Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1534/mAC9qbbUv5kSCOECI2xp0wIN0BQ.roa
File: mAC9qbbUv5kSCOECI2xp0wIN0BQ.roa (raw, json)
Hash identifier: P4CDDGn96n2CZOtiHGZYdbMLv8InJbNOw4grEClvbB8=
Subject key identifier: 98:00:BD:A9:B6:D4:BF:99:12:08:E1:02:23:6C:69:D3:02:0D:D0:14
Certificate issuer: /CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E
Certificate serial: 15F0
Authority key identifier: 0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/mAC9qbbUv5kSCOECI2xp0wIN0BQ.roa
Signing time: Fri 19 May 2023 05:54:50 +0000
ROA not before: Fri 19 May 2023 05:54:50 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 59067
IP address blocks: 103.255.140.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5616 (0x15f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E
Validity
Not Before: May 19 05:54:50 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=9800BDA9B6D4BF991208E102236C69D3020DD014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:94:2e:a9:65:7c:23:85:58:af:37:96:0b:4d:
2f:6d:1d:f4:9d:cf:54:70:46:03:d5:7e:ac:94:5d:
10:2c:ad:ca:1c:f6:bb:44:0d:f6:68:d6:98:70:da:
5d:90:72:50:ee:57:a7:14:0d:06:a6:5d:6c:43:cc:
a2:ef:5b:6a:5c:ce:53:36:aa:79:26:e4:bf:4a:5a:
a8:93:93:31:18:c7:c8:5b:31:00:57:82:9c:11:84:
d4:74:54:12:c8:90:41:b4:51:a6:b4:a1:1d:5b:01:
08:84:80:4b:ae:6b:17:d5:24:71:05:62:95:c0:66:
4f:d2:e8:23:c5:d8:82:47:ad:cb:f1:0a:89:52:3f:
8a:a2:aa:22:9c:22:15:fe:b5:87:bc:47:7c:da:53:
17:de:35:bd:33:94:f8:d3:7f:6c:45:32:a8:24:a2:
82:97:5e:94:a7:5a:08:88:14:ab:34:bf:1c:a5:87:
1b:d0:bf:55:6c:6a:3a:e5:9a:b2:d2:a5:bd:7f:04:
ac:38:77:e4:e5:62:d0:f2:f8:e8:ed:08:f1:ad:91:
ad:e3:f8:72:3f:15:85:66:46:7c:1e:d7:75:58:ca:
74:c9:6a:e3:50:ef:e7:22:a3:58:f6:59:20:18:b6:
91:f7:31:08:8f:14:a5:18:7f:38:6c:35:4f:f2:8f:
50:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:00:BD:A9:B6:D4:BF:99:12:08:E1:02:23:6C:69:D3:02:0D:D0:14
X509v3 Authority Key Identifier:
keyid:0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/mAC9qbbUv5kSCOECI2xp0wIN0BQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.255.140.0/23
Signature Algorithm: sha256WithRSAEncryption
27:c2:eb:36:47:a0:cc:15:f9:d1:45:43:15:12:3f:e3:35:2a:
bd:45:0b:42:d7:68:f5:bf:2c:2e:a2:ce:be:02:bb:9f:fb:79:
ac:b8:07:5d:1a:e0:b3:37:0d:e1:6e:5a:50:1d:00:db:d9:10:
4f:6b:bc:c4:ef:85:44:56:bd:b1:a8:23:3d:bb:a9:6d:ed:de:
ad:c3:05:12:9c:05:ae:1d:da:83:17:d0:c5:c1:e8:58:ff:c5:
67:32:02:a3:c5:c9:a4:f4:41:45:c6:34:25:1b:30:54:31:91:
3b:83:14:a5:6b:0f:9e:74:7e:d6:74:33:10:ef:72:0a:ec:29:
d0:16:84:96:ed:36:90:84:1e:33:23:65:8a:f2:97:5d:e9:95:
09:9e:86:fa:fd:70:55:67:2f:34:4e:4e:68:54:12:83:31:5b:
99:2c:82:0d:6b:4e:89:b0:06:fe:aa:cb:07:7c:61:de:c2:5e:
72:93:9c:f0:29:af:41:84:16:70:80:f7:56:86:94:c1:07:d1:
dd:c8:92:a1:c2:ed:44:4b:d5:d2:48:a8:6c:3d:bc:2e:57:c2:
1f:23:60:5b:ef:eb:81:df:2f:f5:8e:fd:38:15:2d:b9:e7:86:
67:91:90:21:7e:49:f1:6f:6b:d4:43:b3:16:c4:89:f0:0c:56:
c6:33:13:3a
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICFfAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMENB
NEYxODNDNjU5RUQ1N0ZCNDZENTlBRDU0ODNENkZFOUIzNEY0RTAeFw0yMzA1MTkw
NTU0NTBaFw0yNDAzMjcwMTEzMTBaMDMxMTAvBgNVBAMTKDk4MDBCREE5QjZENEJG
OTkxMjA4RTEwMjIzNkM2OUQzMDIwREQwMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCnlC6pZXwjhVivN5YLTS9tHfSdz1RwRgPVfqyUXRAsrcoc9rtE
DfZo1phw2l2QclDuV6cUDQamXWxDzKLvW2pczlM2qnkm5L9KWqiTkzEYx8hbMQBX
gpwRhNR0VBLIkEG0Uaa0oR1bAQiEgEuuaxfVJHEFYpXAZk/S6CPF2IJHrcvxColS
P4qiqiKcIhX+tYe8R3zaUxfeNb0zlPjTf2xFMqgkooKXXpSnWgiIFKs0vxylhxvQ
v1VsajrlmrLSpb1/BKw4d+TlYtDy+OjtCPGtka3j+HI/FYVmRnwe13VYynTJauNQ
7+cio1j2WSAYtpH3MQiPFKUYfzhsNU/yj1AFAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUmAC9qbbUv5kSCOECI2xp0wIN0BQwHwYDVR0jBBgwFoAUDKTxg8ZZ7Vf7RtWa
1Ug9b+mzT04wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTUz
NC9ES1R4ZzhaWjdWZjdSdFdhMVVnOWItbXpUMDQuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0RLVHhnOFpaN1ZmN1J0V2ExVWc5Yi1telQwNC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1MzQvbUFDOXFiYlV2NWtT
Q09FQ0kyeHAwd0lOMEJRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAWf/jDANBgkqhkiG9w0BAQsFAAOCAQEAJ8LrNkegzBX50UVDFRI/4zUqvUUL
Qtdo9b8sLqLOvgK7n/t5rLgHXRrgszcN4W5aUB0A29kQT2u8xO+FRFa9sagjPbup
be3ercMFEpwFrh3agxfQxcHoWP/FZzICo8XJpPRBRcY0JRswVDGRO4MUpWsPnnR+
1nQzEO9yCuwp0BaElu02kIQeMyNlivKXXemVCZ6G+v1wVWcvNE5OaFQSgzFbmSyC
DWtOibAG/qrLB3xh3sJecpOc8CmvQYQWcID3VoaUwQfR3ciSocLtREvV0kiobD28
LlfCHyNgW+/rgd8v9Y79OBUtueeGZ5GQIX5J8W9r1EOzFsSJ8AxWxjMTOg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:23 2024 by rpki-client on console-ams.rpki-client.org