Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/z5Y7RvI9RG5xMhMlXissI7E0fTA.roa
File: z5Y7RvI9RG5xMhMlXissI7E0fTA.roa (raw, json)
Hash identifier: ueqxmsD6Hqia/cQ2PDewZ3DH6V0QzwxCwOXWN5ptHAE=
Subject key identifier: CF:96:3B:46:F2:3D:44:6E:71:32:13:25:5E:2B:2C:23:B1:34:7D:30
Certificate issuer: /CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E
Certificate serial: 0CAF
Authority key identifier: CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/z5Y7RvI9RG5xMhMlXissI7E0fTA.roa
Signing time: Wed 13 Mar 2024 01:21:26 +0000
ROA not before: Wed 13 Mar 2024 01:21:26 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 58593
IP address blocks: 42.159.0.0/16 maxlen: 24
42.159.0.0/18 maxlen: 24
42.159.64.0/18 maxlen: 24
42.159.128.0/18 maxlen: 24
42.159.128.0/24 maxlen: 24
42.159.192.0/18 maxlen: 24
103.9.8.0/22 maxlen: 24
103.9.8.0/23 maxlen: 24
103.9.8.0/24 maxlen: 24
103.9.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3247 (0xcaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E
Validity
Not Before: Mar 13 01:21:26 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CF963B46F23D446E713213255E2B2C23B1347D30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:45:93:13:2a:3e:f8:86:e1:3d:43:61:96:a6:
b5:fd:f0:40:f7:89:34:63:19:80:91:82:f4:6a:aa:
24:b4:7f:e2:62:2c:ab:1f:30:94:dc:a3:d1:f3:0d:
8c:a0:5b:9a:2e:8c:47:c7:b2:12:61:a9:70:1b:6c:
fc:7f:db:b7:13:c6:17:db:4e:16:2f:a6:5e:28:20:
c7:76:3a:76:2a:0f:4f:7f:34:6b:eb:cd:49:03:f1:
7e:73:46:28:3c:79:c8:b9:a2:fd:45:5d:77:5b:a9:
c9:99:62:cd:24:12:54:19:e3:f3:f7:66:0e:14:84:
95:b0:45:ca:30:94:d1:95:3f:49:6c:72:a0:bf:e2:
ef:70:aa:dd:8e:ec:4d:4e:25:f2:17:b0:10:48:f2:
96:6a:2c:48:72:87:8a:ec:93:a6:1e:4b:a7:75:79:
55:82:08:c4:ce:05:26:c9:de:d3:e4:53:c3:b0:f2:
c0:09:ea:ef:80:37:4f:3a:31:d5:0b:f7:30:71:90:
43:06:95:73:ea:64:50:82:46:2b:0c:8c:13:d8:30:
e9:8b:1b:99:1a:83:4a:07:93:6a:06:b6:4b:eb:25:
7b:fc:0e:34:87:ec:08:0e:63:ba:ba:fb:98:1b:11:
4b:d7:f1:c2:91:20:59:81:cf:e5:71:d3:41:fe:6b:
2e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:96:3B:46:F2:3D:44:6E:71:32:13:25:5E:2B:2C:23:B1:34:7D:30
X509v3 Authority Key Identifier:
keyid:CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/z5Y7RvI9RG5xMhMlXissI7E0fTA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
42.159.0.0/16
103.9.8.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:a9:93:ab:9b:ad:76:f2:36:ef:7d:cb:f5:f4:40:6e:8d:ae:
