Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/FGhJzTZgAbOaCugp01PQT-MbvtM.roa
File: FGhJzTZgAbOaCugp01PQT-MbvtM.roa (raw, json)
Hash identifier: 3b8fJvvr1oVvTUqlzo6lo1QbtehEdfKeEGZpYMiLNds=
Subject key identifier: 14:68:49:CD:36:60:01:B3:9A:0A:E8:29:D3:53:D0:4F:E3:1B:BE:D3
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 1556
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/FGhJzTZgAbOaCugp01PQT-MbvtM.roa
Signing time: Tue 14 Jan 2025 06:39:08 +0000
ROA not before: Tue 14 Jan 2025 06:39:08 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 10103
IP address blocks: 180.223.148.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5462 (0x1556)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Jan 14 06:39:08 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=146849CD366001B39A0AE829D353D04FE31BBED3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:43:2f:78:8a:8c:94:f7:8c:d5:81:f2:a2:37:
4d:9e:09:fc:a9:e8:80:71:70:da:70:31:94:14:cd:
d0:02:07:a6:f5:a3:56:a7:26:c8:74:38:b3:e8:97:
4a:a1:7d:80:c9:05:43:20:83:ab:c2:cd:dd:51:29:
3f:d7:02:c3:70:fe:22:23:a3:06:26:10:4b:a9:08:
46:5d:0f:c6:eb:11:01:ee:3c:fc:81:e2:7b:2b:ad:
26:ec:16:42:00:65:22:04:d4:de:bc:ab:27:cc:43:
f7:1e:73:5e:04:83:7e:70:77:1e:2b:88:6a:2d:46:
da:0c:25:a1:50:17:37:c0:63:47:82:bd:77:64:3a:
1f:78:7e:a4:bb:e4:03:c7:17:fe:09:06:e5:3f:ae:
2a:96:b0:5f:29:f4:76:69:56:61:49:d7:3d:bc:dc:
ac:83:43:bd:ac:83:09:c0:e2:0e:73:f0:88:53:ca:
fa:80:cb:8a:29:8c:a3:be:d8:f5:ec:8e:f6:b2:cc:
f3:8a:3c:3c:47:b8:31:f2:ee:51:51:20:b1:be:97:
a5:4c:52:99:37:6a:7c:e6:2b:d6:b7:58:15:31:c7:
08:ac:4d:55:57:9f:12:a0:16:a4:f6:6a:b8:8e:72:
4a:35:14:8a:37:23:43:2a:cf:35:e4:af:3b:d4:32:
74:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:68:49:CD:36:60:01:B3:9A:0A:E8:29:D3:53:D0:4F:E3:1B:BE:D3
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/FGhJzTZgAbOaCugp01PQT-MbvtM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.148.0/22
Signature Algorithm: sha256WithRSAEncryption
56:a6:d4:51:03:c6:9d:1c:01:f1:e4:7a:1b:01:df:76:f9:33:
18:6a:8e:99:33:9e:26:eb:d8:0a:a8:4e:07:89:8e:76:c2:b2:
87:92:62:ba:98:6e:b8:8f:55:12:84:38:da:df:f5:66:7a:ea:
78:d0:53:12:20:9d:ec:8a:08:f0:71:f1:06:e9:20:63:73:91:
18:7b:60:1e:47:7a:1a:8d:7d:ab:08:1f:29:9b:3c:bf:74:ee:
51:47:44:19:35:c1:91:63:b9:cd:bd:ab:a4:1b:f6:b6:b0:4c:
35:f9:97:b3:bc:da:8d:39:eb:97:66:09:3d:c9:d2:18:5d:fe:
81:8d:e7:c0:ea:ad:f4:d7:d5:b2:a2:c2:11:db:b9:70:64:da:
b3:fa:56:97:60:ba:f5:2c:a1:a8:c6:27:8f:1b:26:b9:09:00:
96:6b:d4:eb:62:f2:7c:7e:46:d0:5f:0c:b2:c6:75:0a:88:16:
fb:fe:2e:2c:f7:55:21:b3:52:20:07:b7:a3:0f:94:d7:92:c6:
90:e9:03:ec:f3:f1:dd:56:68:62:68:70:30:be:79:54:cd:f2:
0b:cc:19:a5:cd:7b:29:17:57:07:0a:f8:d7:25:e1:39:ed:87:
eb:27:61:b2:fd:92:a8:27:56:4a:28:5b:89:df:1d:e1:41:8a:
28:34:35:0c
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICFVYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw
QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTAxMTQw
NjM5MDhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDE0Njg0OUNEMzY2MDAx
QjM5QTBBRTgyOUQzNTNEMDRGRTMxQkJFRDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwQy94ioyU94zVgfKiN02eCfyp6IBxcNpwMZQUzdACB6b1o1an
Jsh0OLPol0qhfYDJBUMgg6vCzd1RKT/XAsNw/iIjowYmEEupCEZdD8brEQHuPPyB
4nsrrSbsFkIAZSIE1N68qyfMQ/cec14Eg35wdx4riGotRtoMJaFQFzfAY0eCvXdk
Oh94fqS75APHF/4JBuU/riqWsF8p9HZpVmFJ1z283KyDQ72sgwnA4g5z8IhTyvqA
y4opjKO+2PXsjvayzPOKPDxHuDHy7lFRILG+l6VMUpk3anzmK9a3WBUxxwisTVVX
nxKgFqT2ariOcko1FIo3I0MqzzXkrzvUMnQTAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUFGhJzTZgAbOaCugp01PQT+MbvtMwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD
IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz
MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvRkdoSnpUWmdBYk9h
Q3VncDAxUFFULU1idnRNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEArTflDANBgkqhkiG9w0BAQsFAAOCAQEAVqbUUQPGnRwB8eR6GwHfdvkzGGqO
mTOeJuvYCqhOB4mOdsKyh5JiuphuuI9VEoQ42t/1ZnrqeNBTEiCd7IoI8HHxBukg
Y3ORGHtgHkd6Go19qwgfKZs8v3TuUUdEGTXBkWO5zb2rpBv2trBMNfmXs7zajTnr
l2YJPcnSGF3+gY3nwOqt9NfVsqLCEdu5cGTas/pWl2C69SyhqMYnjxsmuQkAlmvU
62LyfH5G0F8MssZ1CogW+/4uLPdVIbNSIAe3ow+U15LGkOkD7PPx3VZoYmhwML55
VM3yC8wZpc17KRdXBwr41yXhOe2H6ydhsv2SqCdWSihbid8d4UGKKDQ1DA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:32:19 2025 by rpki-client