Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2889/tiRjLWbqYUFdrdG2fwYmW1_qZIA.roa
File: tiRjLWbqYUFdrdG2fwYmW1_qZIA.roa (raw, json)
Hash identifier: SXZrx4Q4IxBEYib/DtnwGYISea4XlmC7x5pSx7JcMyc=
Subject key identifier: B6:24:63:2D:66:EA:61:41:5D:AD:D1:B6:7F:06:26:5B:5F:EA:64:80
Certificate issuer: /CN=A93A86712684A72E5DF41F00AFA04C5F01A97735
Certificate serial: 1BCC
Authority key identifier: A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/tiRjLWbqYUFdrdG2fwYmW1_qZIA.roa
Signing time: Fri 17 Jan 2025 01:27:35 +0000
ROA not before: Fri 17 Jan 2025 01:27:35 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139021
IP address blocks: 218.247.64.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7116 (0x1bcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A93A86712684A72E5DF41F00AFA04C5F01A97735
Validity
Not Before: Jan 17 01:27:35 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=B624632D66EA61415DADD1B67F06265B5FEA6480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c9:79:58:71:80:ab:c3:6a:b0:7e:25:0b:6c:
e1:24:5d:7d:4c:7d:d7:7d:2f:3f:51:05:42:35:c6:
68:9e:54:b6:82:23:ab:a6:6c:ee:64:8b:63:5a:1c:
67:9d:18:87:2d:0a:24:d6:a8:8d:40:61:66:d2:01:
b3:10:4a:25:eb:69:b3:e9:fb:d6:72:d3:67:50:5a:
85:95:bc:c3:07:b3:53:cd:10:e7:11:a8:1e:b0:6d:
43:05:8b:4a:e9:2d:2d:92:ac:9a:6d:51:38:50:3e:
c7:de:fc:33:65:55:9d:7a:75:a7:8e:d5:36:62:df:
43:54:6a:26:9c:96:a9:57:44:7c:fa:e2:83:bb:6c:
13:d8:e8:bc:80:3f:0d:5b:71:3d:f2:3c:50:3b:33:
77:a8:d1:49:a1:30:c9:3d:93:4f:53:c7:f3:b6:02:
b4:7c:5a:2f:cd:21:1c:4c:65:8d:5d:72:c1:a2:56:
2a:40:ab:81:49:f8:d3:38:26:b5:64:cc:c2:2f:a0:
42:e1:dc:84:e0:8c:76:82:37:dd:95:2a:b0:a0:9e:
90:4c:63:b2:c8:0c:c1:c9:fe:04:de:4b:ae:56:61:
be:f4:65:d5:2b:62:24:3c:e3:d4:a5:05:6e:34:d9:
63:a3:bb:a1:fd:ff:c7:6c:ad:bf:d1:dd:f3:c3:82:
63:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:24:63:2D:66:EA:61:41:5D:AD:D1:B6:7F:06:26:5B:5F:EA:64:80
X509v3 Authority Key Identifier:
keyid:A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/tiRjLWbqYUFdrdG2fwYmW1_qZIA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.247.64.0/19
Signature Algorithm: sha256WithRSAEncryption
3a:49:6d:7c:1d:e4:cf:6e:0c:cb:43:8e:18:e4:73:c9:2f:da:
a3:1e:71:e8:f5:05:7b:07:ee:af:42:1e:c5:63:6c:3b:5e:b9:
64:f8:af:b1:a7:91:7b:fb:a7:f9:b2:1c:09:25:c3:a1:89:65:
82:6a:c0:c2:b1:c9:64:90:e2:c8:c3:2a:64:d1:03:ff:95:a5:
48:fb:d0:77:ea:2a:07:9c:a1:81:a8:3a:dc:15:b7:16:6f:5d:
b9:7b:d5:8a:d6:c1:b7:bc:3b:09:cd:31:79:0a:54:96:c1:43:
88:49:85:64:60:40:8d:09:9d:de:e5:5d:c5:66:66:a9:ae:0f:
f9:00:a6:a2:04:b3:f9:7e:eb:bf:76:0e:31:04:46:39:28:1d:
63:af:9b:40:34:d2:20:24:5d:33:fb:2a:76:cf:c2:18:6f:a2:
26:4e:e5:21:df:45:0f:77:94:ef:92:40:55:42:91:d5:26:cc:
09:83:82:71:9d:93:c9:1d:bb:24:ef:30:44:d9:84:c2:b9:34:
e9:ed:32:cf:38:d2:7c:72:b7:86:7a:4a:e2:eb:5c:3f:0b:ab:
ce:df:fc:b7:50:74:fd:06:5a:64:5a:bf:8e:66:93:d4:1a:08:
b9:5c:39:d1:35:fe:ac:07:95:b7:92:9d:a1:9d:24:2d:c5:57:
92:1d:ec:8d
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICG8wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTkz
QTg2NzEyNjg0QTcyRTVERjQxRjAwQUZBMDRDNUYwMUE5NzczNTAeFw0yNTAxMTcw
MTI3MzVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEI2MjQ2MzJENjZFQTYx
NDE1REFERDFCNjdGMDYyNjVCNUZFQTY0ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/yXlYcYCrw2qwfiULbOEkXX1Mfdd9Lz9RBUI1xmieVLaCI6um
bO5ki2NaHGedGIctCiTWqI1AYWbSAbMQSiXrabPp+9Zy02dQWoWVvMMHs1PNEOcR
qB6wbUMFi0rpLS2SrJptUThQPsfe/DNlVZ16daeO1TZi30NUaiaclqlXRHz64oO7
bBPY6LyAPw1bcT3yPFA7M3eo0UmhMMk9k09Tx/O2ArR8Wi/NIRxMZY1dcsGiVipA
q4FJ+NM4JrVkzMIvoELh3ITgjHaCN92VKrCgnpBMY7LIDMHJ/gTeS65WYb70ZdUr
YiQ849SlBW402WOju6H9/8dsrb/R3fPDgmN1AgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUtiRjLWbqYUFdrdG2fwYmW1/qZIAwHwYDVR0jBBgwFoAUqTqGcSaEpy5d9B8A
r6BMXwGpdzUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjg4
OS9xVHFHY1NhRXB5NWQ5QjhBcjZCTVh3R3BkelUuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3FUcUdjU2FFcHk1ZDlCOEFyNkJNWHdHcGR6VS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4ODkvdGlSakxXYnFZVUZk
cmRHMmZ3WW1XMV9xWklBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBdr3QDANBgkqhkiG9w0BAQsFAAOCAQEAOkltfB3kz24My0OOGORzyS/aox5x
6PUFewfur0IexWNsO165ZPivsaeRe/un+bIcCSXDoYllgmrAwrHJZJDiyMMqZNED
/5WlSPvQd+oqB5yhgag63BW3Fm9duXvVitbBt7w7Cc0xeQpUlsFDiEmFZGBAjQmd
3uVdxWZmqa4P+QCmogSz+X7rv3YOMQRGOSgdY6+bQDTSICRdM/sqds/CGG+iJk7l
Id9FD3eU75JAVUKR1SbMCYOCcZ2TyR27JO8wRNmEwrk06e0yzzjSfHK3hnpK4utc
Pwurzt/8t1B0/QZaZFq/jmaT1BoIuVw50TX+rAeVt5KdoZ0kLcVXkh3sjQ==
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:38:54 2025 by rpki-client