 15 Apr 2024 23:22:55 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16779 (0x418b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 15 23:22:55 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=534D5C7E50A7C6759F4B268CA3BE2C2BBFA4F909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:11:6a:99:85:d5:ee:06:55:e3:61:f5:f7:41:
26:c6:70:6f:4f:ce:05:af:3e:a6:45:f4:50:52:8d:
ec:e7:14:95:bf:82:5a:f7:c3:b3:67:1d:5b:fa:59:
c8:d9:dc:57:c6:93:cd:7d:7e:fd:e0:9c:a1:a9:46:
ad:10:c5:9b:9f:ec:01:5d:55:eb:05:ae:ca:e1:e1:
74:8b:ef:c0:e4:f6:22:c7:bd:17:aa:e4:88:3e:32:
fb:6f:cd:9e:61:3d:2c:93:53:73:02:0e:3d:f1:40:
f0:fc:8d:af:d3:e8:aa:03:80:3d:cb:92:0d:d7:d4:
b8:30:db:20:9c:b8:2b:46:b0:01:f2:61:b8:d4:3e:
70:e5:6e:cd:c3:b0:bb:24:80:b7:ba:cc:03:43:3e:
b5:79:2a:97:fd:6c:66:4b:88:4f:be:90:72:ae:47:
f9:be:b5:74:07:ae:14:7f:14:6b:78:be:fe:4d:d2:
8e:43:80:36:e3:ad:d0:d1:28:25:cf:98:7f:7e:b6:
74:22:7e:db:25:2b:15:56:34:4e:7e:cf:7c:2b:2c:
4f:3f:9b:ba:77:19:78:0d:18:a3:54:61:83:95:79:
fa:fd:c7:4d:3a:a5:50:3e:b5:bd:75:7b:cf:8c:29:
6a:36:3f:01:22:e0:62:2a:7f:42:58:31:e8:27:87:
7d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:4D:5C:7E:50:A7:C6:75:9F:4B:26:8C:A3:BE:2C:2B:BF:A4:F9:09
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/U01cflCnxnWfSyaMo74sK7-k-Qk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
4e:64:90:33:c6:5e:c9:20:67:93:b9:13:15:d0:3d:db:02:64:
87:07:18:e7:c2:aa:47:03:02:46:28:3d:4b:72:83:a6:34:64:
99:5c:ff:6f:1c:09:3b:6a:ae:2f:f0:5e:7d:f7:a8:de:c1:f7:
8f:8c:b3:5e:c8:a6:41:32:20:fe:4e:fb:b8:69:e4:ce:ca:61:
21:1c:a8:d8:77:f9:4d:80:05:4c:57:0e:75:f0:a4:50:67:17:
d9:21:a7:31:f2:6a:48:7c:ee:24:af:a7:66:40:4f:85:db:d8:
cb:ba:03:37:7c:27:d1:2b:b3:9a:5b:3a:82:5f:19:d3:3a:e6:
6b:c0:04:44:10:ff:26:56:70:42:d4:20:e2:4b:09:d4:3e:b9:
2f:1b:72:d1:29:b0:cd:57:5c:1c:9a:17:46:7f:30:01:3e:43:
7c:fe:81:9b:56:23:f2:5f:dc:75:bd:49:b1:b2:1d:ab:75:bc:
51:56:37:ad:f4:4c:5e:d8:1c:22:b3:d6:07:32:fb:4e:dc:45:
35:3f:ae:ef:a2:2a:3f:43:5f:ce:f5:01:cb:15:21:3e:49:8a:
4b:35:3c:79:b4:fc:fb:12:de:9f:70:8a:30:68:25:ad:76:f5:
24:05:06:c0:8a:59:8a:94:27:a6:0f:4c:7a:0e:00:9c:ad:7c:
1d:a1:2a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:56:19 2025 by rpki-client