Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/g2ADFVG-TeVnemx0gDo5lba8lCI.roa
File: g2ADFVG-TeVnemx0gDo5lba8lCI.roa (raw, json)
Hash identifier: ZmchdY8JvwUIJCbZS6B3oACuu2AH8P7fBaKxZnlqfkw=
Subject key identifier: 83:60:03:15:51:BE:4D:E5:67:7A:6C:74:80:3A:39:95:B6:BC:94:22
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3A61
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/g2ADFVG-TeVnemx0gDo5lba8lCI.roa
Signing time: Sat 06 Apr 2024 10:22:27 +0000
ROA not before: Sat 06 Apr 2024 10:22:27 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14945 (0x3a61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 6 10:22:27 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8360031551BE4DE5677A6C74803A3995B6BC9422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4b:7a:56:c6:a0:95:8a:ba:d3:df:ff:ad:2e:
0f:71:b3:a8:75:44:b5:dd:1e:91:e8:d3:9b:24:20:
98:cb:ce:c5:e1:a8:c2:1c:67:48:75:b0:43:6e:21:
98:8a:4c:81:77:93:f4:f0:dd:30:9f:89:10:9f:d0:
f9:e1:b5:1f:39:8a:44:be:b4:05:78:9a:af:4e:5f:
8c:60:a4:b0:2b:e5:b3:53:9b:9c:88:d7:7d:ef:78:
cb:ab:fe:32:a6:69:95:54:af:39:d8:ef:1a:44:5a:
ec:eb:77:e2:c0:11:1a:62:77:84:2c:ee:3b:b6:cc:
e2:b5:a3:0a:ce:d5:b0:9d:b2:00:2c:c0:37:a7:6d:
94:44:b9:50:6e:2b:62:c7:fa:6d:df:be:1a:4d:c3:
b4:ef:54:4d:fd:8a:36:e2:db:06:b7:19:3d:3a:0b:
8a:b2:46:08:43:65:31:75:87:d4:59:50:61:2a:46:
22:1d:e5:be:bf:e3:8e:1a:0b:25:1c:8d:e2:52:ae:
d9:4e:91:0f:64:e8:1a:11:63:ee:33:b6:50:4b:35:
c9:e0:7f:03:ef:e8:32:09:f1:eb:d2:58:85:fa:5e:
33:1a:47:28:2e:04:5b:3a:d4:f9:f7:e3:b5:87:d0:
d0:eb:50:f5:7e:ff:ac:76:2f:a4:7b:61:a9:c2:39:
a0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:60:03:15:51:BE:4D:E5:67:7A:6C:74:80:3A:39:95:B6:BC:94:22
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/g2ADFVG-TeVnemx0gDo5lba8lCI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
95:07:2d:c7:7e:4f:65:3d:09:14:5b:39:66:1f:a3:d3:0b:69:
58:08:9c:44:9a:22:81:bb:3e:ef:cc:5e:04:97:ea:72:e6:cb:
16:5f:65:d8:0e:a9:41:91:a4:87:ce:0a:7e:c9:bd:3a:98:6a:
e1:f9:ea:ee:1d:fb:26:dd:aa:2c:aa:ab:30:ff:c9:4a:73:98:
ae:b4:e0:0c:4f:90:e2:7e:8e:9c:c3:f7:2d:70:ec:c2:b1:3f:
ff:b8:73:74:fa:ea:67:6c:bc:57:19:b5:ef:a1:2d:72:bb:20:
eb:16:ff:e9:c5:53:c9:f0:a8:ae:5d:ab:6d:56:8a:30:7d:1d:
7d:49:36:7d:f5:b0:aa:a8:30:2f:5d:94:ed:40:d9:74:b4:7d:
49:3d:11:3c:ba:98:06:a9:1c:ed:e2:a1:b4:41:81:7a:22:6c:
ed:db:89:2a:c4:97:5d:8c:d9:2e:35:d7:63:a5:76:cc:11:4d:
86:fa:78:d8:6e:d5:64:ab:70:dc:61:f1:81:39:08:0a:46:ad:
b9:ea:ff:8f:da:d8:da:8f:ec:70:3e:19:ff:ca:26:8f:2f:3e:
80:77:3a:10:5a:1e:85:dc:24:a0:10:14:02:44:dd:74:98:f0:
62:d9:e4:2e:65:09:77:02:33:5c:41:e9:50:14:ca:91:a4:08:
45:b9:bf:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:27:11 2025 by rpki-client