Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/9MkUFwz1Tdpj11g9_UB7DYidfBA.roa
File: 9MkUFwz1Tdpj11g9_UB7DYidfBA.roa (raw, json)
Hash identifier: M0abDfBc9EFd1lO9ipbr0MhhsuuMfUHzhhBfyX/l0uQ=
Subject key identifier: F4:C9:14:17:0C:F5:4D:DA:63:D7:58:3D:FD:40:7B:0D:88:9D:7C:10
Certificate issuer: /CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Certificate serial: 024F
Authority key identifier: 06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/9MkUFwz1Tdpj11g9_UB7DYidfBA.roa
Signing time: Tue 13 Sep 2022 13:41:36 +0000
ROA not before: Tue 13 Sep 2022 13:41:36 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 34549
IP address blocks: 59.83.132.0/22 maxlen: 24
114.66.140.0/22 maxlen: 24
114.66.144.0/22 maxlen: 24
114.66.156.0/22 maxlen: 24
114.66.192.0/22 maxlen: 24
114.66.208.0/22 maxlen: 24
114.66.212.0/22 maxlen: 24
114.66.224.0/22 maxlen: 24
114.66.228.0/22 maxlen: 24
218.98.69.0/24 maxlen: 24
218.98.70.0/24 maxlen: 24
218.98.71.0/24 maxlen: 24
218.98.72.0/24 maxlen: 24
218.98.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 591 (0x24f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Validity
Not Before: Sep 13 13:41:36 2022 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=F4C914170CF54DDA63D7583DFD407B0D889D7C10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c8:03:29:38:9e:81:58:51:c0:36:ef:42:12:
dd:03:e9:20:4a:0d:aa:1a:2a:8f:d6:bc:b4:a5:b6:
90:91:ff:6e:39:07:1b:e7:b5:93:50:4a:48:9e:41:
48:fc:63:cf:cd:95:ef:a7:41:84:85:ad:5c:03:48:
8e:47:a6:3d:40:84:c9:d8:8e:f8:d5:83:87:8c:b8:
1a:81:94:9d:2a:b0:d7:67:d8:7f:20:ba:65:df:f9:
68:1d:cb:e8:be:af:a5:a2:9d:f8:9c:ee:ac:e8:8e:
76:4c:f9:a4:29:e4:c9:ae:ca:1e:9e:b5:d3:ae:21:
bc:89:b5:c5:65:24:a6:f3:e9:f2:1e:63:43:a5:85:
3b:13:be:3f:33:49:19:81:49:af:a5:af:6d:96:83:
45:2b:9e:fa:67:32:6c:4e:55:ee:f9:1b:1b:bf:04:
4c:32:de:a9:0f:bf:81:42:9e:9e:39:e3:71:a5:62:
78:1a:7f:d1:c5:06:b0:8d:1d:b3:5a:df:1b:f8:cb:
72:61:c2:4d:1d:e7:4a:49:c5:9f:e3:54:1a:e3:46:
7d:54:ba:97:ea:80:ab:21:9a:6d:1b:86:15:53:cc:
bc:05:94:35:f7:08:a1:86:b2:94:75:e8:1e:33:85:
ea:2a:3d:a8:e2:a6:b3:46:ce:e6:bf:3b:50:31:df:
74:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C9:14:17:0C:F5:4D:DA:63:D7:58:3D:FD:40:7B:0D:88:9D:7C:10
X509v3 Authority Key Identifier:
keyid:06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/9MkUFwz1Tdpj11g9_UB7DYidfBA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.83.132.0/22
114.66.140.0-114.66.147.255
114.66.156.0/22
114.66.192.0/22
114.66.208.0/21
114.66.224.0/21
218.98.69.0-218.98.72.255
