Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/3CfhItJuTD6YcZOf4dGRgLCyLnk.roa
File: 3CfhItJuTD6YcZOf4dGRgLCyLnk.roa (raw, json)
Hash identifier: Yr2TtYz0Jmy9vk96z+H1KPmDNXvxDzY+tBB3ofIrHtI=
Subject key identifier: DC:27:E1:22:D2:6E:4C:3E:98:71:93:9F:E1:D1:91:80:B0:B2:2E:79
Certificate issuer: /CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E
Certificate serial: 12B2
Authority key identifier: CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/3CfhItJuTD6YcZOf4dGRgLCyLnk.roa
Signing time: Fri 17 Jan 2025 01:26:14 +0000
ROA not before: Fri 17 Jan 2025 01:26:14 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 58593
IP address blocks: 163.228.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 22:36:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4786 (0x12b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E
Validity
Not Before: Jan 17 01:26:14 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=DC27E122D26E4C3E9871939FE1D19180B0B22E79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:25:c5:9e:14:dc:15:b0:0f:0d:04:9e:17:f3:
4f:d6:1c:94:d7:bb:ea:2b:ee:6e:c0:e6:58:bc:13:
d9:75:e3:6b:e3:0a:29:17:3d:dc:e1:a5:9d:29:da:
9e:70:be:84:0a:4a:ee:f8:0d:bc:66:e9:91:c7:f7:
f8:6e:a7:e9:fb:ea:a4:84:59:82:b7:89:66:63:21:
b6:fb:ae:30:8a:93:e3:8b:10:38:2b:b1:c9:af:83:
b0:34:29:f4:77:14:28:26:2f:df:ce:db:65:3b:4b:
95:b0:b2:67:6e:02:71:40:12:d7:3a:d9:ad:92:df:
fe:86:3b:c1:6c:0b:07:b3:1b:4c:35:cd:aa:f9:ac:
e7:29:8f:9c:2c:d9:14:cc:36:da:0a:41:6a:c5:d2:
22:0d:07:3d:a9:4a:9d:39:bf:a8:74:c7:b8:0c:f5:
d4:bb:25:59:7e:9f:14:97:ae:eb:c3:6b:80:37:39:
87:a5:49:74:2c:dd:f3:35:52:21:94:15:16:87:db:
e4:7d:f3:b0:2f:09:a4:c1:9b:ea:dd:65:fd:5b:40:
97:62:45:53:85:0a:fd:45:8a:00:70:3a:26:1a:6f:
3b:ef:9a:d7:ef:20:0d:29:d7:1d:e2:b1:60:c2:13:
10:6c:7e:9c:b0:a2:fb:cc:2b:b0:c1:0e:d6:c1:4e:
d9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:27:E1:22:D2:6E:4C:3E:98:71:93:9F:E1:D1:91:80:B0:B2:2E:79
X509v3 Authority Key Identifier:
keyid:CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/3CfhItJuTD6YcZOf4dGRgLCyLnk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
163.228.0.0/16
Signature Algorithm: sha256WithRSAEncryption
11:c3:e3:6a:29:73:ba:fc:14:96:62:8b:31:f2:1b:fc:8d:93:
72:6d:41:18:52:8a:1b:93:dc:c9:22:34:d5:da:0a:73:98:5e:
86:04:32:db:35:3d:10:3b:a7:8a:c7:8e:e1:66:89:e1:50:a7:
95:e3:51:a3:79:83:71:8c:eb:a5:a8:c5:16:40:b0:fe:d2:11:
e4:fb:7b:7f:0e:dc:51:68:59:0d:24:1c:27:d3:3e:8f:fc:98:
d6:f2:b7:54:17:21:da:09:8a:12:a8:b4:e1:c2:84:5b:87:63:
48:ba:70:4b:f7:0d:f3:07:e6:a9:10:91:32:90:68:ac:19:23:
b0:b9:05:f1:37:fb:0b:ec:8d:af:f8:41:2e:77:e4:b8:88:85:
1c:81:6b:89:85:42:6b:b2:e5:60:b1:44:e5:70:9e:e2:5e:bd:
9e:12:8a:17:62:41:58:1a:60:85:c0:87:7d:24:1c:15:77:ab:
99:ab:5b:b7:24:59:ab:94:2c:d2:d4:1d:ff:c9:f5:62:6a:bb:
10:c9:0c:28:52:77:e0:b2:8f:0f:dd:6f:cd:d9:85:77:71:59:
1c:df:b7:2d:17:5d:f8:51:2b:25:34:64:be:99:be:2e:86:83:
cc:59:f8:2b:7f:89:8b:50:fe:b2:bf:7d:b0:b9:82:5b:18:02:
8b:32:c1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:00:12 2025 by rpki-client