Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/233/d16R1vhzR6AdU3s3oYlV8svDpoc.roa
File: d16R1vhzR6AdU3s3oYlV8svDpoc.roa (raw, json)
Hash identifier: pZyYQk5Fbz2ihWXOaIedm3qeVm2r1E2UFUu++wqvZGo=
Subject key identifier: 77:5E:91:D6:F8:73:47:A0:1D:53:7B:37:A1:89:55:F2:CB:C3:A6:87
Certificate issuer: /CN=AF3AF4D01F0CD056F0E3F698800B223AEE773D20
Certificate serial: 21EC
Authority key identifier: AF:3A:F4:D0:1F:0C:D0:56:F0:E3:F6:98:80:0B:22:3A:EE:77:3D:20
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rzr00B8M0Fbw4_aYgAsiOu53PSA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/233/d16R1vhzR6AdU3s3oYlV8svDpoc.roa
Signing time: Tue 07 Jan 2025 06:56:25 +0000
ROA not before: Tue 07 Jan 2025 06:56:25 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 7468
IP address blocks: 222.126.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8684 (0x21ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3AF4D01F0CD056F0E3F698800B223AEE773D20
Validity
Not Before: Jan 7 06:56:25 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=775E91D6F87347A01D537B37A18955F2CBC3A687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:96:6f:7c:ac:c6:a0:d8:c2:49:33:43:51:20:
b9:a9:e4:0b:fd:8c:de:05:89:5e:08:d8:75:54:45:
fb:de:5b:5a:a3:d6:72:82:0d:3e:5a:a8:9b:bb:c2:
ff:e5:73:a4:be:ce:ce:87:21:6d:df:9e:55:54:31:
d2:9f:12:e6:c9:f3:8c:80:e3:c1:38:2b:79:1d:84:
c7:93:fd:91:48:7b:c7:cf:92:6c:75:37:7b:b7:40:
b0:fa:77:a6:b3:ba:3f:da:9c:20:24:6d:94:c5:96:
95:ff:43:0d:da:b7:9c:51:f5:47:a6:a2:ba:b9:d4:
b7:f0:56:be:63:80:3a:18:82:2a:d2:e0:be:a0:b1:
a7:56:ce:03:98:69:73:79:91:c5:5b:98:20:da:15:
ca:75:1b:81:e1:45:88:ae:aa:6b:09:8e:a0:19:bc:
e9:2f:22:4c:24:a9:d4:70:7f:ed:63:eb:2e:fe:15:
6e:95:63:0c:b5:46:52:88:70:cc:34:c5:6f:96:c5:
9d:14:ac:12:59:e3:0e:bb:f5:47:83:45:53:87:5b:
43:89:f4:05:81:12:a7:bd:8a:1e:f9:c3:5a:94:03:
ef:41:b6:a3:f3:c1:51:96:ce:cc:b5:8b:19:70:ad:
2f:f9:08:e8:10:d4:46:b4:98:5c:0a:c0:1b:c0:71:
05:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5E:91:D6:F8:73:47:A0:1D:53:7B:37:A1:89:55:F2:CB:C3:A6:87
X509v3 Authority Key Identifier:
keyid:AF:3A:F4:D0:1F:0C:D0:56:F0:E3:F6:98:80:0B:22:3A:EE:77:3D:20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/233/rzr00B8M0Fbw4_aYgAsiOu53PSA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rzr00B8M0Fbw4_aYgAsiOu53PSA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/233/d16R1vhzR6AdU3s3oYlV8svDpoc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
222.126.138.0/24
