Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1534/v0w9ySkJzQ4zTVPwSPACM2u8BPI.roa
File: v0w9ySkJzQ4zTVPwSPACM2u8BPI.roa (raw, json)
Hash identifier: MIINeNThbqF0oHq70fXeOBvI1O3MPYxMbpZDamt3Gxg=
Subject key identifier: BF:4C:3D:C9:29:09:CD:0E:33:4D:53:F0:48:F0:02:33:6B:BC:04:F2
Certificate issuer: /CN=78F1EEC94794DA5530B552AFC84232040D5A5455
Certificate serial: 079D
Authority key identifier: 78:F1:EE:C9:47:94:DA:55:30:B5:52:AF:C8:42:32:04:0D:5A:54:55
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ePHuyUeU2lUwtVKvyEIyBA1aVFU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/v0w9ySkJzQ4zTVPwSPACM2u8BPI.roa
Signing time: Mon 23 Aug 2021 09:24:09 +0000
ROA not before: Mon 23 Aug 2021 09:24:09 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 59067
IP address blocks: 103.25.156.0/24 maxlen: 24
111.221.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1949 (0x79d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78F1EEC94794DA5530B552AFC84232040D5A5455
Validity
Not Before: Aug 23 09:24:09 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=BF4C3DC92909CD0E334D53F048F002336BBC04F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:22:1b:8c:2b:ff:2d:f4:b3:31:b3:1e:af:98:
ed:24:5a:62:04:ac:e1:f7:d4:db:88:d0:cc:c9:36:
d8:7e:0c:3c:27:39:75:9d:41:90:5b:69:a7:88:24:
99:b7:11:97:d2:18:70:84:74:f5:da:c0:b5:e1:72:
42:0c:0e:81:f1:a8:60:91:d4:77:16:f2:6a:50:19:
a3:97:c2:c7:ff:27:7c:c8:ca:f5:b2:ed:89:9d:08:
ab:8b:69:46:4d:9e:3e:d0:50:f6:9a:d8:a1:d1:99:
4a:61:b8:6a:ef:c5:01:43:fd:ac:21:b0:26:50:75:
80:f9:ab:02:60:cd:c0:00:df:45:f0:1d:57:b2:d1:
27:9d:aa:01:60:c1:b6:5e:77:bd:eb:0e:3c:df:44:
e3:5d:8c:dd:1c:63:87:97:8c:d2:27:df:24:1d:91:
68:02:21:4b:6f:f4:5f:d2:51:95:0f:c9:b4:fc:26:
39:b9:7e:09:89:38:14:c7:40:04:fd:56:ad:ee:65:
28:44:7e:5c:3d:15:60:d7:cf:05:05:1b:5d:87:35:
ce:ad:d5:4e:38:e5:09:59:f1:1a:9a:99:b6:f9:5d:
c2:29:0c:14:04:62:4d:85:cd:02:f3:ec:95:78:25:
e9:ed:07:a6:c9:7d:01:ae:29:0a:b8:c3:ff:63:50:
d5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4C:3D:C9:29:09:CD:0E:33:4D:53:F0:48:F0:02:33:6B:BC:04:F2
X509v3 Authority Key Identifier:
keyid:78:F1:EE:C9:47:94:DA:55:30:B5:52:AF:C8:42:32:04:0D:5A:54:55
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/ePHuyUeU2lUwtVKvyEIyBA1aVFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ePHuyUeU2lUwtVKvyEIyBA1aVFU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/v0w9ySkJzQ4zTVPwSPACM2u8BPI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.25.156.0/24
