Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/NW4LG0CUZgobd__Xi8PKrj5ZU8M.roa
File: NW4LG0CUZgobd__Xi8PKrj5ZU8M.roa (raw, json)
Hash identifier: KoM1Xpgi/BupTaMedBkRcUP6ZXQwhA5X9N8ZIVjayJM=
Subject key identifier: 35:6E:0B:1B:40:94:66:0A:1B:77:FF:D7:8B:C3:CA:AE:3E:59:53:C3
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 1614
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/NW4LG0CUZgobd__Xi8PKrj5ZU8M.roa
Signing time: Sun 16 Feb 2025 03:24:09 +0000
ROA not before: Sun 16 Feb 2025 03:24:09 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 2914
IP address blocks: 180.223.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5652 (0x1614)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Feb 16 03:24:09 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=356E0B1B4094660A1B77FFD78BC3CAAE3E5953C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:35:f2:9b:04:c3:ed:f3:e4:f9:4d:cc:7e:49:
fa:2e:56:52:78:24:fc:37:e7:5d:88:05:48:8a:9e:
e0:f3:b2:bf:c9:58:47:f6:b1:84:66:52:a8:dc:02:
33:78:ba:2c:58:f9:12:1f:15:ee:5b:fe:07:04:6c:
6b:59:a7:bc:19:67:61:49:cc:c2:28:fe:10:eb:5c:
d9:eb:c3:5c:97:43:bc:05:c4:f6:89:e9:4f:fc:a2:
68:f0:eb:58:3d:70:66:05:5f:08:87:11:52:1c:fa:
ff:e1:fb:14:23:79:9c:33:fe:25:98:ea:70:f5:29:
7a:af:d9:4b:fa:f5:bb:99:77:71:9c:19:97:8d:3b:
6c:78:92:b4:43:a7:89:95:6a:c0:57:32:6f:cb:5e:
fe:ab:1e:79:21:ba:7f:7f:62:f2:84:16:59:84:e4:
aa:10:fe:a4:4e:b5:06:35:09:0b:76:a3:68:a9:26:
98:60:37:da:10:50:79:e6:35:6a:15:95:34:3e:da:
24:fc:73:4d:d5:69:64:4d:20:19:2d:9f:40:c9:d8:
b2:b5:0f:86:97:c9:af:b7:f3:1f:a2:42:4c:68:12:
cb:ff:e8:23:c2:14:fd:aa:ee:94:6d:bb:65:0f:7e:
f2:b1:a9:e9:0f:8d:0f:8f:65:7b:2f:15:6c:6d:f2:
d7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6E:0B:1B:40:94:66:0A:1B:77:FF:D7:8B:C3:CA:AE:3E:59:53:C3
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/NW4LG0CUZgobd__Xi8PKrj5ZU8M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.212.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:49:61:95:99:46:2f:40:4e:75:71:29:15:08:e4:c2:b2:fe:
2a:d7:30:c8:81:4f:d7:c8:67:b2:b6:9d:f3:a6:67:f6:72:dc:
b5:2b:f5:cf:be:85:96:cb:3a:2a:69:71:d1:ce:a0:c6:68:36:
51:59:70:27:1d:6d:3f:6b:4e:0f:2a:c0:bc:af:fb:be:e6:8e:
72:3c:6d:41:37:cb:6c:d4:d4:e9:1b:6a:18:87:25:48:d2:7f:
55:77:70:35:bd:7b:d6:23:80:14:57:4a:7a:4d:e6:9b:8a:3f:
75:d6:7c:63:76:1f:34:99:d0:30:5d:1f:1f:eb:59:af:ef:34:
9d:03:fe:e9:ee:09:05:34:4c:87:11:e1:1f:39:6c:39:22:db:
d0:14:33:ba:90:88:7d:d6:11:7f:f2:3a:65:c7:86:52:c5:8f:
61:df:49:d4:dc:ee:06:69:21:21:f1:36:f8:1f:81:ca:b4:a5:
0a:63:32:65:d7:d3:4f:4c:21:85:77:ce:25:03:d1:88:3e:50:
c4:43:55:2b:0e:18:b6:cd:35:94:49:e4:5b:2d:1f:85:63:99:
77:5b:3f:4d:7b:00:9b:34:04:2e:ff:a4:27:ae:59:85:3d:31:
ec:b2:52:b1:a2:22:a3:93:3f:16:41:38:40:a6:12:b0:05:05:
dd:c0:ea:5b
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICFhQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw
QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTAyMTYw
MzI0MDlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDM1NkUwQjFCNDA5NDY2
MEExQjc3RkZENzhCQzNDQUFFM0U1OTUzQzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD0NfKbBMPt8+T5Tcx+SfouVlJ4JPw3512IBUiKnuDzsr/JWEf2
sYRmUqjcAjN4uixY+RIfFe5b/gcEbGtZp7wZZ2FJzMIo/hDrXNnrw1yXQ7wFxPaJ
6U/8omjw61g9cGYFXwiHEVIc+v/h+xQjeZwz/iWY6nD1KXqv2Uv69buZd3GcGZeN
O2x4krRDp4mVasBXMm/LXv6rHnkhun9/YvKEFlmE5KoQ/qROtQY1CQt2o2ipJphg
N9oQUHnmNWoVlTQ+2iT8c03VaWRNIBktn0DJ2LK1D4aXya+38x+iQkxoEsv/6CPC
FP2q7pRtu2UPfvKxqekPjQ+PZXsvFWxt8tflAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUNW4LG0CUZgobd//Xi8PKrj5ZU8MwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD
IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz
MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvTlc0TEcwQ1VaZ29i
ZF9fWGk4UEtyajVaVThNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEArTf1DANBgkqhkiG9w0BAQsFAAOCAQEAD0lhlZlGL0BOdXEpFQjkwrL+Ktcw
yIFP18hnsrad86Zn9nLctSv1z76Flss6Kmlx0c6gxmg2UVlwJx1tP2tODyrAvK/7
vuaOcjxtQTfLbNTU6RtqGIclSNJ/VXdwNb171iOAFFdKek3mm4o/ddZ8Y3YfNJnQ
MF0fH+tZr+80nQP+6e4JBTRMhxHhHzlsOSLb0BQzupCIfdYRf/I6ZceGUsWPYd9J
1NzuBmkhIfE2+B+ByrSlCmMyZdfTT0whhXfOJQPRiD5QxENVKw4Yts01lEnkWy0f
hWOZd1s/TXsAmzQELv+kJ65ZhT0x7LJSsaIio5M/FkE4QKYSsAUF3cDqWw==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:21:41 2025 by rpki-client