Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1211/rta4ctWrP7dVbEYm8mprCffVCp4.roa
File: rta4ctWrP7dVbEYm8mprCffVCp4.roa (raw, json)
Hash identifier: bMsO3mJGyuKXflu57u8LrkuSirAz6u+24GxECcB0HzA=
Subject key identifier: AE:D6:B8:72:D5:AB:3F:B7:55:6C:46:26:F2:6A:6B:09:F7:D5:0A:9E
Certificate issuer: /CN=183D882201945BE13993B4C6DAC954F8EE426C97
Certificate serial: 1022
Authority key identifier: 18:3D:88:22:01:94:5B:E1:39:93:B4:C6:DA:C9:54:F8:EE:42:6C:97
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GD2IIgGUW-E5k7TG2slU-O5CbJc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/rta4ctWrP7dVbEYm8mprCffVCp4.roa
Signing time: Mon 24 Feb 2025 05:03:03 +0000
ROA not before: Mon 24 Feb 2025 05:03:03 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 63701
IP address blocks: 218.246.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4130 (0x1022)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=183D882201945BE13993B4C6DAC954F8EE426C97
Validity
Not Before: Feb 24 05:03:03 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=AED6B872D5AB3FB7556C4626F26A6B09F7D50A9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c3:e6:07:ef:08:5b:b0:1f:3b:81:20:8c:3c:
00:80:88:5c:86:02:30:a2:d2:f6:cb:b8:5b:28:3e:
de:b4:b9:4e:c5:38:62:ea:54:fc:3a:dc:de:16:40:
d4:32:d5:a5:bd:53:22:89:9f:14:3f:f0:b4:dd:a8:
8c:eb:1a:a8:a8:3a:51:ae:77:17:1a:c9:f3:d4:46:
2e:c6:d7:01:a0:b7:5b:e4:6c:53:2f:cb:b6:6d:66:
08:da:95:ef:02:26:6f:7f:5a:80:49:ad:42:5f:3a:
da:80:b3:26:f8:f9:6a:bc:74:a2:33:8b:b5:e4:1d:
ae:85:86:b0:a5:09:a9:88:86:33:b1:17:e3:88:9c:
1a:5e:ee:d9:d7:5f:07:26:c2:61:05:55:f0:4e:94:
e5:df:60:8d:97:7b:1d:fb:e6:14:24:78:c4:66:b8:
e9:ec:c1:ea:7e:dc:fd:27:97:67:f2:5e:da:63:dd:
9e:93:74:d8:47:31:19:f9:33:08:41:bf:c9:83:79:
bf:3d:ec:ea:33:6a:5f:4f:56:b4:d9:90:2b:e1:b1:
11:ac:fc:86:82:82:f5:87:1c:fe:e9:22:40:5d:98:
fa:5d:88:ea:51:72:ee:e1:e7:27:f5:28:2d:f3:4b:
93:fe:b9:58:68:47:2e:23:1e:bb:76:f7:ae:b4:b3:
11:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D6:B8:72:D5:AB:3F:B7:55:6C:46:26:F2:6A:6B:09:F7:D5:0A:9E
X509v3 Authority Key Identifier:
keyid:18:3D:88:22:01:94:5B:E1:39:93:B4:C6:DA:C9:54:F8:EE:42:6C:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/GD2IIgGUW-E5k7TG2slU-O5CbJc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GD2IIgGUW-E5k7TG2slU-O5CbJc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/rta4ctWrP7dVbEYm8mprCffVCp4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.246.48.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:a4:3e:48:0b:cd:31:b2:07:2d:34:73:50:b0:36:ff:76:c1:
