Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/snqxTbhGTS8THOr07dDBizPw_e4.roa
File: snqxTbhGTS8THOr07dDBizPw_e4.roa (raw, json)
Hash identifier: KOBxwK7MLoxz5FUlL+ZP387s61F045vkyPorLhr1u+8=
Subject key identifier: B2:7A:B1:4D:B8:46:4D:2F:13:1C:EA:F4:ED:D0:C1:8B:33:F0:FD:EE
Certificate issuer: /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial: 1CB3
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/snqxTbhGTS8THOr07dDBizPw_e4.roa
Signing time: Thu 02 Jan 2025 13:58:21 +0000
ROA not before: Thu 02 Jan 2025 13:58:21 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 4811
IP address blocks: 14.103.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7347 (0x1cb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
Validity
Not Before: Jan 2 13:58:21 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=B27AB14DB8464D2F131CEAF4EDD0C18B33F0FDEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:64:88:de:ef:a6:0b:ba:50:ac:46:55:03:7d:
22:e4:d4:7e:8b:72:11:88:08:1b:9a:e9:57:6f:99:
70:c4:76:14:85:16:b7:c3:59:13:30:cf:60:b3:7f:
ab:2d:37:88:95:88:2b:46:50:b5:61:ee:d4:e8:fb:
f7:e5:96:94:10:9c:69:43:ac:84:d3:95:e2:68:03:
6a:5a:3f:83:04:44:cc:2a:84:b5:ed:0d:15:eb:e7:
7c:b5:26:48:4c:2a:b2:ae:46:c5:3b:54:ad:d8:13:
b0:e1:ed:c6:7d:91:9d:64:c2:87:f2:36:26:ed:0f:
52:44:ed:2c:1c:1f:7e:71:8c:79:af:5a:2b:d2:88:
14:b5:70:30:5c:a6:d2:b9:72:db:b2:44:e5:5d:9f:
2e:86:96:d7:2c:bf:6d:ba:9e:93:61:c9:36:3a:22:
78:9d:86:4b:58:91:58:17:21:e9:56:96:c2:bc:68:
6f:9e:b9:a7:73:57:61:6f:78:a7:2b:45:d6:10:89:
e3:2a:fc:de:b9:7f:20:bb:4d:fb:d7:ed:8c:75:76:
17:40:e9:df:de:ab:56:c3:31:4d:aa:4b:d5:79:a9:
6d:2d:e8:0d:7e:cb:db:07:5e:2e:f7:c2:11:f6:1f:
6a:dd:80:b9:c9:cc:3c:4f:c3:88:f9:48:bc:e5:c1:
b7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7A:B1:4D:B8:46:4D:2F:13:1C:EA:F4:ED:D0:C1:8B:33:F0:FD:EE
X509v3 Authority Key Identifier:
keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/snqxTbhGTS8THOr07dDBizPw_e4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
14.103.24.0/21
Signature Algorithm: sha256WithRSAEncryption
ac:d8:5c:36:05:75:b1:05:ce:ed:24:ad:45:7c:63:c9:0e:05:
1a:a9:39:cc:c7:a8:2b:b5:75:e9:61:be:69:6e:b7:36:61:27:
e9:d8:c9:26:7e:e3:68:4e:74:b9:5f:92:1b:04:50:e3:0d:d9:
35:32:0b:e8:8f:d1:ca:03:d7:42:f7:54:32:d9:64:70:b5:67:
31:08:da:c8:b4:94:cf:97:aa:ca:fd:54:ad:40:d6:e0:b6:7e:
1a:ab:9e:6c:42:d4:58:7b:c6:cc:0c:23:ad:dd:54:8b:79:bc:
7e:49:3f:e2:1a:ef:90:31:0d:75:2c:29:a9:a5:6b:a2:bb:72:
e2:34:fb:b6:47:7c:33:bd:51:21:98:d5:40:34:f5:00:43:60:
f3:96:95:1f:aa:c9:cd:fd:20:de:dc:47:ca:3a:f0:2a:12:d3:
7a:87:5c:d3:b5:16:f0:7d:91:9d:0b:41:4e:10:24:fa:5b:95:
1c:3c:71:26:12:cb:3a:5e:e1:aa:4e:d8:2c:4d:3a:e9:64:b3:
2d:16:b0:cb:85:0a:4b:f0:6f:f0:cc:66:fd:dd:c4:af:9f:5c:
86:90:b3:08:eb:69:6e:ba:0e:c1:32:1b:66:35:68:3a:17:08:
34:09:06:22:04:b8:18:82:55:ea:ae:b6:61:48:5b:b3:97:cc:
c3:72:a0:c8
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICHLMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4
QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yNTAxMDIx
MzU4MjFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEIyN0FCMTREQjg0NjRE
MkYxMzFDRUFGNEVERDBDMThCMzNGMEZERUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCuZIje76YLulCsRlUDfSLk1H6LchGICBua6VdvmXDEdhSFFrfD
WRMwz2Czf6stN4iViCtGULVh7tTo+/fllpQQnGlDrITTleJoA2paP4MERMwqhLXt
DRXr53y1JkhMKrKuRsU7VK3YE7Dh7cZ9kZ1kwofyNibtD1JE7SwcH35xjHmvWivS
iBS1cDBcptK5ctuyROVdny6Gltcsv226npNhyTY6InidhktYkVgXIelWlsK8aG+e
uadzV2FveKcrRdYQieMq/N65fyC7TfvX7Yx1dhdA6d/eq1bDMU2qS9V5qW0t6A1+
y9sHXi73whH2H2rdgLnJzDxPw4j5SLzlwbd9AgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUsnqxTbhGTS8THOr07dDBizPw/e4wHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw
dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0
NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvc25xeFRiaEdUUzhU
SE9yMDdkREJpelB3X2U0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAw5nGDANBgkqhkiG9w0BAQsFAAOCAQEArNhcNgV1sQXO7SStRXxjyQ4FGqk5
zMeoK7V16WG+aW63NmEn6djJJn7jaE50uV+SGwRQ4w3ZNTIL6I/RygPXQvdUMtlk
cLVnMQjayLSUz5eqyv1UrUDW4LZ+GquebELUWHvGzAwjrd1Ui3m8fkk/4hrvkDEN
dSwpqaVrorty4jT7tkd8M71RIZjVQDT1AENg85aVH6rJzf0g3txHyjrwKhLTeodc
07UW8H2RnQtBThAk+luVHDxxJhLLOl7hqk7YLE066WSzLRawy4UKS/Bv8Mxm/d3E
r59chpCzCOtpbroOwTIbZjVoOhcINAkGIgS4GIJV6q62YUhbs5fMw3KgyA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:21:40 2025 by rpki-client