Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/312/4rzlNzgtGTVtgaZZyfXYb9Z1QHs.roa
File: 4rzlNzgtGTVtgaZZyfXYb9Z1QHs.roa (raw, json)
Hash identifier: HYU7YTQ2XHwe0FvyYneiC/4utDTubDJ3uPmz6aKlOnM=
Subject key identifier: E2:BC:E5:37:38:2D:19:35:6D:81:A6:59:C9:F5:D8:6F:D6:75:40:7B
Certificate issuer: /CN=85F3BFD1A14090C4829A5A313A4D31F9CC8F312F
Certificate serial: 1955
Authority key identifier: 85:F3:BF:D1:A1:40:90:C4:82:9A:5A:31:3A:4D:31:F9:CC:8F:31:2F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hfO_0aFAkMSCmloxOk0x-cyPMS8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/4rzlNzgtGTVtgaZZyfXYb9Z1QHs.roa
Signing time: Fri 06 Sep 2024 01:55:45 +0000
ROA not before: Fri 06 Sep 2024 01:55:45 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 38372
IP address blocks: 120.31.164.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6485 (0x1955)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85F3BFD1A14090C4829A5A313A4D31F9CC8F312F
Validity
Not Before: Sep 6 01:55:45 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E2BCE537382D19356D81A659C9F5D86FD675407B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a7:82:8d:d8:7b:cd:dc:95:3c:2c:95:cd:03:
d1:a9:1f:64:c7:ce:77:97:66:61:04:5c:39:4b:ae:
e1:82:30:e5:49:43:d4:37:3b:9c:78:f5:22:f3:df:
e4:3f:5f:4f:da:c6:7c:06:b7:85:fc:ae:f4:44:b3:
89:a1:07:f6:b7:9e:39:42:d8:8f:cf:f4:a3:a1:10:
a5:68:b1:df:b0:1e:44:dc:9d:27:0c:e4:83:71:1d:
74:d5:d2:95:35:fc:0e:09:07:9a:b8:d6:36:ca:fb:
60:7b:23:4a:8e:2d:eb:e1:cf:fb:25:a1:82:9c:ba:
ec:0e:ba:15:0a:2b:7d:64:12:7c:c2:fb:7c:18:3d:
cf:9a:0f:40:e9:75:10:38:f6:c2:31:b3:f6:1c:d9:
84:29:3a:08:e3:13:fc:db:7e:aa:d2:24:f4:07:03:
85:bd:09:c5:1a:70:8d:b5:7c:dd:22:84:03:f2:b4:
de:e8:38:4d:03:d6:39:0d:9e:70:d2:4d:09:7e:f3:
28:4b:5e:fd:9f:1b:68:71:47:70:44:7b:93:1d:9a:
71:a0:22:94:57:56:33:62:91:89:68:94:6c:9e:f2:
1a:4f:b9:c1:04:7f:8d:29:85:77:7b:27:92:b3:ad:
17:b0:b4:14:e4:a9:37:f6:3d:8c:39:ec:24:10:88:
8f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:BC:E5:37:38:2D:19:35:6D:81:A6:59:C9:F5:D8:6F:D6:75:40:7B
X509v3 Authority Key Identifier:
keyid:85:F3:BF:D1:A1:40:90:C4:82:9A:5A:31:3A:4D:31:F9:CC:8F:31:2F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/hfO_0aFAkMSCmloxOk0x-cyPMS8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hfO_0aFAkMSCmloxOk0x-cyPMS8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/4rzlNzgtGTVtgaZZyfXYb9Z1QHs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.31.164.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:a0:86:da:f3:a4:82:30:45:ff:73:91:5a:bb:6e:4a:43:0d:
