Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/l6PXHJx5SRTMasX6fzFCebPbA7E.roa
File: l6PXHJx5SRTMasX6fzFCebPbA7E.roa (raw, json)
Hash identifier: iodTDcgZesBQR/I8HnF4h5h6QX1qZQse1cAOEE5Whw0=
Subject key identifier: 97:A3:D7:1C:9C:79:49:14:CC:6A:C5:FA:7F:31:42:79:B3:DB:03:B1
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 520A
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/l6PXHJx5SRTMasX6fzFCebPbA7E.roa
Signing time: Tue 07 May 2024 23:23:55 +0000
ROA not before: Tue 07 May 2024 23:23:55 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21002 (0x520a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 7 23:23:55 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=97A3D71C9C794914CC6AC5FA7F314279B3DB03B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ea:f4:4f:ad:4e:88:7e:f8:47:19:ea:b3:74:
f9:db:46:bf:66:4b:9e:3e:6c:6f:e5:12:6c:5d:0d:
bc:ef:91:f4:f0:76:e6:dd:6c:9a:2c:9e:e4:53:5e:
52:b9:f5:f9:24:7c:b0:79:9f:63:36:0a:38:a2:36:
c0:3b:7f:21:39:ef:57:e6:53:57:4b:36:c1:4f:3c:
a0:db:7f:ad:f6:45:bb:df:9a:25:9f:d0:97:0e:30:
57:d2:c3:47:99:50:99:4a:09:88:c0:95:f5:91:88:
27:94:b8:b3:d1:e5:fa:b0:9a:d5:87:f3:47:fe:b0:
4d:eb:28:0d:b9:1e:f0:41:a3:6e:e0:51:2d:f8:af:
61:95:ad:f1:60:a9:aa:ea:cc:25:95:79:cf:48:75:
92:66:35:ab:b4:6f:38:09:98:e1:9c:6d:5b:b3:0a:
83:72:5c:87:ea:db:98:32:ff:64:b9:2b:ac:6b:52:
f1:dc:aa:13:00:39:c7:4c:f2:34:a3:ee:53:07:3f:
1b:d5:6b:8f:4c:b1:04:16:db:74:a8:57:04:5f:9a:
2c:da:2d:48:5b:62:2f:96:27:8b:1f:18:fd:40:6b:
15:19:68:74:ad:b9:02:d4:68:15:f3:d0:4e:82:5a:
58:12:4d:7e:7b:a5:5a:1f:6b:ed:a9:33:7d:68:18:
a9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A3:D7:1C:9C:79:49:14:CC:6A:C5:FA:7F:31:42:79:B3:DB:03:B1
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/l6PXHJx5SRTMasX6fzFCebPbA7E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1a:26:f9:91:96:aa:98:89:8f:1d:84:28:5f:6d:4d:0b:65:8d:
aa:8e:2d:f4:07:72:19:e7:c3:c6:cc:0f:39:7f:24:8a:53:4b:
e4:bb:8b:63:5f:d5:6d:43:69:47:d0:ef:e7:6d:3f:4d:8c:2f:
f7:ec:2e:9d:1e:16:58:79:87:52:77:ed:1f:6e:73:77:4b:1b:
fd:b1:87:0c:d6:67:c5:ef:67:c9:1f:3b:fa:70:dd:46:2f:d6:
08:52:49:32:fd:f4:d8:21:ac:86:a5:2a:64:0b:9a:66:64:72:
84:29:e6:c8:a0:29:d5:8c:7a:2f:5e:a9:31:83:5d:7f:ab:ac:
4f:ce:5b:07:b4:67:8e:04:d5:4e:a1:3f:4f:e1:15:4a:32:33:
f4:73:0c:fb:34:92:c9:69:43:a3:e3:e9:cd:9f:18:2f:d2:8a:
e8:1c:01:66:30:59:dd:e6:00:69:40:e1:00:87:75:d1:a8:04:
d8:d0:13:9c:9d:80:79:62:87:94:b4:dc:2b:76:b7:72:2f:f2:
96:1b:8b:39:33:df:02:f6:4f:77:a0:d8:d2:3f:ae:9a:48:ab:
91:d7:7f:ce:91:0d:19:20:e1:52:6d:d7:5f:4e:13:d9:0e:84:
4f:90:20:b6:b8:b7:ca:2d:79:01:d0:a5:f3:4e:8b:aa:19:8b:
86:e8:64:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:44:22 2025 by rpki-client