Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/4g8739mpozJIxnRfhbWhnj8lB8k.roa
File: 4g8739mpozJIxnRfhbWhnj8lB8k.roa (raw, json)
Hash identifier: kcncDA0b99k07O3DsPmGaHSpLdClY56C8y1NkIlu4JE=
Subject key identifier: E2:0F:3B:DF:D9:A9:A3:32:48:C6:74:5F:85:B5:A1:9E:3F:25:07:C9
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 11DA
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/4g8739mpozJIxnRfhbWhnj8lB8k.roa
Signing time: Fri 14 Mar 2025 09:33:49 +0000
ROA not before: Fri 14 Mar 2025 09:33:49 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 55990
IP address blocks: 113.47.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4570 (0x11da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Mar 14 09:33:49 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=E20F3BDFD9A9A33248C6745F85B5A19E3F2507C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a8:d1:4b:74:57:42:3a:f9:d4:ca:9e:25:e5:
b9:82:f8:fc:8d:c5:d7:56:0a:3a:c0:8c:05:d1:64:
65:52:39:65:84:97:aa:b9:ad:cc:18:ed:f2:56:71:
13:20:ed:c1:24:03:4f:c0:62:17:c9:b6:f2:be:16:
d5:86:bb:65:f9:f7:86:c2:ba:43:79:e7:b9:b1:fb:
a3:30:57:fe:5d:e5:29:20:ca:82:0b:84:fd:c7:22:
00:18:b1:e1:70:d5:af:87:07:68:93:8b:ff:0b:1c:
d9:27:a1:b7:df:75:31:a6:d1:9d:02:bb:9a:6f:63:
02:15:e6:e9:a9:df:ab:98:21:4a:9b:fa:d1:58:df:
ca:fc:87:67:21:d8:0d:0b:67:73:bf:47:17:c2:81:
45:d0:3b:85:0a:25:cc:a2:87:c9:40:0a:42:80:43:
72:64:e8:b1:02:61:5d:bc:f4:98:7f:e1:f5:85:91:
d3:4d:08:00:d6:51:02:da:92:d8:79:71:50:0d:4a:
b5:94:99:33:a2:ee:f9:36:6b:cb:b8:dc:f0:cb:43:
82:2c:4b:84:f5:d0:3c:5a:76:04:81:d6:22:35:d3:
ae:4c:40:fa:a0:ed:49:aa:f3:30:a4:4c:51:88:f0:
2a:1e:5a:1f:57:e2:51:be:7c:c3:c3:88:df:eb:ff:
07:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0F:3B:DF:D9:A9:A3:32:48:C6:74:5F:85:B5:A1:9E:3F:25:07:C9
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/4g8739mpozJIxnRfhbWhnj8lB8k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.47.144.0/20
Signature Algorithm: sha256WithRSAEncryption
77:d3:3f:04:3b:ea:d8:4d:aa:d3:a3:83:3c:3d:f1:80:df:fc:
81:c2:d6:98:28:9b:25:cc:18:10:d7:3a:04:c6:76:46:d8:c1:
1b:06:c5:25:41:c7:8e:be:5a:d9:76:5c:fd:04:1e:cd:d0:91:
2e:62:8b:ca:e6:df:d9:a6:5c:0a:c3:37:88:d2:40:ed:47:73:
3b:11:3d:ef:22:58:8d:28:13:2d:6c:0d:df:e6:b5:6c:7b:e5:
dc:10:16:76:34:23:02:23:4e:be:b9:9d:9e:2e:ac:27:a3:ea:
73:9b:99:f0:55:80:0c:c6:28:df:ca:a2:0d:db:3b:44:67:1d:
d8:3f:e3:8b:7e:65:8a:d1:b1:60:ca:c3:25:3b:2b:85:26:47:
86:2c:14:3c:51:39:30:ad:e7:fd:98:46:b8:f7:43:89:48:3a:
8b:58:47:0a:78:2e:66:f6:c2:d4:07:d7:57:72:f5:75:90:f0:
4b:d6:b7:f4:6d:f4:2c:f9:c7:91:6c:9f:89:d0:7c:76:db:5e:
d0:c7:21:09:22:dd:e2:6f:23:51:76:6d:86:9e:80:8c:97:af:
53:ce:dd:0f:92:7b:32:36:35:b5:ba:a8:0b:f5:29:67:b6:a8:
33:c5:7c:49:df:aa:8c:b0:45:e9:1c:f8:b2:a0:bb:58:9a:db:
a1:00:82:95
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICEdowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD
RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTAzMTQw
OTMzNDlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEUyMEYzQkRGRDlBOUEz
MzI0OEM2NzQ1Rjg1QjVBMTlFM0YyNTA3QzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCfqNFLdFdCOvnUyp4l5bmC+PyNxddWCjrAjAXRZGVSOWWEl6q5
rcwY7fJWcRMg7cEkA0/AYhfJtvK+FtWGu2X594bCukN557mx+6MwV/5d5SkgyoIL
hP3HIgAYseFw1a+HB2iTi/8LHNknobffdTGm0Z0Cu5pvYwIV5ump36uYIUqb+tFY
38r8h2ch2A0LZ3O/RxfCgUXQO4UKJcyih8lACkKAQ3Jk6LECYV289Jh/4fWFkdNN
CADWUQLakth5cVANSrWUmTOi7vk2a8u43PDLQ4IsS4T10DxadgSB1iI1065MQPqg
7Umq8zCkTFGI8CoeWh9X4lG+fMPDiN/r/wfRAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQU4g8739mpozJIxnRfhbWhnj8lB8kwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb
RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx
NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvNGc4NzM5bXBvekpJ
eG5SZmhiV2huajhsQjhrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBHEvkDANBgkqhkiG9w0BAQsFAAOCAQEAd9M/BDvq2E2q06ODPD3xgN/8gcLW
mCibJcwYENc6BMZ2RtjBGwbFJUHHjr5a2XZc/QQezdCRLmKLyubf2aZcCsM3iNJA
7UdzOxE97yJYjSgTLWwN3+a1bHvl3BAWdjQjAiNOvrmdni6sJ6Pqc5uZ8FWADMYo
38qiDds7RGcd2D/ji35litGxYMrDJTsrhSZHhiwUPFE5MK3n/ZhGuPdDiUg6i1hH
CnguZvbC1AfXV3L1dZDwS9a39G30LPnHkWyfidB8dtte0MchCSLd4m8jUXZthp6A
jJevU87dD5J7MjY1tbqoC/UpZ7aoM8V8Sd+qjLBF6Rz4sqC7WJrboQCClQ==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:47:13 2025 by rpki-client