Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/juH5j12Fxo8rXcxy5Avh-0BW8hU.roa
File: juH5j12Fxo8rXcxy5Avh-0BW8hU.roa (raw, json)
Hash identifier: FlXXfeNl6lDL7vg1dmAFL0GrFuDMRK2C9ACeNh39et8=
Subject key identifier: 8E:E1:F9:8F:5D:85:C6:8F:2B:5D:CC:72:E4:0B:E1:FB:40:56:F2:15
Certificate issuer: /CN=2DE14F2AC7F0238137052EAA315C5BD643134022
Certificate serial: 1C62
Authority key identifier: 2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/juH5j12Fxo8rXcxy5Avh-0BW8hU.roa
Signing time: Wed 05 Feb 2025 02:41:10 +0000
ROA not before: Wed 05 Feb 2025 02:41:10 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 63689
IP address blocks: 202.160.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7266 (0x1c62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DE14F2AC7F0238137052EAA315C5BD643134022
Validity
Not Before: Feb 5 02:41:10 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=8EE1F98F5D85C68F2B5DCC72E40BE1FB4056F215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:59:80:31:4e:64:92:27:2e:cf:78:12:e3:a1:
80:15:56:da:6a:6a:f7:ba:90:e4:8f:07:20:df:aa:
0e:54:a6:cb:f2:29:f9:d1:b5:ee:b5:36:8d:7c:78:
2b:48:9c:86:f9:8c:6b:58:54:b7:d5:b0:19:3b:45:
a4:e6:de:10:86:72:af:f2:59:05:95:c3:cb:89:53:
0b:13:61:cd:45:d6:72:f2:a9:63:03:ea:42:b2:b0:
0d:08:8b:65:23:19:af:2d:b2:af:70:48:75:17:4a:
7f:9c:2b:2f:7b:64:8b:68:6f:d5:42:a0:56:c7:dc:
88:9d:55:9a:58:82:86:92:78:54:c2:da:4a:5e:be:
e8:d2:0b:54:18:3c:43:1c:69:e7:9e:fc:5a:ed:ba:
21:d3:3c:35:26:7c:6f:e3:ec:b6:a5:21:c1:70:13:
1c:dd:6a:db:df:37:ee:1f:9f:a6:84:6a:f3:53:51:
cd:74:ce:32:92:be:4e:d5:e2:d2:e0:e6:d3:4e:14:
3c:3b:f6:c3:a8:cb:1f:f7:ae:fe:88:a7:b5:db:0a:
6e:cd:ca:b1:3a:75:14:77:56:7a:fd:f4:8b:ae:5b:
87:d8:31:88:df:5c:d1:81:40:7d:97:08:26:6a:cf:
96:7f:e3:6e:f6:27:03:6e:3c:a2:a2:8b:9e:f8:7d:
97:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E1:F9:8F:5D:85:C6:8F:2B:5D:CC:72:E4:0B:E1:FB:40:56:F2:15
X509v3 Authority Key Identifier:
keyid:2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/LeFPKsfwI4E3BS6qMVxb1kMTQCI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/juH5j12Fxo8rXcxy5Avh-0BW8hU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.160.140.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:1a:d0:70:d8:ef:79:78:85:83:b3:67:a0:ff:40:ee:0f:f0:
cd:b6:0a:8d:5a:c7:89:2a:ab:31:45:1d:d0:0e:ba:e4:16:89:
66:8c:19:2f:0a:e2:5b:ca:20:0e:7c:7b:f2:62:7d:2e:ae:f9:
04:5c:b4:14:bd:d1:a6:7c:4e:76:e1:9a:84:f3:1c:64:dd:56:
17:27:84:87:69:54:30:cd:1f:67:dc:08:1e:d2:36:32:04:89:
83:85:99:b1:ca:5b:04:47:46:fc:57:f3:2d:ca:d5:42:a0:55:
57:5f:81:85:49:8b:d3:3b:ee:35:aa:4c:9d:06:f0:74:aa:85:
56:2c:a9:31:17:8b:41:31:c0:6d:fd:b6:c1:eb:1d:4f:c7:e8:
79:80:21:77:5d:13:24:97:18:38:55:b8:61:c0:4b:d5:50:d9:
2c:c0:41:f3:b9:50:95:49:70:1a:8a:a8:66:5a:4f:fd:be:ba:
26:ff:9c:66:0a:61:2e:a5:93:15:f7:af:44:ef:d2:fc:de:51:
7c:5f:9d:6b:f6:91:d1:99:ad:55:d3:b0:79:61:fa:4b:4d:4e:
8c:cc:5a:1b:be:9c:54:50:9f:e4:79:22:e6:36:82:5a:44:21:
0e:20:23:1c:74:48:8a:c0:f7:4c:b4:0d:a0:d8:2b:f2:89:cd:
64:5b:b4:96
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICHGIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkRF
MTRGMkFDN0YwMjM4MTM3MDUyRUFBMzE1QzVCRDY0MzEzNDAyMjAeFw0yNTAyMDUw
MjQxMTBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDhFRTFGOThGNUQ4NUM2
OEYyQjVEQ0M3MkU0MEJFMUZCNDA1NkYyMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7WYAxTmSSJy7PeBLjoYAVVtpqave6kOSPByDfqg5UpsvyKfnR
te61No18eCtInIb5jGtYVLfVsBk7RaTm3hCGcq/yWQWVw8uJUwsTYc1F1nLyqWMD
6kKysA0Ii2UjGa8tsq9wSHUXSn+cKy97ZItob9VCoFbH3IidVZpYgoaSeFTC2kpe
vujSC1QYPEMcaeee/FrtuiHTPDUmfG/j7LalIcFwExzdatvfN+4fn6aEavNTUc10
zjKSvk7V4tLg5tNOFDw79sOoyx/3rv6Ip7XbCm7NyrE6dRR3Vnr99IuuW4fYMYjf
XNGBQH2XCCZqz5Z/4272JwNuPKKii574fZf7AgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUjuH5j12Fxo8rXcxy5Avh+0BW8hUwHwYDVR0jBBgwFoAULeFPKsfwI4E3BS6q
MVxb1kMTQCIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4
Ny9MZUZQS3Nmd0k0RTNCUzZxTVZ4YjFrTVRRQ0kuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0xlRlBLc2Z3STRFM0JTNnFNVnhiMWtNVFFDSS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODcvanVINWoxMkZ4bzhy
WGN4eTVBdmgtMEJXOGhVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAsqgjDANBgkqhkiG9w0BAQsFAAOCAQEAuBrQcNjveXiFg7NnoP9A7g/wzbYK
jVrHiSqrMUUd0A665BaJZowZLwriW8ogDnx78mJ9Lq75BFy0FL3RpnxOduGahPMc
ZN1WFyeEh2lUMM0fZ9wIHtI2MgSJg4WZscpbBEdG/FfzLcrVQqBVV1+BhUmL0zvu
NapMnQbwdKqFViypMReLQTHAbf22wesdT8foeYAhd10TJJcYOFW4YcBL1VDZLMBB
87lQlUlwGoqoZlpP/b66Jv+cZgphLqWTFfevRO/S/N5RfF+da/aR0ZmtVdOweWH6
S01OjMxaG76cVFCf5Hki5jaCWkQhDiAjHHRIisD3TLQNoNgr8onNZFu0lg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:26:09 2025 by rpki-client