Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/gBd4DjC3m7KaaKrbMrY3QFeHdrA.roa
File: gBd4DjC3m7KaaKrbMrY3QFeHdrA.roa (raw, json)
Hash identifier: 2+W+6/5g+SbQWDX++YuwCN5no9uLUjBwIeJbS/XRiJk=
Subject key identifier: 80:17:78:0E:30:B7:9B:B2:9A:68:AA:DB:32:B6:37:40:57:87:76:B0
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 41B2
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/gBd4DjC3m7KaaKrbMrY3QFeHdrA.roa
Signing time: Tue 16 Apr 2024 04:22:56 +0000
ROA not before: Tue 16 Apr 2024 04:22:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16818 (0x41b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 16 04:22:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8017780E30B79BB29A68AADB32B63740578776B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:65:31:b0:49:9a:22:f3:3c:a1:5c:28:35:d8:
60:47:45:ed:2b:b1:49:39:c1:d3:c9:bd:fd:56:0d:
a7:e8:1d:ca:45:32:d5:c5:ec:f2:35:18:e7:24:f3:
62:cf:dc:8e:55:5f:80:04:92:1e:a3:f0:3a:05:99:
3b:a3:da:e3:33:06:ec:05:c5:f1:76:2a:5c:41:e2:
d6:6d:e1:92:91:9a:f6:ce:3d:fe:90:8f:08:aa:c6:
18:5f:f2:f6:80:5a:3b:bb:88:88:dc:ee:bd:3c:0e:
ba:f1:d5:1c:c3:37:d3:bd:a8:a6:72:f9:72:f1:50:
44:36:87:9a:26:ea:1a:2c:7b:16:fb:1b:33:5a:ac:
14:c6:f4:3e:3f:47:b6:54:30:9e:1a:f7:58:82:51:
76:d4:e2:99:68:9e:20:f2:9f:ee:1d:92:14:36:71:
15:65:fd:03:a4:a3:e0:bc:74:1e:f2:60:c2:07:20:
50:0e:ae:4e:f8:a3:1e:6a:a5:1c:c9:50:48:2b:26:
4f:81:4a:b6:06:9f:cc:52:84:0e:39:46:7d:f5:64:
90:ed:a0:37:7e:20:55:9e:68:82:59:6d:e1:bd:81:
2a:99:a5:a4:13:5d:5e:e9:c1:e9:4b:96:d8:90:fa:
5a:9b:73:6d:60:59:98:aa:00:b1:97:9b:cf:bd:c5:
fd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:17:78:0E:30:B7:9B:B2:9A:68:AA:DB:32:B6:37:40:57:87:76:B0
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/gBd4DjC3m7KaaKrbMrY3QFeHdrA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7a:de:97:02:18:22:94:2b:2c:87:9d:01:40:77:40:e2:36:8b:
62:f2:0f:fe:57:17:a6:dd:83:00:b8:c3:29:cc:bd:9b:7b:69:
dc:d1:43:0d:d2:e0:d7:cf:cc:45:3a:2a:ac:95:f4:4c:a2:7e:
9b:4d:a5:52:69:eb:9d:62:7a:9c:a9:0a:c1:96:6a:27:3f:c7:
fd:ee:b0:a4:20:7f:88:5b:36:bd:51:5c:4f:30:33:93:fe:fc:
cd:7f:f1:f3:4e:39:98:86:3f:72:4d:f4:98:50:b3:02:65:da:
62:5c:83:91:78:d8:c6:bc:e5:1a:da:40:65:ca:1c:0b:e8:c2:
24:36:43:bf:88:ab:78:38:88:7c:08:db:42:b7:3d:54:f2:b4:
e2:09:32:06:c2:8a:d7:52:30:10:9c:e8:3e:25:6e:c5:06:72:
03:6e:78:2a:8b:ab:c9:df:05:60:e7:04:13:0f:2e:12:ea:14:
79:2d:cf:b1:ce:26:03:a5:d1:0b:51:a3:07:6a:d3:c7:7c:8f:
33:a9:6b:9d:40:90:52:19:cb:10:3e:ef:2c:66:8f:34:59:45:
e6:0d:9e:f7:6f:7b:aa:b5:e0:f4:97:8d:00:b0:3c:b9:3e:75:
d5:ff:3f:d3:eb:7e:79:c9:87:ca:ba:51:fd:cd:8a:12:e8:7c:
f0:7c:8d:2c
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICQbIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MTYw
NDIyNTZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDgwMTc3ODBFMzBCNzlC
QjI5QTY4QUFEQjMyQjYzNzQwNTc4Nzc2QjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCnZTGwSZoi8zyhXCg12GBHRe0rsUk5wdPJvf1WDafoHcpFMtXF
7PI1GOck82LP3I5VX4AEkh6j8DoFmTuj2uMzBuwFxfF2KlxB4tZt4ZKRmvbOPf6Q
jwiqxhhf8vaAWju7iIjc7r08Drrx1RzDN9O9qKZy+XLxUEQ2h5om6hosexb7GzNa
rBTG9D4/R7ZUMJ4a91iCUXbU4ploniDyn+4dkhQ2cRVl/QOko+C8dB7yYMIHIFAO
rk74ox5qpRzJUEgrJk+BSrYGn8xShA45Rn31ZJDtoDd+IFWeaIJZbeG9gSqZpaQT
XV7pwelLltiQ+lqbc21gWZiqALGXm8+9xf1/AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUgBd4DjC3m7KaaKrbMrY3QFeHdrAwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L2dCZDREakMzbTdLYWFL
cmJNclkzUUZlSGRyQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAet6XAhgilCssh50BQHdA4jaLYvIP/lcX
pt2DALjDKcy9m3tp3NFDDdLg18/MRToqrJX0TKJ+m02lUmnrnWJ6nKkKwZZqJz/H
/e6wpCB/iFs2vVFcTzAzk/78zX/x8045mIY/ck30mFCzAmXaYlyDkXjYxrzlGtpA
ZcocC+jCJDZDv4ireDiIfAjbQrc9VPK04gkyBsKK11IwEJzoPiVuxQZyA254Kour
yd8FYOcEEw8uEuoUeS3Psc4mA6XRC1GjB2rTx3yPM6lrnUCQUhnLED7vLGaPNFlF
5g2e9297qrXg9JeNALA8uT511f8/0+t+ecmHyrpR/c2KEuh88HyNLA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 10:08:19 2025 by rpki-client