218.98.80.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:e8:ff:fb:2e:b4:36:ab:8e:e4:4c:fe:09:91:30:03:32:39:
66:a5:29:60:89:62:ca:37:c7:85:fa:5c:b9:d8:48:07:da:70:
31:9e:e7:b0:5c:66:00:13:59:29:db:b6:9f:89:52:e3:35:d2:
ec:9c:36:57:f1:0f:1e:99:54:19:4c:30:e2:66:e9:a2:03:c8:
ff:00:c8:7d:51:bf:cf:d7:c7:08:3a:c7:bd:01:68:58:40:d7:
33:15:cd:22:63:8c:8f:e9:23:6c:f3:50:0a:fe:3d:a5:7a:31:
2c:8d:2c:a8:d9:78:af:6f:3e:a6:82:a4:78:60:24:e2:55:1a:
15:62:92:07:85:b4:41:ba:63:44:d5:c5:04:3a:4b:6b:7a:43:
d4:e3:8f:e9:f7:40:57:17:0f:c6:1c:6d:5b:3b:ab:32:23:a2:
17:81:da:2a:69:2a:df:a2:f7:bb:28:3a:27:fb:28:ab:d9:8d:
7f:16:9a:2a:c8:95:96:22:33:8f:b9:d8:82:96:b6:86:6f:08:
0f:54:25:b6:da:ea:f9:59:63:87:18:14:db:fe:44:13:98:25:
3c:7f:70:22:1d:d1:d9:a4:88:26:c8:b7:ef:19:74:c9:d2:aa:
e7:25:f6:a5:b5:88:02:5b:0b:2f:5d:94:95:be:b2:96:66:ce:
85:30:6b:72
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgICAk8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDYw
QzAwQkYxN0E1NUZEQjg1Q0FGNDU3OEJFODMzMDU2RTAyOEI0MzAeFw0yMjA5MTMx
MzQxMzZaFw0yMzA4MjgwNDE1MzRaMDMxMTAvBgNVBAMTKEY0QzkxNDE3MENGNTRE
REE2M0Q3NTgzREZENDA3QjBEODg5RDdDMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvyAMpOJ6BWFHANu9CEt0D6SBKDaoaKo/WvLSltpCR/245Bxvn
tZNQSkieQUj8Y8/Nle+nQYSFrVwDSI5Hpj1AhMnYjvjVg4eMuBqBlJ0qsNdn2H8g
umXf+Wgdy+i+r6Winfic7qzojnZM+aQp5Mmuyh6etdOuIbyJtcVlJKbz6fIeY0Ol
hTsTvj8zSRmBSa+lr22Wg0UrnvpnMmxOVe75Gxu/BEwy3qkPv4FCnp4543GlYnga
f9HFBrCNHbNa3xv4y3Jhwk0d50pJxZ/jVBrjRn1UupfqgKshmm0bhhVTzLwFlDX3
CKGGspR16B4zheoqPajiprNGzua/O1Ax33TLAgMBAAGjggItMIICKTAdBgNVHQ4E
FgQU9MkUFwz1Tdpj11g9/UB7DYidfBAwHwYDVR0jBBgwFoAUBgwAvxelX9uFyvRX
i+gzBW4Ci0MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMw
OS9CZ3dBdnhlbFg5dUZ5dlJYaS1nekJXNENpME0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0Jnd0F2eGVsWDl1Rnl2UlhpLWd6Qlc0Q2kwTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzMDkvOU1rVUZ3ejFUZHBq
MTFnOV9VQjdEWWlkZkJBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDBZBggrBgEFBQcBBwEB/wRKMEgwRgQCAAEw
QAMEAjtThDAMAwQCckKMAwQCckKQAwQCckKcAwQCckLAAwQDckLQAwQDckLgMAwD
BADaYkUDBADaYkgDBALaYlAwDQYJKoZIhvcNAQELBQADggEBAJ3o//sutDarjuRM
/gmRMAMyOWalKWCJYso3x4X6XLnYSAfacDGe57BcZgATWSnbtp+JUuM10uycNlfx
Dx6ZVBlMMOJm6aIDyP8AyH1Rv8/Xxwg6x70BaFhA1zMVzSJjjI/pI2zzUAr+PaV6
MSyNLKjZeK9vPqaCpHhgJOJVGhVikgeFtEG6Y0TVxQQ6S2t6Q9Tjj+n3QFcXD8Yc
bVs7qzIjoheB2ippKt+i97soOif7KKvZjX8WmirIlZYiM4+52IKWtoZvCA9UJbba
6vlZY4cYFNv+RBOYJTx/cCId0dmkiCbIt+8ZdMnSqucl9qW1iAJbCy9dlJW+spZm
zoUwa3I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org