Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/m2WN8HMjxJ8kSP0i17Dtj-nnbfs.roa
File: m2WN8HMjxJ8kSP0i17Dtj-nnbfs.roa (raw, json)
Hash identifier: tm+HiSlsugyML+nbyt6g4wq3eBf0h57A92+6OL8Oh84=
Subject key identifier: 9B:65:8D:F0:73:23:C4:9F:24:48:FD:22:D7:B0:ED:8F:E9:E7:6D:FB
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0825
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/m2WN8HMjxJ8kSP0i17Dtj-nnbfs.roa
Signing time: Wed 14 Jun 2023 00:24:10 +0000
ROA not before: Wed 14 Jun 2023 00:24:10 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2085 (0x825)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 00:24:10 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=9B658DF07323C49F2448FD22D7B0ED8FE9E76DFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:86:f2:6a:27:e0:fa:b5:71:4a:78:74:e6:62:
aa:61:68:04:7b:df:d0:9e:32:e7:27:69:3a:d6:75:
2c:dc:1d:15:1d:b5:fa:18:83:77:e9:57:10:ca:f1:
e4:b7:a2:57:6a:95:d1:be:24:c4:e1:d3:b7:82:6f:
9f:08:ff:fa:23:7c:64:7e:d4:3e:12:b0:31:a8:6a:
3b:ee:b5:f1:9a:0c:fb:a2:4f:54:06:d5:d7:b9:5f:
ad:c2:9c:22:a0:e7:1a:da:e8:c2:82:92:7f:ae:e0:
e4:77:1c:38:c7:bc:5c:7a:22:63:ee:23:65:d2:cc:
d3:56:f4:c1:ef:ab:2a:fd:95:e3:0b:b4:56:09:ff:
ab:a1:be:23:41:f0:14:d9:6e:65:c1:c2:4d:2e:34:
6d:af:c9:a1:10:62:23:a3:49:5e:1a:c1:65:25:43:
68:9c:54:05:79:4f:fd:9a:73:34:94:bc:c3:4e:f5:
16:ba:54:9d:64:80:2b:d7:a9:99:33:cf:97:c4:6d:
a2:d1:28:c1:cf:2b:78:fd:79:7f:02:9d:e8:68:4a:
15:78:f0:fe:af:79:4f:e5:64:52:80:a6:fa:08:5c:
dd:79:e2:d9:37:dc:44:60:68:fc:2d:90:a8:a8:74:
a2:11:42:f1:e0:91:ef:e8:b2:b0:07:0b:27:df:73:
94:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:65:8D:F0:73:23:C4:9F:24:48:FD:22:D7:B0:ED:8F:E9:E7:6D:FB
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/m2WN8HMjxJ8kSP0i17Dtj-nnbfs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
2b:38:f3:cd:32:ee:e9:bb:a8:fb:87:5f:f3:e6:3c:85:8d:81:
0b:80:35:7c:eb:25:be:cd:42:94:44:0a:43:48:b4:53:f3:bd:
2f:18:ce:93:b2:26:6b:03:e4:82:7a:7c:2b:9d:b6:9b:96:29:
50:71:76:3f:55:df:d0:f7:96:43:15:43:57:66:cf:3a:a0:fb:
ef:5a:93:37:b6:a9:b6:6b:e1:bf:89:91:3d:86:df:e3:07:aa:
57:2d:de:5b:80:d0:78:f1:6a:0d:cd:98:a5:4f:17:f1:f5:60:
3c:28:31:cb:f0:15:a7:32:a9:41:21:34:bf:a0:7c:3b:5c:a4:
8a:30:b0:a4:19:b1:46:9d:a7:cb:f7:00:1b:57:b3:e7:b5:63:
83:f3:e6:48:97:e7:eb:e3:c1:03:8f:f5:b4:ae:05:3d:8f:ca:
ed:91:0e:c1:cf:4d:4a:d7:31:bb:a3:76:8b:00:1f:00:80:8a:
9d:85:09:6a:56:1d:32:eb:5c:9a:94:9e:b7:89:e7:4f:16:9d:
e2:2c:9d:ad:d9:35:68:7c:59:fc:a8:cd:fa:57:f9:34:78:d8:
10:ba:ba:cb:c3:66:16:86:01:a3:25:1c:f5:13:90:8f:c8:1b:
48:ef:c1:a2:e2:1f:fe:79:be:33:5b:5e:a7:de:55:9e:64:4f:
47:84:b1:00
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICCCUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTQw
MDI0MTBaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDlCNjU4REYwNzMyM0M0
OUYyNDQ4RkQyMkQ3QjBFRDhGRTlFNzZERkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7hvJqJ+D6tXFKeHTmYqphaAR739CeMucnaTrWdSzcHRUdtfoY
g3fpVxDK8eS3oldqldG+JMTh07eCb58I//ojfGR+1D4SsDGoajvutfGaDPuiT1QG
1de5X63CnCKg5xra6MKCkn+u4OR3HDjHvFx6ImPuI2XSzNNW9MHvqyr9leMLtFYJ
/6uhviNB8BTZbmXBwk0uNG2vyaEQYiOjSV4awWUlQ2icVAV5T/2aczSUvMNO9Ra6
VJ1kgCvXqZkzz5fEbaLRKMHPK3j9eX8CnehoShV48P6veU/lZFKApvoIXN154tk3
3ERgaPwtkKiodKIRQvHgke/osrAHCyffc5R1AgMBAAGjggIFMIICATAdBgNVHQ4E
FgQUm2WN8HMjxJ8kSP0i17Dtj+nnbfswHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvbTJXTjhITWp4Sjhr
U1AwaTE3RHRqLW5uYmZzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEw
GAMEAiv6dAMEAmfruAMEApby4AMEA9vqCDANBgkqhkiG9w0BAQsFAAOCAQEAKzjz
zTLu6buo+4df8+Y8hY2BC4A1fOslvs1ClEQKQ0i0U/O9LxjOk7ImawPkgnp8K522
m5YpUHF2P1Xf0PeWQxVDV2bPOqD771qTN7aptmvhv4mRPYbf4weqVy3eW4DQePFq
Dc2YpU8X8fVgPCgxy/AVpzKpQSE0v6B8O1ykijCwpBmxRp2ny/cAG1ez57Vjg/Pm
SJfn6+PBA4/1tK4FPY/K7ZEOwc9NStcxu6N2iwAfAICKnYUJalYdMutcmpSet4nn
Txad4iydrdk1aHxZ/KjN+lf5NHjYELq6y8NmFoYBoyUc9ROQj8gbSO/BouIf/nm+
M1tep95VnmRPR4SxAA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org