111.221.28.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:0c:cf:64:ac:c7:50:d0:36:b9:fc:6e:eb:c7:40:54:9c:94:
11:de:f3:73:39:83:42:c7:d5:67:03:25:b2:11:a9:e0:87:34:
65:fa:1c:15:95:12:2d:7d:c9:ea:4e:08:69:54:c2:f2:66:b3:
4d:9f:5d:7a:42:1e:72:2f:cd:c8:12:55:4f:9f:34:3b:dd:ea:
0f:c8:94:1d:bc:54:50:79:ac:03:85:61:bd:2c:f1:85:bc:f5:
3c:bd:4b:81:64:fc:0b:2a:cf:e6:b8:53:2e:a4:fa:24:bd:96:
f1:76:57:1e:75:ab:46:d2:fc:8c:00:a6:1e:a2:98:7e:0f:45:
fc:43:d9:c7:7f:a9:e2:9f:03:d4:0d:7b:27:cc:34:18:9e:9d:
cb:e6:82:68:55:d0:04:c6:e8:15:ff:0e:cd:cf:3d:6c:27:5e:
8a:dc:e4:fe:c6:d7:cb:03:59:d8:1e:84:04:6c:f8:2c:ed:e4:
79:9e:82:d9:3f:23:d6:39:2a:cc:4c:9b:9e:cb:9b:a9:f4:2b:
3d:f2:af:81:08:5f:98:b9:fa:e7:9b:ef:c7:b1:c8:b0:0e:0f:
71:b5:bf:5e:3e:cb:4d:68:0c:08:20:4d:ba:22:fd:e5:ee:c2:
0e:98:47:c0:72:3f:3d:69:2b:22:8d:1b:2a:de:1e:0a:3e:5c:
5f:45:76:cf
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgICB50wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzhG
MUVFQzk0Nzk0REE1NTMwQjU1MkFGQzg0MjMyMDQwRDVBNTQ1NTAeFw0yMTA4MjMw
OTI0MDlaFw0yMjA1MjcwNDU5NTJaMDMxMTAvBgNVBAMTKEJGNEMzREM5MjkwOUNE
MEUzMzRENTNGMDQ4RjAwMjMzNkJCQzA0RjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQIhuMK/8t9LMxsx6vmO0kWmIErOH31NuI0MzJNth+DDwnOXWd
QZBbaaeIJJm3EZfSGHCEdPXawLXhckIMDoHxqGCR1HcW8mpQGaOXwsf/J3zIyvWy
7YmdCKuLaUZNnj7QUPaa2KHRmUphuGrvxQFD/awhsCZQdYD5qwJgzcAA30XwHVey
0SedqgFgwbZed73rDjzfRONdjN0cY4eXjNIn3yQdkWgCIUtv9F/SUZUPybT8Jjm5
fgmJOBTHQAT9Vq3uZShEflw9FWDXzwUFG12HNc6t1U445QlZ8Rqambb5XcIpDBQE
Yk2FzQLz7JV4JentB6bJfQGuKQq4w/9jUNVLAgMBAAGjggH5MIIB9TAdBgNVHQ4E
FgQUv0w9ySkJzQ4zTVPwSPACM2u8BPIwHwYDVR0jBBgwFoAUePHuyUeU2lUwtVKv
yEIyBA1aVFUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTUz
NC9lUEh1eVVlVTJsVXd0Vkt2eUVJeUJBMWFWRlUuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2VQSHV5VWVVMmxVd3RWS3Z5RUl5QkExYVZGVS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1MzQvdjB3OXlTa0p6UTR6
VFZQd1NQQUNNMnU4QlBJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEw
DAMEAGcZnAMEAG/dHDANBgkqhkiG9w0BAQsFAAOCAQEApQzPZKzHUNA2ufxu68dA
VJyUEd7zczmDQsfVZwMlshGp4Ic0ZfocFZUSLX3J6k4IaVTC8mazTZ9dekIeci/N
yBJVT580O93qD8iUHbxUUHmsA4VhvSzxhbz1PL1LgWT8CyrP5rhTLqT6JL2W8XZX
HnWrRtL8jACmHqKYfg9F/EPZx3+p4p8D1A17J8w0GJ6dy+aCaFXQBMboFf8Ozc89
bCdeitzk/sbXywNZ2B6EBGz4LO3keZ6C2T8j1jkqzEybnsubqfQrPfKvgQhfmLn6
55vvx7HIsA4PcbW/Xj7LTWgMCCBNuiL95e7CDphHwHI/PWkrIo0bKt4eCj5cX0V2
zw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org