Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/xCyHO2Rmd2Rtzs1P47weyrYdWik.roa
File: xCyHO2Rmd2Rtzs1P47weyrYdWik.roa (raw, json)
Hash identifier: gGZbSZQgFAOoZKOgVAJ705ztJ36mrLSiLiMvi5hGmIE=
Subject key identifier: C4:2C:87:3B:64:66:77:64:6D:CE:CD:4F:E3:BC:1E:CA:B6:1D:5A:29
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 3AD6
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/xCyHO2Rmd2Rtzs1P47weyrYdWik.roa
Signing time: Sun 07 Apr 2024 00:52:30 +0000
ROA not before: Sun 07 Apr 2024 00:52:30 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15062 (0x3ad6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 7 00:52:30 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C42C873B646677646DCECD4FE3BC1ECAB61D5A29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:52:5d:af:90:23:11:4f:31:a4:2f:e0:13:a8:
a9:01:3a:80:c7:87:35:24:af:ed:5d:66:08:c0:a0:
c5:83:55:87:91:f6:d5:45:70:ea:b8:cc:f3:30:19:
7c:1b:09:73:15:a4:03:6e:dc:03:81:2a:9a:b9:c7:
0f:c8:a9:28:de:cf:29:d0:49:b5:0b:b3:0e:e7:7d:
dc:2d:b6:fd:a7:93:57:81:21:f8:50:5d:9b:37:b8:
bf:d2:c6:87:82:b0:1c:88:3d:d1:d1:cf:77:5c:b3:
18:af:b1:a9:27:99:83:df:d5:6a:00:29:48:24:28:
6d:f7:c7:b4:c0:e8:40:37:20:81:21:74:09:73:96:
ef:10:06:d4:0d:33:e2:36:1a:84:c8:3f:06:a7:b9:
c4:ce:51:93:07:53:bf:f8:3f:ba:03:fb:67:39:55:
4c:5f:57:69:69:ef:29:26:08:f2:6b:d6:37:4a:ca:
0a:7c:9c:71:ae:47:30:b5:f0:59:02:65:e7:7b:5c:
4f:93:66:4e:4b:53:59:2c:5c:21:a6:28:64:41:94:
4c:3b:20:b5:63:c5:75:07:3f:44:11:88:4e:e3:4e:
eb:a9:d9:0f:63:8f:c9:59:b6:db:b3:8e:59:6e:b7:
fb:b9:dc:29:91:39:05:24:58:df:b4:d3:19:d9:04:
98:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2C:87:3B:64:66:77:64:6D:CE:CD:4F:E3:BC:1E:CA:B6:1D:5A:29
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/xCyHO2Rmd2Rtzs1P47weyrYdWik.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
04:41:9d:9b:81:f4:a0:16:de:16:c1:cb:f4:fa:c9:54:9f:58:
50:5e:0b:6c:23:f8:28:b9:08:c8:ac:a1:6f:73:49:e6:aa:5d:
22:39:ae:5f:62:7b:b3:9c:3e:aa:87:7c:22:27:ce:01:1f:99:
ab:7a:99:f1:b2:86:bf:17:6a:ca:15:d0:b8:79:02:5d:09:d0:
5d:ad:22:7b:bd:9f:53:be:74:69:f9:98:3f:3f:56:51:a6:c0:
f1:bf:48:e3:61:71:e8:68:13:30:bb:a9:20:7e:08:a8:75:7f:
f2:25:97:5e:35:02:4c:6d:0c:5c:93:c5:83:5a:e9:72:5b:69:
1b:63:d0:60:a8:9f:28:08:1d:b0:51:2f:87:63:32:ee:8d:82:
4a:a6:44:6b:c6:54:79:78:32:ae:e2:81:bc:64:8f:9a:f3:2b:
d3:91:87:48:c0:b4:cd:b4:22:92:15:f7:9c:e8:ca:7e:38:2d:
43:53:30:d4:83:e4:b9:82:d3:af:97:ff:21:9d:77:30:60:70:
d8:4d:88:09:58:7a:7b:6d:e4:ca:69:4f:a5:e3:7c:4e:c2:01:
10:92:ca:3c:10:89:c4:1b:20:2e:08:2b:32:d4:4c:21:8c:d9:
6e:18:cf:8c:5f:02:bd:78:b1:07:ac:51:c3:ac:78:21:2c:9f:
eb:89:74:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:39:05 2025 by rpki-client