Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/i8oVDsRqdv8FDkYxk6YORTyTlWs.roa
File: i8oVDsRqdv8FDkYxk6YORTyTlWs.roa (raw, json)
Hash identifier: nyEJXdIEpQNRGSs94JHOOea7aOAIrrRnUJdwtv5jePs=
Subject key identifier: 8B:CA:15:0E:C4:6A:76:FF:05:0E:46:31:93:A6:0E:45:3C:93:95:6B
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 54A5
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/i8oVDsRqdv8FDkYxk6YORTyTlWs.roa
Signing time: Sat 11 May 2024 10:54:03 +0000
ROA not before: Sat 11 May 2024 10:54:03 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21669 (0x54a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 11 10:54:03 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8BCA150EC46A76FF050E463193A60E453C93956B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:20:8d:4f:ec:cd:19:f5:61:67:ad:7a:85:e3:
ee:7e:c4:e5:32:64:6e:6c:70:90:50:79:9e:9f:d7:
07:80:7e:14:54:af:09:6e:af:d1:ee:3e:53:73:c7:
df:f0:a0:60:c7:08:9d:d7:21:d7:19:86:54:fd:7c:
02:70:45:e4:ab:d0:5d:7f:0e:d5:8a:33:4c:ed:3b:
cd:ca:99:8c:bb:0c:3c:93:ae:9c:23:68:f8:f0:37:
f5:43:09:dd:39:36:47:4e:9c:d5:a6:fb:c0:51:be:
de:73:af:56:9e:c9:9b:56:47:f9:ba:dc:e3:e5:84:
17:a7:44:28:ec:d9:bb:10:1c:ac:f2:01:7d:b7:17:
cd:ea:5f:c0:09:7c:9d:e6:c4:fd:4f:b4:7d:46:1a:
b1:52:89:90:b2:b4:ff:6b:cd:5c:f8:f4:c7:4c:e8:
6f:e3:be:7d:27:ad:e3:5e:2c:4d:ac:23:51:9e:6f:
e4:b4:25:93:7c:ae:b2:4c:e3:25:09:b0:10:6c:70:
e6:b9:66:d5:0d:43:3b:05:45:4e:36:9b:c6:c0:c5:
04:27:5d:64:01:92:83:08:1c:46:9b:04:c3:b7:7f:
c5:3f:ad:84:49:67:bb:fb:fa:f9:50:74:8e:fc:a3:
47:47:13:3c:6d:2c:98:43:3a:c2:88:65:8d:8b:f0:
73:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CA:15:0E:C4:6A:76:FF:05:0E:46:31:93:A6:0E:45:3C:93:95:6B
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/i8oVDsRqdv8FDkYxk6YORTyTlWs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
98:fe:eb:6b:84:31:6c:19:70:5f:e1:de:6d:67:27:fa:ec:1a:
03:ac:90:55:fb:57:d8:93:74:b0:86:40:4e:10:ab:d6:cd:11:
68:53:d7:67:31:86:87:83:3e:51:5c:e3:39:10:17:f5:e1:6c:
2c:62:c6:77:19:41:ee:66:74:68:f3:cf:f6:47:f6:33:12:b9:
a9:e9:d9:76:66:87:e6:54:8b:c8:8c:1f:33:5b:d6:f1:15:db:
35:ee:25:4a:53:ad:7b:7b:c9:f3:8d:24:d8:6f:07:ab:90:2a:
2d:d3:93:2c:ba:53:65:a2:58:5f:33:0c:58:ac:e7:70:7d:21:
5a:52:54:ef:ae:cc:2d:43:b7:a7:e4:35:8b:6a:de:9c:7b:61:
d6:c8:dc:50:98:db:89:92:d2:33:d5:2b:96:86:40:cc:63:54:
a9:4e:4e:4d:0e:4f:4a:55:51:ea:7c:b3:4f:ce:69:4d:67:da:
2e:02:39:79:31:a4:ac:6c:2c:8b:d0:2f:f9:38:9c:0c:20:f8:
7b:57:7b:0e:e4:68:98:38:ef:02:8e:ca:12:a3:7b:8e:27:1c:
ba:ae:29:d5:e9:dc:a3:d9:2c:55:c0:11:84:c6:c8:70:87:22:
50:7c:45:19:67:0c:5c:d7:d3:91:23:b7:84:e2:f9:ec:c7:08:
50:e7:25:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 10:24:53 2025 by rpki-client