Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3095/kIJmsag39iSx6lmJEkPBiT0BQv4.roa
File: kIJmsag39iSx6lmJEkPBiT0BQv4.roa (raw, json)
Hash identifier: kUo3qBtTT+uVchr5ViYIUOR0ptx8Cfst/Rnb5FoDJJM=
Subject key identifier: 90:82:66:B1:A8:37:F6:24:B1:EA:59:89:12:43:C1:89:3D:01:42:FE
Certificate issuer: /CN=CB16707EAF0BDFD1326AFD9BDEC6AFFA6E63BA98
Certificate serial: 0961
Authority key identifier: CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/kIJmsag39iSx6lmJEkPBiT0BQv4.roa
Signing time: Mon 20 Jan 2025 01:30:16 +0000
ROA not before: Mon 20 Jan 2025 01:30:16 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 56040
IP address blocks: 202.46.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2401 (0x961)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB16707EAF0BDFD1326AFD9BDEC6AFFA6E63BA98
Validity
Not Before: Jan 20 01:30:16 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=908266B1A837F624B1EA59891243C1893D0142FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1d:09:74:5a:47:f4:2e:94:b7:50:1a:c6:bd:
9e:6c:1d:08:5d:38:1d:e1:7c:ae:1a:3e:22:4a:47:
29:db:3b:6f:50:6a:31:a5:b3:82:17:1c:43:27:92:
f5:42:c0:88:44:e2:75:9f:6b:75:fa:6a:1f:49:8d:
65:57:48:dc:42:9f:f9:4d:d6:31:2b:48:de:c8:82:
0d:46:ba:a1:c8:15:40:43:08:19:88:34:21:24:15:
c8:8e:5e:24:b0:03:72:e0:93:d3:da:1a:d5:b4:ac:
26:24:d8:ee:01:09:6c:44:0c:55:d9:dc:ce:64:b6:
bd:3e:40:d8:9f:99:43:0b:73:a1:ed:1d:fe:df:e4:
d2:66:52:1f:27:df:55:5c:ae:99:b5:c3:63:0a:95:
fc:c5:bf:b6:d0:0c:e5:ae:84:a6:c2:e9:7d:e5:ce:
85:30:54:e6:d4:79:a5:67:42:54:2c:af:11:d3:75:
d2:db:c7:23:8c:cd:3d:5d:bc:4f:fb:aa:b7:49:08:
33:66:d9:93:21:a9:a7:98:7e:30:9d:b7:9c:5d:0e:
0f:17:4b:cc:f2:ca:f3:84:61:cd:cd:ca:e5:9d:f8:
6b:40:45:4b:4f:98:04:55:94:e6:8d:e0:84:3a:d8:
6c:22:4e:b9:b7:72:f2:91:42:b5:4e:fa:98:77:31:
33:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:82:66:B1:A8:37:F6:24:B1:EA:59:89:12:43:C1:89:3D:01:42:FE
X509v3 Authority Key Identifier:
keyid:CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/yxZwfq8L39Eyav2b3sav-m5jupg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/kIJmsag39iSx6lmJEkPBiT0BQv4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.46.224.0/22
Signature Algorithm: sha256WithRSAEncryption
83:91:65:63:87:b5:40:3c:d8:97:63:9f:3a:08:70:01:61:d9:
95:f1:53:d2:cb:b1:92:00:7c:91:8d:c2:0a:60:0e:fb:09:d9:
6d:32:00:82:9d:8b:5c:45:17:ad:2f:d4:3a:a5:03:db:23:33:
63:4b:55:5e:07:1b:85:8f:c0:ba:b1:89:df:71:fa:9e:35:b8:
e6:ec:5a:0d:cd:62:26:a1:5c:92:95:a2:d3:e0:94:79:14:ee:
f3:c4:4b:d1:0e:43:15:2b:e6:38:5b:9f:30:da:34:71:fc:06:
07:57:26:10:d3:bc:ed:46:1c:42:fd:37:d0:8f:f4:3f:c8:8b:
55:00:0a:4d:fc:45:cb:65:de:00:9b:f1:a5:cc:ca:84:4b:e2:
66:d1:6e:8d:12:9c:02:57:aa:5f:f7:a5:69:37:92:ac:7a:02:
29:f1:fa:84:e7:5b:f0:e5:cc:49:00:77:c2:da:6e:ab:29:0b:
b5:b7:87:33:ce:c1:50:0f:22:5c:1a:8c:59:26:30:8b:9f:3c:
eb:40:f8:89:bf:79:38:22:80:75:2c:ea:0b:4f:7e:31:25:0c:
57:66:d6:0d:9c:2c:00:a1:e0:c7:f7:62:d8:35:52:0b:bc:22:
69:08:37:09:dd:07:ff:5a:0e:ec:22:8a:27:48:dd:8a:50:ab:
4e:9c:da:a1
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICCWEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Ix
NjcwN0VBRjBCREZEMTMyNkFGRDlCREVDNkFGRkE2RTYzQkE5ODAeFw0yNTAxMjAw
MTMwMTZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDkwODI2NkIxQTgzN0Y2
MjRCMUVBNTk4OTEyNDNDMTg5M0QwMTQyRkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3HQl0Wkf0LpS3UBrGvZ5sHQhdOB3hfK4aPiJKRynbO29QajGl
s4IXHEMnkvVCwIhE4nWfa3X6ah9JjWVXSNxCn/lN1jErSN7Igg1GuqHIFUBDCBmI
NCEkFciOXiSwA3Lgk9PaGtW0rCYk2O4BCWxEDFXZ3M5ktr0+QNifmUMLc6HtHf7f
5NJmUh8n31Vcrpm1w2MKlfzFv7bQDOWuhKbC6X3lzoUwVObUeaVnQlQsrxHTddLb
xyOMzT1dvE/7qrdJCDNm2ZMhqaeYfjCdt5xdDg8XS8zyyvOEYc3NyuWd+GtARUtP
mARVlOaN4IQ62GwiTrm3cvKRQrVO+ph3MTOrAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUkIJmsag39iSx6lmJEkPBiT0BQv4wHwYDVR0jBBgwFoAUyxZwfq8L39Eyav2b
3sav+m5jupgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5
NS95eFp3ZnE4TDM5RXlhdjJiM3Nhdi1tNWp1cGcuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3l4WndmcThMMzlFeWF2MmIzc2F2LW01anVwZy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwOTUva0lKbXNhZzM5aVN4
NmxtSkVrUEJpVDBCUXY0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAsou4DANBgkqhkiG9w0BAQsFAAOCAQEAg5FlY4e1QDzYl2OfOghwAWHZlfFT
0suxkgB8kY3CCmAO+wnZbTIAgp2LXEUXrS/UOqUD2yMzY0tVXgcbhY/AurGJ33H6
njW45uxaDc1iJqFckpWi0+CUeRTu88RL0Q5DFSvmOFufMNo0cfwGB1cmENO87UYc
Qv030I/0P8iLVQAKTfxFy2XeAJvxpczKhEviZtFujRKcAleqX/elaTeSrHoCKfH6
hOdb8OXMSQB3wtpuqykLtbeHM87BUA8iXBqMWSYwi58860D4ib95OCKAdSzqC09+
MSUMV2bWDZwsAKHgx/di2DVSC7wiaQg3Cd0H/1oO7CKKJ0jdilCrTpzaoQ==
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:41:51 2025 by rpki-client