Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/kZ7okT2iuRiKRnTyHKlL9w8suR4.roa
File: kZ7okT2iuRiKRnTyHKlL9w8suR4.roa (raw, json)
Hash identifier: D3w0VtWVz0dQ3Gz6TcEqHhPmJxxA2QAfqzX36rDnMN4=
Subject key identifier: 91:9E:E8:91:3D:A2:B9:18:8A:46:74:F2:1C:A9:4B:F7:0F:2C:B9:1E
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 0F98
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/kZ7okT2iuRiKRnTyHKlL9w8suR4.roa
Signing time: Tue 26 Nov 2024 06:40:37 +0000
ROA not before: Tue 26 Nov 2024 06:40:37 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 55990
IP address blocks: 113.46.240.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3992 (0xf98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Nov 26 06:40:37 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=919EE8913DA2B9188A4674F21CA94BF70F2CB91E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:23:8f:83:0e:bd:22:20:2a:c4:8c:db:3c:24:
32:96:0f:44:1d:5f:86:d3:b9:42:5d:ca:2b:54:32:
33:5e:7d:fc:71:12:cc:46:12:36:c0:d9:87:60:85:
fb:f6:44:41:43:7b:d2:5c:21:f7:c7:57:97:07:c2:
a1:3d:b9:67:09:98:4d:e9:44:f7:60:27:d4:0d:42:
45:d5:c7:55:b2:2a:08:25:76:00:f1:8e:6d:f3:0b:
ef:51:31:98:12:22:46:1d:f1:47:e1:98:6e:89:26:
47:e5:56:b3:56:45:ec:dc:06:ca:6f:3f:c7:bd:eb:
9e:0e:ae:4e:27:df:45:2f:9c:d3:54:f4:31:99:0d:
30:d0:14:8b:6d:6c:67:6e:ee:44:be:f8:07:99:e4:
14:da:2b:dd:c0:de:c5:09:de:63:00:d8:73:c4:c6:
6e:48:b7:12:7b:2f:c1:50:af:08:e3:45:23:37:cc:
1e:88:9c:ee:18:a7:d1:4a:09:9c:d7:7c:3b:4b:f6:
ed:05:2c:a5:90:b9:a9:9b:5b:1e:a6:30:dd:89:16:
99:ba:ba:4d:61:4e:5c:85:e9:d9:f8:83:4f:e7:6a:
08:a4:40:10:1b:c4:cb:39:4f:f1:1a:f0:0e:86:e7:
3f:17:87:cd:6f:a1:8b:b4:aa:54:b1:16:df:17:ea:
ab:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9E:E8:91:3D:A2:B9:18:8A:46:74:F2:1C:A9:4B:F7:0F:2C:B9:1E
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/kZ7okT2iuRiKRnTyHKlL9w8suR4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.46.240.0/21
Signature Algorithm: sha256WithRSAEncryption
5f:0f:bf:71:e6:03:5b:b7:ce:4b:87:dd:25:e5:8d:18:bd:b1:
d0:ed:f1:d5:84:3d:7e:f4:ee:0d:7b:01:da:94:2c:f0:c3:9c:
51:c1:4f:42:df:86:34:0f:90:04:e3:a8:7f:a2:09:f4:b3:a8:
3f:cb:f8:30:50:16:52:16:7c:76:c9:e2:68:df:fd:f0:44:79:
4f:99:3d:c3:fe:c0:99:31:9a:00:1f:4d:c0:57:b4:ee:92:a3:
8d:86:50:86:e1:16:90:35:c3:65:37:aa:b3:60:84:5d:43:b8:
f7:75:1b:86:3e:ab:f7:f0:8c:9d:55:1b:ef:f6:6d:57:eb:58:
d1:0e:77:2a:b9:81:03:6d:d8:0f:33:e5:b3:9c:92:cf:2a:3f:
7d:94:05:43:4c:eb:9a:95:b5:e7:9e:9c:4e:c1:bc:ff:69:49:
3c:a5:a0:f8:4d:6a:3c:75:37:6a:57:9a:ba:a0:fb:4c:64:b1:
aa:e8:d2:04:01:ef:aa:d8:50:18:38:c6:16:54:f8:6c:68:24:
37:16:a8:35:02:e0:52:19:43:73:9f:cb:ba:17:49:dd:5b:71:
6b:c0:a9:e4:c5:13:ba:c0:0c:89:a1:57:2e:c3:4f:20:2f:49:
dc:38:c2:38:f4:70:53:31:ce:8f:64:65:da:8a:16:48:5e:25:
5a:55:c9:5e
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICD5gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD
RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNDExMjYw
NjQwMzdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDkxOUVFODkxM0RBMkI5
MTg4QTQ2NzRGMjFDQTk0QkY3MEYyQ0I5MUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+I4+DDr0iICrEjNs8JDKWD0QdX4bTuUJdyitUMjNeffxxEsxG
EjbA2Ydghfv2REFDe9JcIffHV5cHwqE9uWcJmE3pRPdgJ9QNQkXVx1WyKggldgDx
jm3zC+9RMZgSIkYd8UfhmG6JJkflVrNWRezcBspvP8e9654Ork4n30UvnNNU9DGZ
DTDQFIttbGdu7kS++AeZ5BTaK93A3sUJ3mMA2HPExm5ItxJ7L8FQrwjjRSM3zB6I
nO4Yp9FKCZzXfDtL9u0FLKWQuambWx6mMN2JFpm6uk1hTlyF6dn4g0/nagikQBAb
xMs5T/Ea8A6G5z8Xh81voYu0qlSxFt8X6qvvAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUkZ7okT2iuRiKRnTyHKlL9w8suR4wHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb
RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx
NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQva1o3b2tUMml1UmlL
Um5UeUhLbEw5dzhzdVI0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA3Eu8DANBgkqhkiG9w0BAQsFAAOCAQEAXw+/ceYDW7fOS4fdJeWNGL2x0O3x
1YQ9fvTuDXsB2pQs8MOcUcFPQt+GNA+QBOOof6IJ9LOoP8v4MFAWUhZ8dsniaN/9
8ER5T5k9w/7AmTGaAB9NwFe07pKjjYZQhuEWkDXDZTeqs2CEXUO493Ubhj6r9/CM
nVUb7/ZtV+tY0Q53KrmBA23YDzPls5ySzyo/fZQFQ0zrmpW1556cTsG8/2lJPKWg
+E1qPHU3aleauqD7TGSxqujSBAHvqthQGDjGFlT4bGgkNxaoNQLgUhlDc5/LuhdJ
3Vtxa8Cp5MUTusAMiaFXLsNPIC9J3DjCOPRwUzHOj2Rl2ooWSF4lWlXJXg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:47:22 2025 by rpki-client