Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/mRon1UYgPLHcEDdD61Z0Fgv9AoY.roa
File: mRon1UYgPLHcEDdD61Z0Fgv9AoY.roa (raw, json)
Hash identifier: YoAY+scRUdvKSWQBjP9Aw5dDVUTvm7Nrjbajf/7Es7c=
Subject key identifier: 99:1A:27:D5:46:20:3C:B1:DC:10:37:43:EB:56:74:16:0B:FD:02:86
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 423D
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/mRon1UYgPLHcEDdD61Z0Fgv9AoY.roa
Signing time: Tue 16 Apr 2024 21:53:23 +0000
ROA not before: Tue 16 Apr 2024 21:53:23 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16957 (0x423d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 16 21:53:23 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=991A27D546203CB1DC103743EB5674160BFD0286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e1:2f:52:f1:e6:ea:3c:be:4d:32:a7:71:39:
7e:48:92:88:ca:2a:9b:22:9c:a6:b7:84:eb:7f:7d:
99:01:29:be:84:4b:33:18:df:e7:df:9f:19:92:2f:
2a:45:48:ab:aa:e6:32:6b:63:56:64:2c:40:4b:3d:
91:ef:87:54:60:9a:1c:e5:3e:3a:66:d7:d3:c9:d9:
c3:1e:c4:32:5b:36:66:a5:00:73:48:0b:b8:9a:24:
04:e8:71:c3:1a:09:1d:b8:0b:62:99:59:ce:37:9f:
a8:86:73:55:d9:53:9a:17:03:7e:ec:0f:1d:ba:6b:
97:57:ac:6a:32:ae:c2:2f:35:2b:9d:26:e1:e8:d7:
db:46:4a:d7:04:46:82:75:27:68:70:52:01:06:87:
97:ec:d2:a0:16:32:13:75:f7:8c:12:ec:aa:0d:62:
5d:37:9a:5e:51:7e:34:ef:c0:5d:29:00:7a:b3:08:
80:51:2c:47:18:20:a7:dd:72:13:f4:36:c2:a8:3c:
1b:69:19:78:23:b0:4b:e2:81:48:2d:3f:a8:07:f6:
9e:74:e1:68:7b:89:08:c0:35:bc:ab:b8:e2:25:9a:
0b:2e:f3:09:2c:7a:35:38:ef:0f:ac:95:1e:17:82:
c6:d2:c1:da:e2:f3:8f:99:e8:d9:01:8d:8a:0a:ca:
53:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1A:27:D5:46:20:3C:B1:DC:10:37:43:EB:56:74:16:0B:FD:02:86
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/mRon1UYgPLHcEDdD61Z0Fgv9AoY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
96:84:67:0d:44:e0:84:82:54:79:c0:4c:4b:4d:8a:90:a5:9f:
85:42:a5:05:c5:2a:fc:f8:d1:d3:e4:24:7a:7f:30:ae:cd:c4:
05:5a:c3:a8:44:cd:1a:e9:fc:02:76:c2:cc:3f:ee:b3:f1:4a:
eb:7a:84:2d:b0:7e:84:fd:d6:a5:31:fa:08:f5:e0:38:f0:71:
7b:5e:d6:7c:6b:d7:49:fa:f7:68:3b:55:f7:6d:25:e9:c1:35:
79:89:4f:71:3b:42:d6:60:f4:d9:5d:2d:f6:0e:f9:0e:4b:c1:
15:98:29:bd:13:b8:52:63:64:e2:54:90:7f:8f:84:6d:ca:33:
a9:f3:ee:28:b9:a1:92:4b:94:67:b0:f0:c5:76:51:ad:80:12:
f9:4f:ac:bd:92:2f:b3:4e:14:78:35:9e:20:de:d0:10:35:e5:
8f:20:87:0f:7f:b8:dd:72:2e:b5:59:c5:74:dc:99:28:28:d5:
99:79:f4:60:09:95:f9:c2:20:ac:6c:cc:18:6f:3a:a2:8c:71:
af:7e:fc:80:8a:85:41:9f:c2:97:cd:25:1b:93:21:0a:f7:be:
dd:91:0c:51:a9:a3:2b:b1:72:0c:be:0d:00:13:78:00:89:27:
4f:ed:68:1b:3e:19:3c:c3:42:cb:53:54:10:c1:dd:14:38:56:
44:54:8a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 19:57:48 2025 by rpki-client