Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/MclEpkJQND4_VAZMQ9HNsS1zu9A.roa
File: MclEpkJQND4_VAZMQ9HNsS1zu9A.roa (raw, json)
Hash identifier: v6UT6QNl0IcE2DDuia3B9Af+131wYJ1s2Tw0chVLu9I=
Subject key identifier: 31:C9:44:A6:42:50:34:3E:3F:54:06:4C:43:D1:CD:B1:2D:73:BB:D0
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 1567
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/MclEpkJQND4_VAZMQ9HNsS1zu9A.roa
Signing time: Fri 17 Jan 2025 01:27:41 +0000
ROA not before: Fri 17 Jan 2025 01:27:41 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 7018
IP address blocks: 180.223.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5479 (0x1567)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Jan 17 01:27:41 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=31C944A64250343E3F54064C43D1CDB12D73BBD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:44:14:8f:e8:5a:1b:21:f4:43:3c:54:39:50:
75:c4:75:71:21:0a:ac:dc:53:f9:9d:d8:d6:68:3f:
11:b4:a2:58:43:30:4a:49:8c:f8:80:6e:46:9c:fa:
b4:39:53:87:af:c5:f3:58:e3:e5:a6:a4:a3:78:cd:
ac:98:f1:9e:bf:6c:b6:24:f5:bb:13:7f:22:02:88:
1f:95:3f:b0:32:01:1e:27:7a:43:32:32:19:0d:25:
3c:7c:55:0f:50:f6:81:aa:f8:62:71:d6:5b:48:41:
63:79:bb:26:61:99:bc:50:42:ce:c4:6d:6b:71:a2:
f3:7c:c0:dc:00:80:07:6e:ae:95:ee:31:c4:cf:1f:
80:18:29:11:5c:4f:2e:5e:ef:d5:e6:d3:7e:bb:2e:
a6:b7:a2:98:6a:f4:d2:9c:89:02:70:7d:88:d7:e1:
e8:72:93:91:f6:5e:86:33:b2:ef:08:8b:63:38:37:
58:f9:08:64:b9:a5:5b:b3:2f:6f:d6:b7:6b:0f:8f:
55:d3:f8:3c:4d:c2:54:19:d2:c2:f8:40:ef:49:f7:
f9:77:f6:6c:a0:1a:fd:cd:48:97:7d:a7:a5:dd:bf:
2d:3c:93:e0:c1:2e:3d:65:10:c7:b0:69:b6:8d:b4:
39:42:a7:54:8e:c9:a0:c8:04:05:4d:d7:8d:cc:b3:
ea:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C9:44:A6:42:50:34:3E:3F:54:06:4C:43:D1:CD:B1:2D:73:BB:D0
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/MclEpkJQND4_VAZMQ9HNsS1zu9A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.100.0/22
Signature Algorithm: sha256WithRSAEncryption
38:1d:5c:4b:5d:58:ba:1d:16:58:f6:97:c0:1a:bd:0a:43:78:
68:d6:9f:1a:4b:f5:68:b9:46:63:2a:32:28:15:de:ae:bb:49:
42:82:a8:99:e0:ab:99:6b:e7:70:5b:f9:78:71:97:8f:19:28:
92:ad:37:a2:c5:b8:d1:2d:82:20:8e:1a:c8:4c:62:61:16:36:
7c:0a:ba:25:2a:b1:23:60:fd:30:43:32:57:bb:77:f7:45:d4:
8a:3d:06:27:5b:d3:25:30:ec:83:0b:c8:01:5b:de:e9:6b:2e:
85:9d:c3:be:11:31:f8:c2:32:22:6a:8e:53:3a:d9:2b:ac:05:
54:bb:9f:cf:5c:d5:0a:ed:da:38:71:33:44:55:3d:09:21:05:
28:a2:54:bf:26:b3:88:00:9f:f8:f8:e5:5e:e1:e5:58:8c:ff:
1e:93:e5:54:69:fa:ee:c3:58:8b:54:d3:d9:4a:de:aa:ab:13:
bd:32:f9:2c:d5:58:0f:7d:12:39:49:82:8c:14:92:ee:69:5b:
59:6e:77:c2:06:27:a5:9c:4f:33:08:aa:b4:d0:1d:47:1d:66:
95:2a:62:fc:f0:2c:b2:21:cb:64:58:01:36:0e:7a:62:8d:18:
6f:3c:33:17:d1:10:82:5a:46:d0:f2:6f:c6:ac:84:41:25:7a:
ad:1e:3a:c1
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICFWcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw
QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTAxMTcw
MTI3NDFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDMxQzk0NEE2NDI1MDM0
M0UzRjU0MDY0QzQzRDFDREIxMkQ3M0JCRDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3RBSP6FobIfRDPFQ5UHXEdXEhCqzcU/md2NZoPxG0olhDMEpJ
jPiAbkac+rQ5U4evxfNY4+WmpKN4zayY8Z6/bLYk9bsTfyICiB+VP7AyAR4nekMy
MhkNJTx8VQ9Q9oGq+GJx1ltIQWN5uyZhmbxQQs7EbWtxovN8wNwAgAdurpXuMcTP
H4AYKRFcTy5e79Xm0367Lqa3ophq9NKciQJwfYjX4ehyk5H2XoYzsu8Ii2M4N1j5
CGS5pVuzL2/Wt2sPj1XT+DxNwlQZ0sL4QO9J9/l39mygGv3NSJd9p6Xdvy08k+DB
Lj1lEMewabaNtDlCp1SOyaDIBAVN143Ms+qHAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUMclEpkJQND4/VAZMQ9HNsS1zu9AwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD
IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz
MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvTWNsRXBrSlFORDRf
VkFaTVE5SE5zUzF6dTlBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEArTfZDANBgkqhkiG9w0BAQsFAAOCAQEAOB1cS11Yuh0WWPaXwBq9CkN4aNaf
Gkv1aLlGYyoyKBXerrtJQoKomeCrmWvncFv5eHGXjxkokq03osW40S2CII4ayExi
YRY2fAq6JSqxI2D9MEMyV7t390XUij0GJ1vTJTDsgwvIAVve6WsuhZ3DvhEx+MIy
ImqOUzrZK6wFVLufz1zVCu3aOHEzRFU9CSEFKKJUvyaziACf+PjlXuHlWIz/HpPl
VGn67sNYi1TT2UreqqsTvTL5LNVYD30SOUmCjBSS7mlbWW53wgYnpZxPMwiqtNAd
Rx1mlSpi/PAssiHLZFgBNg56Yo0YbzwzF9EQglpG0PJvxqyEQSV6rR46wQ==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:21:55 2025 by rpki-client