Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/8pAtL3GeE3X0Wg1U7szOj_RxbzY.roa
File: 8pAtL3GeE3X0Wg1U7szOj_RxbzY.roa (raw, json)
Hash identifier: S6scOWYxPhKO7lytvD9FQVNxhndo0YA4D03FU7hwrkk=
Subject key identifier: F2:90:2D:2F:71:9E:13:75:F4:5A:0D:54:EE:CC:CE:8F:F4:71:6F:36
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 161D
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/8pAtL3GeE3X0Wg1U7szOj_RxbzY.roa
Signing time: Sun 16 Feb 2025 03:24:12 +0000
ROA not before: Sun 16 Feb 2025 03:24:12 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 10103
IP address blocks: 180.223.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5661 (0x161d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Feb 16 03:24:12 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=F2902D2F719E1375F45A0D54EECCCE8FF4716F36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:0e:98:6c:3f:0a:61:4c:d7:0d:93:9a:a1:73:
e3:8a:7d:1a:2c:de:d7:e2:cd:c4:58:81:1e:06:60:
91:10:cb:ba:83:ea:dc:7c:e4:f2:da:87:ce:14:70:
15:1e:7f:af:56:9a:62:18:8e:8c:0f:9e:f4:ce:18:
fa:28:bc:a3:08:c7:a0:46:da:0c:77:c6:78:5f:b4:
bd:2c:04:38:93:24:c0:84:aa:00:e7:3d:20:68:fc:
0c:d9:a2:ff:30:73:cf:a5:cb:22:34:c4:0a:bd:2d:
c6:7e:f9:8a:80:5e:8d:ef:66:a7:ae:c0:df:76:ff:
3e:54:bb:f8:e9:d1:5c:a2:52:00:db:93:a9:91:45:
f1:1a:8b:2d:44:4b:e9:41:dc:a0:f4:d7:15:4e:eb:
67:50:27:ea:b2:9a:4a:48:b4:86:7f:eb:73:da:eb:
60:f6:f6:8c:ac:ee:44:5f:14:ab:3f:92:57:e6:61:
c4:93:57:44:ee:8e:41:bc:b6:c1:08:b4:60:86:c9:
66:97:75:85:72:88:72:af:77:d9:a8:f8:03:63:e3:
02:64:57:94:c2:46:5a:cd:d6:5f:09:82:7d:f4:5d:
18:e2:bb:64:37:30:1a:0b:05:2b:dd:bf:98:c4:7a:
59:dd:23:a4:f9:bb:21:84:53:b3:37:bd:14:0b:80:
40:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:90:2D:2F:71:9E:13:75:F4:5A:0D:54:EE:CC:CE:8F:F4:71:6F:36
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/8pAtL3GeE3X0Wg1U7szOj_RxbzY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.212.0/22
Signature Algorithm: sha256WithRSAEncryption
01:bb:62:7a:bd:fd:e3:fe:a0:b2:35:2c:35:df:e6:2c:ae:35:
f9:84:af:61:16:78:d1:b9:ff:cc:9b:8c:b0:33:b8:93:13:10:
eb:01:81:d1:2a:62:92:b9:36:63:fb:ed:f1:63:58:80:91:62:
a2:70:e7:45:de:20:81:76:4a:d7:5f:2d:2b:25:14:c3:c5:5e:
33:a3:f9:58:55:0e:e2:83:40:8a:95:d5:f9:8d:ed:36:66:3b:
a5:85:66:ef:db:d2:e2:bf:25:ee:bc:39:b1:61:fd:25:5e:55:
db:16:c0:1e:03:30:0a:2c:f0:cb:78:e6:39:6f:10:99:05:92:
ec:bf:46:95:bb:23:bb:78:0f:51:06:44:34:99:35:e3:03:60:
c8:f2:f0:1a:a9:38:a9:ef:88:dd:be:18:71:09:f6:0a:72:30:
d0:17:14:a8:45:05:e1:5d:20:8c:85:ca:f0:70:b0:d4:d7:3a:
cb:e2:4b:5e:ee:1b:c1:ae:ef:f6:8c:95:38:0f:db:f9:9b:c0:
ab:89:f2:bc:99:e3:86:3b:69:d9:c3:7d:16:99:25:b6:e0:42:
d0:44:89:14:73:84:62:f4:ae:33:79:d7:f1:b8:72:f3:87:28:
f1:db:3b:ca:98:0b:d1:59:32:88:2f:ea:2f:66:6e:0d:17:bf:
36:21:84:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:28 2025 by rpki-client