d8:23:83:c3:f8:57:5f:00:c8:43:f0:fb:c7:bb:b9:ad:df:c0:
4b:e8:62:df:f4:5e:a9:4d:58:0e:96:52:37:e5:00:3b:4a:e4:
25:46:c2:3b:22:db:5b:84:7f:3e:bc:c7:d5:42:d6:81:0a:15:
73:cd:82:56:de:a0:03:c9:5a:0c:3e:86:37:d6:74:f0:5e:eb:
af:f6:84:0c:78:f0:93:ed:dc:11:7d:09:df:54:47:d9:b2:98:
67:9b:62:a2:51:77:f2:87:d8:07:cf:d7:fa:c7:7b:10:bf:93:
9c:2a:06:cf:8d:7c:7d:71:9d:ed:e5:63:7f:39:dd:e3:d4:c5:
b9:5b:50:cd:87:b9:dd:64:84:b2:f0:61:6f:38:e2:20:fb:37:
d1:19:cf:bc:cd:9c:9a:9b:33:55:d1:e1:02:e1:03:ae:f7:a1:
db:66:30:c6:46:c5:74:a5:27:01:a3:65:24:2b:6c:48:0a:69:
20:86:81:99:36:ad:c2:93:4f:17:b5:a7:60:98:56:b0:43:f0:
14:2f:c1:8b:20:cb:fc:e8:c5:35:27:ab:e3:ea:5a:1d:23:aa:
58:f2:61:06:b5:a7:f6:82:d9:f3:4a:4d:16:72:65:f8:bf:ba:
f5:c3:29:0d
-----BEGIN CERTIFICATE-----
MIIE3DCCA8SgAwIBAgICDK8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0RF
RjcxMTFERTk4QkQ3NTZEOTJCMzREMzk0REEyRDM5RUZGOUI4RTAeFw0yNDAzMTMw
MTIxMjZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKENGOTYzQjQ2RjIzRDQ0
NkU3MTMyMTMyNTVFMkIyQzIzQjEzNDdEMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCfRZMTKj74huE9Q2GWprX98ED3iTRjGYCRgvRqqiS0f+JiLKsf
MJTco9HzDYygW5oujEfHshJhqXAbbPx/27cTxhfbThYvpl4oIMd2OnYqD09/NGvr
zUkD8X5zRig8eci5ov1FXXdbqcmZYs0kElQZ4/P3Zg4UhJWwRcowlNGVP0lscqC/
4u9wqt2O7E1OJfIXsBBI8pZqLEhyh4rsk6YeS6d1eVWCCMTOBSbJ3tPkU8Ow8sAJ
6u+AN086MdUL9zBxkEMGlXPqZFCCRisMjBPYMOmLG5kag0oHk2oGtkvrJXv8DjSH
7AgOY7q6+5gbEUvX8cKRIFmBz+Vx00H+ay4vAgMBAAGjggH4MIIB9DAdBgNVHQ4E
FgQUz5Y7RvI9RG5xMhMlXissI7E0fTAwHwYDVR0jBBgwFoAUze9xEd6YvXVtkrNN
OU2i057/m44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYy
MC96ZTl4RWQ2WXZYVnRrck5OT1UyaTA1N19tNDQuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3plOXhFZDZZdlhWdGtyTk5PVTJpMDU3X200NC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2MjAvejVZN1J2STlSRzV4
TWhNbFhpc3NJN0UwZlRBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAkBggrBgEFBQcBBwEB/wQVMBMwEQQCAAEw
CwMDACqfAwQCZwkIMA0GCSqGSIb3DQEBCwUAA4IBAQAuqZOrm6128jbvfcv19EBu
ja7YI4PD+FdfAMhD8PvHu7mt38BL6GLf9F6pTVgOllI35QA7SuQlRsI7IttbhH8+
vMfVQtaBChVzzYJW3qADyVoMPoY31nTwXuuv9oQMePCT7dwRfQnfVEfZsphnm2Ki
UXfyh9gHz9f6x3sQv5OcKgbPjXx9cZ3t5WN/Od3j1MW5W1DNh7ndZISy8GFvOOIg
+zfRGc+8zZyamzNV0eEC4QOu96HbZjDGRsV0pScBo2UkK2xICmkghoGZNq3Ck08X
tadgmFawQ/AUL8GLIMv86MU1J6vj6lodI6pY8mEGtaf2gtnzSk0WcmX4v7r1wykN
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:47:10 2025 by rpki-client