Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/LFwi6M3QGEygPnaQYnyvoWCfunc.roa
File: LFwi6M3QGEygPnaQYnyvoWCfunc.roa (raw, json)
Hash identifier: kRkF4CRdCEvAT9p0oFrMDDQpJkbKO0YRCgAjQ4jUDvA=
Subject key identifier: 2C:5C:22:E8:CD:D0:18:4C:A0:3E:76:90:62:7C:AF:A1:60:9F:BA:77
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 1617
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/LFwi6M3QGEygPnaQYnyvoWCfunc.roa
Signing time: Sun 16 Feb 2025 03:24:10 +0000
ROA not before: Sun 16 Feb 2025 03:24:10 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 2914
IP address blocks: 180.223.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5655 (0x1617)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Feb 16 03:24:10 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=2C5C22E8CDD0184CA03E7690627CAFA1609FBA77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e8:3c:cb:84:0f:ac:ca:cd:c5:ab:1b:e8:3b:
ad:61:da:d4:40:dc:ae:b1:28:83:99:58:9f:f0:1c:
9e:b9:b7:25:08:a4:33:ee:ac:44:63:d2:8b:5a:2c:
9f:be:25:c6:31:a2:2f:c2:47:1d:6c:7a:3a:a8:f3:
67:0e:28:26:1d:7a:1d:3f:8d:24:1a:a5:64:c2:2c:
ba:f8:6b:41:6f:e5:00:d1:20:47:e3:4a:83:fb:4f:
2b:0c:cc:92:9c:c9:41:f4:52:d1:d2:e8:d9:4d:e6:
d5:c7:c3:7f:54:3d:df:d8:2e:0c:7b:28:41:f3:fa:
c9:53:14:da:fd:51:c0:bb:3e:d8:65:2e:7d:c8:7a:
74:87:ff:fe:7d:3f:f2:52:44:b2:33:53:1b:45:a1:
a2:23:90:1b:95:1f:60:47:98:a7:eb:b8:ff:da:00:
82:78:39:d4:47:92:bf:80:58:0e:4e:07:f6:de:ac:
a1:4a:3a:69:2b:f9:7e:fc:1b:00:38:dc:3c:9d:13:
f5:8e:c8:ed:0b:15:6a:22:3a:b3:58:d2:da:70:40:
2e:b7:62:b7:0c:7f:a1:20:c5:e0:bd:ae:b3:88:64:
e2:cf:ee:44:ee:dd:04:9a:a9:8c:ce:09:a1:2c:b5:
64:b4:60:cd:2d:63:2d:53:e9:fa:34:2c:e0:1e:87:
19:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5C:22:E8:CD:D0:18:4C:A0:3E:76:90:62:7C:AF:A1:60:9F:BA:77
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/LFwi6M3QGEygPnaQYnyvoWCfunc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.124.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:3a:cd:58:60:d1:4b:ab:90:ec:c3:cf:46:f9:37:c6:48:f8:
a2:5a:bc:a1:11:61:1a:9d:60:01:41:ea:38:9d:dc:e1:d0:48:
d6:f9:06:0d:63:98:c5:50:2d:97:fd:45:2a:1d:55:1f:d2:3b:
3f:90:65:5d:86:dd:53:c2:ec:93:4f:c4:b5:f9:06:d8:62:d5:
01:0b:84:17:18:8c:f8:16:45:02:9c:04:8a:ac:8b:1e:b2:3f:
5d:eb:a5:7e:6e:7c:fb:d4:43:c5:ae:d0:a4:d9:af:f9:64:55:
6e:8c:ff:21:35:42:52:e8:2e:41:de:49:4e:58:61:a8:e5:72:
78:da:5a:74:8c:97:83:1d:0f:8d:8a:0c:0f:fb:31:9e:8c:4e:
22:c3:91:90:f4:b0:05:98:cf:8e:74:84:67:1b:f7:29:1f:eb:
e2:58:14:ce:d5:55:33:77:3d:55:c7:b1:f5:16:f4:99:ac:8e:
b3:94:83:68:14:59:39:9b:12:a5:5c:ad:a7:bd:b9:29:f3:aa:
ca:b7:f4:08:3f:11:ac:62:63:57:cc:93:cf:5f:92:f8:fb:48:
89:4f:0b:e5:c0:45:bb:09:f1:64:8d:51:f6:54:e9:fe:03:fa:
32:c3:f8:d8:f2:db:9f:72:0f:ba:eb:83:29:15:a2:cd:f2:95:
da:83:37:e7
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICFhcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw
QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTAyMTYw
MzI0MTBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDJDNUMyMkU4Q0REMDE4
NENBMDNFNzY5MDYyN0NBRkExNjA5RkJBNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCx6DzLhA+sys3FqxvoO61h2tRA3K6xKIOZWJ/wHJ65tyUIpDPu
rERj0otaLJ++JcYxoi/CRx1sejqo82cOKCYdeh0/jSQapWTCLLr4a0Fv5QDRIEfj
SoP7TysMzJKcyUH0UtHS6NlN5tXHw39UPd/YLgx7KEHz+slTFNr9UcC7PthlLn3I
enSH//59P/JSRLIzUxtFoaIjkBuVH2BHmKfruP/aAIJ4OdRHkr+AWA5OB/berKFK
Omkr+X78GwA43DydE/WOyO0LFWoiOrNY0tpwQC63YrcMf6EgxeC9rrOIZOLP7kTu
3QSaqYzOCaEstWS0YM0tYy1T6fo0LOAehxkbAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQULFwi6M3QGEygPnaQYnyvoWCfuncwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD
IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz
MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvTEZ3aTZNM1FHRXln
UG5hUVlueXZvV0NmdW5jLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEArTffDANBgkqhkiG9w0BAQsFAAOCAQEApjrNWGDRS6uQ7MPPRvk3xkj4olq8
oRFhGp1gAUHqOJ3c4dBI1vkGDWOYxVAtl/1FKh1VH9I7P5BlXYbdU8Lsk0/EtfkG
2GLVAQuEFxiM+BZFApwEiqyLHrI/Xeulfm58+9RDxa7QpNmv+WRVboz/ITVCUugu
Qd5JTlhhqOVyeNpadIyXgx0PjYoMD/sxnoxOIsORkPSwBZjPjnSEZxv3KR/r4lgU
ztVVM3c9Vcex9Rb0mayOs5SDaBRZOZsSpVytp725KfOqyrf0CD8RrGJjV8yTz1+S
+PtIiU8L5cBFuwnxZI1R9lTp/gP6MsP42PLbn3IPuuuDKRWizfKV2oM35w==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:35:01 2025 by rpki-client