Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/sduWruGE7mVm1FkSZkf97Cz2Krk.roa
File: sduWruGE7mVm1FkSZkf97Cz2Krk.roa (raw, json)
Hash identifier: cqNLOFF+vZSFV6OXK4znWO0c0pmorF5Dtq+r9SdLIS8=
Subject key identifier: B1:DB:96:AE:E1:84:EE:65:66:D4:59:12:66:47:FD:EC:2C:F6:2A:B9
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4C11
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sduWruGE7mVm1FkSZkf97Cz2Krk.roa
Signing time: Tue 30 Apr 2024 00:23:33 +0000
ROA not before: Tue 30 Apr 2024 00:23:33 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19473 (0x4c11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 30 00:23:33 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B1DB96AEE184EE6566D459126647FDEC2CF62AB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:62:31:d3:fe:5d:57:8c:f1:19:b3:c0:63:cd:
6a:5f:d8:74:ef:6e:d5:c5:ee:cd:73:df:cd:2f:ac:
b7:4d:b3:76:46:79:6c:91:3b:91:e1:e2:55:ab:22:
ad:4b:66:4e:01:fb:a2:47:65:35:b4:ec:60:5c:43:
e0:8a:55:6e:6f:14:cb:69:01:cf:35:6f:fc:06:1a:
54:c8:a0:39:ae:ee:15:db:9c:4b:08:01:1a:41:cd:
c2:1a:90:8d:7b:6f:c4:07:f9:ed:ad:09:e3:b3:c8:
a2:ce:28:35:be:c7:36:3c:6d:72:5f:62:b6:2b:9b:
00:0b:5a:18:d6:c9:1d:c7:6b:9d:b7:b5:f5:fa:f0:
da:09:55:9d:4c:7e:02:e1:e2:22:ac:db:01:6f:97:
32:bf:0f:c6:01:d8:d0:4a:ca:fa:2e:db:40:9f:1b:
76:94:7a:f2:b8:4b:d3:bf:6d:86:c9:9a:ae:c8:f6:
52:68:75:96:96:48:dc:e0:de:34:8d:d0:bf:c3:7d:
99:f7:54:bf:66:66:ed:a8:5f:15:1c:e1:78:c3:46:
59:5f:60:79:b0:f3:2a:3a:ef:f2:81:d5:73:1d:48:
33:db:f4:fd:8a:16:02:d0:c3:db:b6:be:28:0e:b0:
d4:f3:f3:70:ab:2f:84:22:7e:7c:54:6f:f0:41:42:
8e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:DB:96:AE:E1:84:EE:65:66:D4:59:12:66:47:FD:EC:2C:F6:2A:B9
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/sduWruGE7mVm1FkSZkf97Cz2Krk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
a1:8c:68:65:42:40:aa:8d:5b:07:6b:9f:6d:16:7c:2b:82:ab:
17:9b:0e:eb:30:eb:c2:42:88:17:d2:af:f5:85:2f:e0:76:06:
da:a4:87:34:b1:ec:bb:f8:c6:00:f9:99:e4:bc:37:a4:6b:35:
30:67:ef:4b:94:15:1d:94:fb:a5:e7:bf:4c:30:47:c4:0a:4e:
ec:89:c7:25:7e:6e:ce:cb:a7:c5:5e:2b:83:3a:61:13:a6:9d:
ee:5a:09:a7:0c:39:19:56:ec:65:2f:c9:6d:ae:29:92:15:41:
ff:6c:5d:e3:2a:f9:27:ad:d8:e0:46:f3:75:be:69:e5:c3:3f:
c8:fa:de:25:5a:d0:dc:bc:f8:46:4a:63:fe:db:ed:44:30:c8:
5d:45:a0:01:60:eb:60:16:88:84:4b:91:92:71:3e:d2:93:f6:
72:4b:98:a1:af:fc:df:26:e6:e3:7a:ba:59:e6:0a:e4:10:57:
70:e0:6e:ca:0f:10:c7:09:45:4c:6c:fd:99:19:6b:0d:eb:20:
b5:04:5e:43:7f:74:0f:b2:0b:5d:27:03:72:9c:95:0e:2c:65:
68:08:e1:63:38:7a:c5:18:ff:da:9d:14:80:5a:b3:db:b2:78:
cb:03:f7:48:64:8d:0c:b6:83:6a:6f:fa:e5:a1:b0:13:f0:56:
41:c2:f8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 05:07:03 2025 by rpki-client