Signature Algorithm: sha256WithRSAEncryption
60:61:91:42:3c:93:58:0f:27:a1:16:b8:35:66:08:19:67:6a:
04:f3:34:0a:1b:ec:70:c2:29:59:b2:2e:f5:40:5b:62:a8:e1:
73:a9:72:8a:29:5f:38:d5:c4:9c:12:a6:56:f6:33:92:76:77:
24:2c:98:aa:12:b4:3f:e6:b0:c3:83:bd:59:dd:f7:83:6c:bb:
65:5e:5e:fe:64:90:e5:3e:32:0d:6a:64:e2:ff:f4:9a:50:e1:
d2:d4:06:12:bc:82:c7:0e:ab:b5:c4:2d:7a:14:13:b4:5d:0c:
63:03:e3:3c:6b:ef:ab:00:68:47:6d:8a:a1:b2:19:46:29:ab:
46:b9:8b:a4:18:9d:5c:8f:e3:a5:4b:a4:ac:6d:cf:fa:2a:d6:
90:d7:f1:db:ee:ff:d9:74:cc:9a:f1:66:60:e2:c1:04:60:8a:
5d:fb:71:13:ae:28:17:30:bc:4b:f5:eb:bd:40:0a:cb:37:0a:
ca:91:0c:69:20:6c:ff:2f:74:b0:3b:c0:8f:fb:74:13:08:a4:
68:4a:f5:5b:b2:97:4c:e3:70:2d:7f:4a:3e:e7:89:82:ad:ff:
70:2e:52:c3:e3:86:26:04:52:98:63:fe:23:16:7a:ce:47:46:
4c:1a:57:c6:a4:a7:ff:53:ac:05:92:2b:44:af:5a:b3:11:3d:
e1:97:6e:43
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICIewwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUYz
QUY0RDAxRjBDRDA1NkYwRTNGNjk4ODAwQjIyM0FFRTc3M0QyMDAeFw0yNTAxMDcw
NjU2MjVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDc3NUU5MUQ2Rjg3MzQ3
QTAxRDUzN0IzN0ExODk1NUYyQ0JDM0E2ODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1lm98rMag2MJJM0NRILmp5Av9jN4FiV4I2HVURfveW1qj1nKC
DT5aqJu7wv/lc6S+zs6HIW3fnlVUMdKfEubJ84yA48E4K3kdhMeT/ZFIe8fPkmx1
N3u3QLD6d6azuj/anCAkbZTFlpX/Qw3at5xR9Uemorq51LfwVr5jgDoYgirS4L6g
sadWzgOYaXN5kcVbmCDaFcp1G4HhRYiuqmsJjqAZvOkvIkwkqdRwf+1j6y7+FW6V
Ywy1RlKIcMw0xW+WxZ0UrBJZ4w679UeDRVOHW0OJ9AWBEqe9ih75w1qUA+9BtqPz
wVGWzsy1ixlwrS/5COgQ1Ea0mFwKwBvAcQX7AgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUd16R1vhzR6AdU3s3oYlV8svDpocwHwYDVR0jBBgwFoAUrzr00B8M0Fbw4/aY
gAsiOu53PSAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMz
L3J6cjAwQjhNMEZidzRfYVlnQXNpT3U1M1BTQS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvcnpyMDBCOE0wRmJ3NF9hWWdBc2lPdTUzUFNBLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMzL2QxNlIxdmh6UjZBZFUz
czNvWWxWOHN2RHBvYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADefoowDQYJKoZIhvcNAQELBQADggEBAGBhkUI8k1gPJ6EWuDVmCBlnagTzNAob
7HDCKVmyLvVAW2Ko4XOpcoopXzjVxJwSplb2M5J2dyQsmKoStD/msMODvVnd94Ns
u2VeXv5kkOU+Mg1qZOL/9JpQ4dLUBhK8gscOq7XELXoUE7RdDGMD4zxr76sAaEdt
iqGyGUYpq0a5i6QYnVyP46VLpKxtz/oq1pDX8dvu/9l0zJrxZmDiwQRgil37cROu
KBcwvEv1671ACss3CsqRDGkgbP8vdLA7wI/7dBMIpGhK9Vuyl0zjcC1/Sj7niYKt
/3AuUsPjhiYEUphj/iMWes5HRkwaV8akp/9TrAWSK0SvWrMRPeGXbkM=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:56:01 2025 by rpki-client