Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/hzivRWpQ8SjMCZ7e0FNIlQ_MSdk.roa
File: hzivRWpQ8SjMCZ7e0FNIlQ_MSdk.roa (raw, json)
Hash identifier: Gusf+ykFHeelWPMh5456Y5RJW8r58K4bB4mbZgPfOcI=
Subject key identifier: 87:38:AF:45:6A:50:F1:28:CC:09:9E:DE:D0:53:48:95:0F:CC:49:D9
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3C2D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/hzivRWpQ8SjMCZ7e0FNIlQ_MSdk.roa
Signing time: Mon 08 Apr 2024 19:52:59 +0000
ROA not before: Mon 08 Apr 2024 19:52:59 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15405 (0x3c2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 8 19:52:59 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8738AF456A50F128CC099EDED05348950FCC49D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4f:c7:3f:f2:fc:1b:c5:64:44:17:7d:32:22:
73:85:20:57:bf:70:b4:eb:c9:9d:f7:ee:71:29:1b:
5b:d6:b0:d3:f2:e9:1a:c9:d1:ed:62:29:c2:51:21:
b1:42:eb:ac:ba:91:a9:10:a2:6a:c4:5a:7b:07:61:
27:ae:91:23:42:e3:51:ef:4f:80:a6:2b:c5:68:76:
eb:d2:af:2b:c4:2d:f9:f1:ef:53:0d:78:1f:fd:59:
7b:6a:d4:62:ff:3d:cd:62:65:f9:e2:27:e6:50:04:
2a:35:71:a8:ca:64:e5:fe:52:e0:b2:f8:6f:0c:7e:
e3:a9:bc:eb:db:57:1d:18:32:dc:2a:aa:19:f8:1b:
c2:6a:b4:fc:5d:4e:ca:cd:60:e1:76:d5:35:e3:92:
98:d8:4d:54:d4:87:b9:c2:f7:55:0a:c0:13:9a:ca:
63:8c:ca:0f:cf:b4:e6:1a:70:3a:e3:7b:e8:49:2e:
f9:4c:07:44:f9:41:a1:3e:fd:4a:2f:82:ba:17:10:
fe:a0:21:4a:c4:53:19:d2:f4:79:0a:dd:d4:12:ba:
c6:3e:6f:b3:51:46:45:ee:8e:10:c1:13:82:4a:5e:
4d:bd:8a:ba:23:c9:a9:41:4a:30:ea:e1:07:9e:6b:
35:24:e7:07:3f:fd:be:52:67:8f:a7:49:f8:55:dc:
6a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:38:AF:45:6A:50:F1:28:CC:09:9E:DE:D0:53:48:95:0F:CC:49:D9
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/hzivRWpQ8SjMCZ7e0FNIlQ_MSdk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
6a:17:da:5a:17:7b:fd:7d:ea:13:04:20:88:92:ee:bb:2d:53:
f4:ff:cb:60:cc:be:e5:84:2b:9e:6b:08:bc:95:f8:c5:24:bb:
40:1c:50:3a:5b:55:10:b0:c1:6f:07:4d:58:56:96:af:fe:f1:
20:7a:1c:e5:24:fb:cb:2a:c9:6b:9e:6a:0b:e0:91:70:d6:58:
aa:df:84:80:8a:a1:d2:23:4e:ed:c6:27:a7:8c:c0:fc:85:c9:
08:5a:49:8a:ae:04:9b:01:9a:aa:86:c4:24:29:24:9f:1d:c6:
9a:f1:f3:fc:b5:72:53:ba:94:e9:ba:7e:34:e3:5c:67:c4:84:
11:db:f1:87:cb:e1:c8:2d:70:dd:9a:70:1f:35:85:34:f1:95:
c6:8e:c9:ed:80:f5:3d:61:88:81:79:ed:d0:31:09:af:60:de:
74:b0:4c:b0:dc:bf:cc:46:7e:4b:7b:62:1d:51:dc:74:18:c3:
e0:32:21:69:d4:83:13:ec:ec:aa:26:e4:61:90:5e:fe:5f:b5:
4a:f9:19:d5:84:e5:58:91:a4:54:17:cc:12:c8:11:68:35:ba:
d9:33:61:eb:04:87:0e:50:16:f7:4f:ef:c7:b9:bd:e7:53:e3:
ac:f0:7d:73:d7:97:ed:86:5b:b4:ac:72:e3:5d:83:ff:c9:2e:
7b:97:0f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 05:35:27 2025 by rpki-client