af:d3:c2:46:06:67:25:e3:95:18:82:8a:3e:7e:87:9e:26:4a:
ba:9e:2b:d3:1e:98:7e:5c:47:d3:f3:2e:b7:52:0a:74:81:45:
ad:0b:55:50:f9:05:b2:2f:be:5e:2f:ab:77:07:b1:ba:3e:73:
53:2d:80:05:1b:f4:6c:ed:29:24:36:b3:db:2c:86:92:d2:28:
e5:11:64:a2:9e:02:42:8a:34:b4:98:bf:93:05:68:24:79:cf:
e7:3d:0c:e8:f7:93:02:2f:55:6f:40:4f:10:a4:94:ff:d8:a4:
e8:7b:ba:dc:df:c0:29:76:4e:eb:c4:60:54:e5:94:be:a0:3f:
77:31:9c:0a:ad:7d:75:2e:68:77:33:99:e9:c3:49:9b:02:21:
33:68:01:6c:36:70:c1:54:53:e0:b0:c5:6e:fa:59:d9:16:10:
b9:c4:27:61:ca:25:85:0d:b2:86:87:96:58:d9:bf:71:c4:a0:
b1:ae:b5:82:19:b1:62:ec:b7:71:37:4d:4e:b6:81:f1:6b:0c:
90:3a:6c:b1:c0:d2:8e:5d:c6:f5:ba:25:d1:ce:bd:a7:94:7c:
18:9b:a5:02:b4:7b:66:f8:35:47:fb:16:a3:9e:f3:31:ef:ef:
6b:0d:e7:24
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICGVUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODVG
M0JGRDFBMTQwOTBDNDgyOUE1QTMxM0E0RDMxRjlDQzhGMzEyRjAeFw0yNDA5MDYw
MTU1NDVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEUyQkNFNTM3MzgyRDE5
MzU2RDgxQTY1OUM5RjVEODZGRDY3NTQwN0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKp4KN2HvN3JU8LJXNA9GpH2THzneXZmEEXDlLruGCMOVJQ9Q3
O5x49SLz3+Q/X0/axnwGt4X8rvREs4mhB/a3njlC2I/P9KOhEKVosd+wHkTcnScM
5INxHXTV0pU1/A4JB5q41jbK+2B7I0qOLevhz/sloYKcuuwOuhUKK31kEnzC+3wY
Pc+aD0DpdRA49sIxs/Yc2YQpOgjjE/zbfqrSJPQHA4W9CcUacI21fN0ihAPytN7o
OE0D1jkNnnDSTQl+8yhLXv2fG2hxR3BEe5MdmnGgIpRXVjNikYlolGye8hpPucEE
f40phXd7J5KzrRewtBTkqTf2PYw57CQQiI/ZAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU4rzlNzgtGTVtgaZZyfXYb9Z1QHswHwYDVR0jBBgwFoAUhfO/0aFAkMSCmlox
Ok0x+cyPMS8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEy
L2hmT18wYUZBa01TQ21sb3hPazB4LWN5UE1TOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvaGZPXzBhRkFrTVNDbWxveE9rMHgtY3lQTVM4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEyLzRyemxOemd0R1RWdGdh
Wlp5ZlhZYjlaMVFIcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAJ4H6QwDQYJKoZIhvcNAQELBQADggEBAByghtrzpIIwRf9zkVq7bkpDDa/TwkYG
ZyXjlRiCij5+h54mSrqeK9MemH5cR9PzLrdSCnSBRa0LVVD5BbIvvl4vq3cHsbo+
c1MtgAUb9GztKSQ2s9sshpLSKOURZKKeAkKKNLSYv5MFaCR5z+c9DOj3kwIvVW9A
TxCklP/YpOh7utzfwCl2TuvEYFTllL6gP3cxnAqtfXUuaHczmenDSZsCITNoAWw2
cMFUU+CwxW76WdkWELnEJ2HKJYUNsoaHlljZv3HEoLGutYIZsWLst3E3TU62gfFr
DJA6bLHA0o5dxvW6JdHOvaeUfBibpQK0e2b4NUf7FqOe8zHv72sN5yQ=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:47:08 2025 by rpki-client