c6:d5:00:f1:80:d2:d9:27:68:76:64:6a:1d:f3:f5:1c:d6:db:
a8:97:c9:09:08:23:0d:cf:95:0e:36:ab:c3:22:77:2a:55:0f:
11:f0:67:20:b0:bc:0d:5d:f7:9f:10:03:85:4e:be:4a:0e:91:
1b:26:d9:cf:2b:89:d7:09:1c:d5:b4:fc:db:15:3c:0f:ea:b9:
e5:9c:dc:6c:45:21:66:85:cb:ac:06:2b:c2:1d:81:d5:4c:e6:
62:0e:fa:aa:bd:ff:b0:c5:47:08:e0:92:59:75:7a:19:00:d1:
07:a7:d9:59:4a:22:1c:eb:6d:f3:20:5a:7b:dd:c1:a6:96:6e:
7e:12:83:9c:a6:47:7e:04:c4:a3:5b:cc:87:b6:58:8a:e9:6b:
4d:46:a6:b7:7d:e5:c7:91:0b:5d:07:4c:15:42:d1:9f:2d:a3:
7a:b7:e5:10:46:f2:97:8c:e5:ed:59:f4:f6:14:a4:5e:f9:77:
dd:0f:18:42:c6:eb:ff:01:2b:dc:28:95:c1:41:34:eb:61:92:
96:d9:68:cb:96:69:c4:20:01:88:99:fb:c7:01:f7:32:b0:10:
17:2d:fb:f8:89:7f:3d:99:e5:6c:12:8d:ee:3d:e8:e6:d0:1b:
36:2d:19:5f
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICECIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTgz
RDg4MjIwMTk0NUJFMTM5OTNCNEM2REFDOTU0RjhFRTQyNkM5NzAeFw0yNTAyMjQw
NTAzMDNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEFFRDZCODcyRDVBQjNG
Qjc1NTZDNDYyNkYyNkE2QjA5RjdENTBBOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjw+YH7whbsB87gSCMPACAiFyGAjCi0vbLuFsoPt60uU7FOGLq
VPw63N4WQNQy1aW9UyKJnxQ/8LTdqIzrGqioOlGudxcayfPURi7G1wGgt1vkbFMv
y7ZtZgjale8CJm9/WoBJrUJfOtqAsyb4+Wq8dKIzi7XkHa6FhrClCamIhjOxF+OI
nBpe7tnXXwcmwmEFVfBOlOXfYI2Xex375hQkeMRmuOnswep+3P0nl2fyXtpj3Z6T
dNhHMRn5MwhBv8mDeb897Oozal9PVrTZkCvhsRGs/IaCgvWHHP7pIkBdmPpdiOpR
cu7h5yf1KC3zS5P+uVhoRy4jHrt29660sxHZAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUrta4ctWrP7dVbEYm8mprCffVCp4wHwYDVR0jBBgwFoAUGD2IIgGUW+E5k7TG
2slU+O5CbJcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIx
MS9HRDJJSWdHVVctRTVrN1RHMnNsVS1PNUNiSmMuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0dEMklJZ0dVVy1FNWs3VEcyc2xVLU81Q2JKYy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEyMTEvcnRhNGN0V3JQN2RW
YkVZbThtcHJDZmZWQ3A0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAtr2MDANBgkqhkiG9w0BAQsFAAOCAQEAbqQ+SAvNMbIHLTRzULA2/3bBxtUA
8YDS2SdodmRqHfP1HNbbqJfJCQgjDc+VDjarwyJ3KlUPEfBnILC8DV33nxADhU6+
Sg6RGybZzyuJ1wkc1bT82xU8D+q55ZzcbEUhZoXLrAYrwh2B1UzmYg76qr3/sMVH
COCSWXV6GQDRB6fZWUoiHOtt8yBae93BppZufhKDnKZHfgTEo1vMh7ZYiulrTUam
t33lx5ELXQdMFULRny2jerflEEbyl4zl7Vn09hSkXvl33Q8YQsbr/wEr3CiVwUE0
62GSltloy5ZpxCABiJn7xwH3MrAQFy37+Il/PZnlbBKN7j3o5tAbNi0ZXw==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:04:48 2025 by rpki-client