Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/Hc6WXz_9dwjpA9F9kfCb-qepjOU.roa
File: Hc6WXz_9dwjpA9F9kfCb-qepjOU.roa (raw, json)
Hash identifier: Alcs/ZQiSLS8WHLJbWFxY+DxYBXAnl6b1/adRe6xYaY=
Subject key identifier: 1D:CE:96:5F:3F:FD:77:08:E9:03:D1:7D:91:F0:9B:FA:A7:A9:8C:E5
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 156B
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/Hc6WXz_9dwjpA9F9kfCb-qepjOU.roa
Signing time: Fri 17 Jan 2025 01:27:43 +0000
ROA not before: Fri 17 Jan 2025 01:27:43 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 398704
IP address blocks: 180.223.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5483 (0x156b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Jan 17 01:27:43 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=1DCE965F3FFD7708E903D17D91F09BFAA7A98CE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4a:42:7d:8c:77:ae:61:f0:86:53:c8:ba:34:
a5:78:9b:80:19:9f:42:99:8c:ce:a2:8a:5c:5a:7f:
f3:74:10:9e:0c:44:81:7c:85:56:c0:87:4a:6b:93:
f1:3b:64:59:5b:d0:d0:88:a1:71:77:8a:7d:72:fc:
c1:6d:b8:bd:ce:76:a4:b5:2e:24:23:b2:99:80:13:
04:4a:91:69:e6:ae:ab:b8:91:ad:df:25:25:0f:54:
24:5e:f1:83:e2:0f:1b:b3:6f:e5:19:5e:e6:1e:3f:
06:fd:19:42:9a:64:8e:a4:94:10:f3:88:e5:c8:a5:
03:41:af:c7:45:21:fe:ab:81:5f:71:6f:e2:5d:d9:
8e:d0:7a:b7:ac:25:70:6f:2a:7e:df:c2:69:c4:e1:
fd:f4:2d:42:3d:6a:9c:4b:31:38:92:51:1f:2b:4e:
26:b0:cb:e7:16:48:d4:78:4f:78:d5:92:1e:ab:57:
09:39:4a:ee:6d:b1:b1:bc:55:73:23:a6:9d:32:87:
b9:13:79:7e:c6:45:64:20:2c:42:0b:8f:02:7e:eb:
5d:a5:67:3d:46:99:27:30:d0:10:cb:7a:53:ce:c4:
f2:c7:e4:41:fc:08:b4:35:ca:a4:72:3b:f3:4b:11:
f5:1d:94:94:8d:b3:6a:37:70:ae:21:c4:07:f4:93:
79:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CE:96:5F:3F:FD:77:08:E9:03:D1:7D:91:F0:9B:FA:A7:A9:8C:E5
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/Hc6WXz_9dwjpA9F9kfCb-qepjOU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.252.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:03:99:ef:24:9c:74:c0:f8:eb:b6:6f:b7:21:8a:67:6d:1c:
90:6f:60:dd:48:99:1b:32:b2:04:e9:61:3c:79:e8:4e:a5:cb:
73:aa:0f:b4:be:5a:c2:1f:09:d7:54:f9:62:e8:e3:8b:90:5d:
0c:60:49:6f:2d:46:31:ff:19:32:6c:05:43:7c:72:e4:07:b8:
6f:a8:8b:6b:e0:b5:4b:ae:64:2f:65:7a:75:00:dd:c5:17:e5:
6f:09:dd:5d:5a:66:9f:21:36:39:fb:3c:43:85:a9:f2:15:e6:
1b:53:ef:a1:47:35:0f:b3:40:6e:62:94:a3:a3:e4:80:9d:c9:
87:11:3b:93:7b:ce:db:4c:a6:74:21:4d:52:e0:af:e7:19:e1:
92:e5:52:2e:56:58:a4:b5:3e:34:6a:6f:24:60:00:21:89:25:
87:a0:50:a8:c0:49:be:95:d3:d8:70:94:8b:55:10:35:00:2d:
04:c2:cc:f0:22:cf:d4:cd:f6:ed:d6:71:8d:df:1a:03:32:3b:
00:6a:b0:9c:1f:8d:d5:d1:72:20:ce:fb:ad:64:db:5a:a9:e1:
ab:4a:4e:7f:54:66:b6:71:76:46:0a:76:9e:a0:e1:9c:69:6d:
44:cd:aa:8e:6a:e1:cc:01:01:44:74:3a:cc:0a:a0:e2:59:dc:
67:21:1a:47
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICFWswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw
QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTAxMTcw
MTI3NDNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDFEQ0U5NjVGM0ZGRDc3
MDhFOTAzRDE3RDkxRjA5QkZBQTdBOThDRTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3SkJ9jHeuYfCGU8i6NKV4m4AZn0KZjM6iilxaf/N0EJ4MRIF8
hVbAh0prk/E7ZFlb0NCIoXF3in1y/MFtuL3OdqS1LiQjspmAEwRKkWnmrqu4ka3f
JSUPVCRe8YPiDxuzb+UZXuYePwb9GUKaZI6klBDziOXIpQNBr8dFIf6rgV9xb+Jd
2Y7QeresJXBvKn7fwmnE4f30LUI9apxLMTiSUR8rTiawy+cWSNR4T3jVkh6rVwk5
Su5tsbG8VXMjpp0yh7kTeX7GRWQgLEILjwJ+612lZz1GmScw0BDLelPOxPLH5EH8
CLQ1yqRyO/NLEfUdlJSNs2o3cK4hxAf0k3l9AgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUHc6WXz/9dwjpA9F9kfCb+qepjOUwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD
IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz
MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvSGM2V1h6Xzlkd2pw
QTlGOWtmQ2ItcWVwak9VLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEArTf/DANBgkqhkiG9w0BAQsFAAOCAQEAvQOZ7yScdMD467ZvtyGKZ20ckG9g
3UiZGzKyBOlhPHnoTqXLc6oPtL5awh8J11T5Yujji5BdDGBJby1GMf8ZMmwFQ3xy
5Ae4b6iLa+C1S65kL2V6dQDdxRflbwndXVpmnyE2Ofs8Q4Wp8hXmG1PvoUc1D7NA
bmKUo6PkgJ3JhxE7k3vO20ymdCFNUuCv5xnhkuVSLlZYpLU+NGpvJGAAIYklh6BQ
qMBJvpXT2HCUi1UQNQAtBMLM8CLP1M327dZxjd8aAzI7AGqwnB+N1dFyIM77rWTb
Wqnhq0pOf1RmtnF2Rgp2nqDhnGltRM2qjmrhzAEBRHQ6zAqg4lncZyEaRw==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:21:54 2025 by rpki-client