Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/qqPQpUBN2XIE40YKwXrtlaiR3QY.roa
File: qqPQpUBN2XIE40YKwXrtlaiR3QY.roa (raw, json)
Hash identifier: 82XDnkPoH3ui59pGnkR48dNPY2hnOSmBAv0ubz3gB9c=
Subject key identifier: AA:A3:D0:A5:40:4D:D9:72:04:E3:46:0A:C1:7A:ED:95:A8:91:DD:06
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3BC7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qqPQpUBN2XIE40YKwXrtlaiR3QY.roa
Signing time: Mon 08 Apr 2024 06:52:35 +0000
ROA not before: Mon 08 Apr 2024 06:52:35 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 36.0.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15303 (0x3bc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 8 06:52:35 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=AAA3D0A5404DD97204E3460AC17AED95A891DD06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:49:9a:5a:d3:2b:c5:fb:cd:b3:df:7d:e9:1a:
1a:1d:4b:2a:22:93:2b:83:64:8f:27:b9:25:15:f7:
46:c3:74:fe:62:87:b4:b8:91:94:31:19:c8:ec:8d:
cb:c4:7c:78:82:c1:2b:5f:7c:42:7e:98:bb:e9:aa:
a6:b9:21:07:6c:23:cc:af:0d:1d:44:78:e0:0a:a9:
4e:ac:8d:dd:db:36:0d:3a:32:ea:17:15:c3:59:13:
69:99:8a:2e:ad:43:2e:f5:22:04:23:20:16:80:32:
39:f2:bf:29:c6:ae:8e:84:fb:48:a7:fb:ba:80:c7:
09:d7:62:15:bd:4d:8c:df:6d:d5:4d:23:10:2c:9c:
bd:02:11:cd:92:68:03:c0:37:3f:a6:13:e3:de:83:
75:40:56:9a:b2:1e:24:33:b9:7b:8d:36:7e:bf:a0:
76:4a:db:ea:ee:73:6a:af:63:cf:ea:9f:c3:10:66:
d0:35:a3:00:46:0e:6f:a6:1d:3c:0c:e0:e6:40:a5:
51:d3:b3:15:21:2c:db:f7:79:fd:a5:c8:3c:a0:c5:
1b:66:87:ae:8c:4a:90:d4:7b:05:52:3b:a5:33:7d:
7e:2b:a6:8a:b8:3c:d2:96:cb:18:65:af:ee:95:57:
56:1d:4a:8b:33:59:84:7a:0b:ae:dd:f9:9e:52:c8:
97:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A3:D0:A5:40:4D:D9:72:04:E3:46:0A:C1:7A:ED:95:A8:91:DD:06
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qqPQpUBN2XIE40YKwXrtlaiR3QY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.0.64.0/18
Signature Algorithm: sha256WithRSAEncryption
22:e9:a6:f3:c3:3c:ce:9a:6e:f1:49:a7:41:0a:8b:4b:5c:db:
08:ae:8d:8d:3d:16:0b:f0:b0:29:88:d6:bb:5e:63:13:f7:3e:
ea:e1:69:3f:a4:1c:0b:7b:f2:bc:2a:32:2c:27:74:76:a8:92:
94:b6:c6:67:09:ad:5a:49:74:ea:23:00:c8:d6:aa:c8:ee:ec:
30:5f:9d:4c:0d:c5:69:fd:a6:01:2b:c7:0b:71:40:79:0c:50:
a0:30:98:57:39:c7:38:42:31:c3:0a:dc:6f:5b:f1:77:8b:7f:
7f:24:b7:0a:05:31:20:ed:59:8e:3e:13:f4:22:fb:83:4e:bb:
60:e3:c8:f7:8c:53:68:48:5c:42:9e:4f:d9:5e:4a:6b:85:4c:
2d:ae:95:a3:bf:a0:46:c8:a1:6e:3b:b9:c6:84:7c:89:22:a2:
76:7a:dc:b5:dc:20:26:ca:65:17:d8:a7:78:a8:b1:aa:a4:c9:
54:13:ca:b7:91:b4:73:73:a2:63:b9:a1:8e:f5:23:68:fb:3f:
da:bc:83:0b:47:29:7a:8d:6e:36:5d:69:12:4b:1b:21:39:68:
3d:d3:d5:e2:48:8e:8f:f0:48:c2:5c:7e:11:23:7f:01:02:ba:
b6:4b:a9:6d:5d:71:66:bb:7a:c5:60:e4:d5:f5:dd:83:b4:f4:
6a:26:65:b0
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICO8cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDA0MDgw
NjUyMzVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEFBQTNEMEE1NDA0REQ5
NzIwNEUzNDYwQUMxN0FFRDk1QTg5MUREMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4SZpa0yvF+82z333pGhodSyoikyuDZI8nuSUV90bDdP5ih7S4
kZQxGcjsjcvEfHiCwStffEJ+mLvpqqa5IQdsI8yvDR1EeOAKqU6sjd3bNg06MuoX
FcNZE2mZii6tQy71IgQjIBaAMjnyvynGro6E+0in+7qAxwnXYhW9TYzfbdVNIxAs
nL0CEc2SaAPANz+mE+Peg3VAVpqyHiQzuXuNNn6/oHZK2+ruc2qvY8/qn8MQZtA1
owBGDm+mHTwM4OZApVHTsxUhLNv3ef2lyDygxRtmh66MSpDUewVSO6UzfX4rpoq4
PNKWyxhlr+6VV1YdSoszWYR6C67d+Z5SyJczAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUqqPQpUBN2XIE40YKwXrtlaiR3QYwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3L3FxUFFwVUJOMlhJRTQw
WUt3WHJ0bGFpUjNRWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAYkAEAwDQYJKoZIhvcNAQELBQADggEBACLppvPDPM6abvFJp0EKi0tc2wiujY09
FgvwsCmI1rteYxP3PurhaT+kHAt78rwqMiwndHaokpS2xmcJrVpJdOojAMjWqsju
7DBfnUwNxWn9pgErxwtxQHkMUKAwmFc5xzhCMcMK3G9b8XeLf38ktwoFMSDtWY4+
E/Qi+4NOu2DjyPeMU2hIXEKeT9leSmuFTC2ulaO/oEbIoW47ucaEfIkionZ63LXc
ICbKZRfYp3iosaqkyVQTyreRtHNzomO5oY71I2j7P9q8gwtHKXqNbjZdaRJLGyE5
aD3T1eJIjo/wSMJcfhEjfwECurZLqW1dcWa7esVg5NX13YO09GomZbA=
-----END CERTIFICATE-----
Generated at Sat Jun 21 10:28:43 2025 by rpki-client