Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/_2jpYc8o-12vDu0Y3xFr00T3HcQ.roa
File: _2jpYc8o-12vDu0Y3xFr00T3HcQ.roa (raw, json)
Hash identifier: wt2l6kNZMyL9dX1DuVEZ4ctW5NaOgC82DkLYWLi3PIc=
Subject key identifier: FF:68:E9:61:CF:28:FB:5D:AF:0E:ED:18:DF:11:6B:D3:44:F7:1D:C4
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 163A
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/_2jpYc8o-12vDu0Y3xFr00T3HcQ.roa
Signing time: Tue 18 Feb 2025 00:53:22 +0000
ROA not before: Tue 18 Feb 2025 00:53:22 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 398704
IP address blocks: 180.223.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5690 (0x163a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Feb 18 00:53:22 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=FF68E961CF28FB5DAF0EED18DF116BD344F71DC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4e:f2:f8:0e:5e:92:d9:c8:32:8b:23:f8:f7:
f2:77:84:b3:15:71:d0:91:9d:f8:b6:f3:af:0d:6d:
86:14:42:c7:4a:8c:56:a5:59:23:3b:e1:dd:f2:ef:
8f:b7:ef:4f:f3:69:ab:d1:10:50:49:1f:60:41:ac:
ee:66:b5:a2:a0:63:d2:ff:06:93:87:07:1d:a0:3e:
a1:bb:39:06:4d:1a:70:6b:f2:2f:8f:d7:43:5b:4f:
91:a5:cc:c4:16:50:c4:eb:97:19:8e:73:44:b0:82:
0f:5d:7a:b7:a4:ea:12:85:0a:39:7c:82:a6:1f:e9:
73:44:1e:a2:c9:9b:1f:51:8a:56:5a:7a:f8:d2:a9:
1b:83:d6:cb:b9:43:f8:1a:b9:1c:7a:6e:c9:be:95:
78:0d:fc:73:04:4b:0c:2f:f8:fc:bb:bd:1b:5b:60:
d1:e9:6f:9a:cc:00:ea:45:12:86:51:27:5c:aa:fa:
5b:97:53:dd:9e:46:6a:c2:75:66:83:a1:be:a3:0d:
43:e8:f1:89:fc:cd:c1:06:0f:bb:2b:f3:49:4a:30:
eb:97:81:69:b9:dd:41:9f:ef:a6:32:da:5f:2d:1a:
5d:30:55:f9:ab:ed:d0:1d:bb:c5:b4:13:bc:be:64:
5f:e6:32:84:24:4e:95:e0:34:5b:9c:1f:5b:37:7f:
97:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:68:E9:61:CF:28:FB:5D:AF:0E:ED:18:DF:11:6B:D3:44:F7:1D:C4
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/_2jpYc8o-12vDu0Y3xFr00T3HcQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.124.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:de:6f:ad:3c:7a:cc:98:18:72:84:8c:21:16:9c:55:26:66:
fd:03:4a:9a:38:7b:af:82:95:79:b3:16:0a:e0:8d:bd:37:0f:
b5:6a:f5:d0:9c:0b:6d:b0:c3:59:e4:a7:a5:f7:90:04:ae:a6:
d8:5c:ce:f7:be:cc:b9:6b:29:1a:19:0b:db:04:3a:8c:b8:19:
d2:bd:37:57:12:e5:95:a7:da:78:56:5a:a0:74:ef:c3:9b:87:
e0:f7:ea:1a:2a:49:0c:a9:26:8c:6c:ae:53:e2:d3:f7:59:18:
81:8f:57:d1:67:96:ca:66:f0:7d:41:ed:3c:61:0f:01:9b:45:
0c:6a:49:b1:98:47:02:c1:97:45:e0:4c:7f:65:8a:2d:be:7f:
05:9d:ca:0a:37:c2:47:ac:cd:5e:ef:01:5f:a3:be:d7:2d:f7:
45:f7:5b:a8:c4:b0:cf:70:fc:e6:34:47:81:47:0e:49:34:f8:
8c:80:2d:5d:37:1e:dc:07:33:5d:cf:41:03:ce:f0:1b:3c:5b:
fc:03:c6:42:6f:60:2e:62:d9:1d:b0:9b:c3:38:fd:e0:94:32:
f3:1a:6e:15:66:d0:b0:95:11:aa:5f:8a:10:c3:da:e2:5e:d3:
0e:4d:9c:bd:22:a7:1c:5d:3e:24:3b:b0:aa:c5:89:f3:62:14:
4d:7b:80:fb
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICFjowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw
QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTAyMTgw
MDUzMjJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEZGNjhFOTYxQ0YyOEZC
NURBRjBFRUQxOERGMTE2QkQzNDRGNzFEQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDETvL4Dl6S2cgyiyP49/J3hLMVcdCRnfi2868NbYYUQsdKjFal
WSM74d3y74+370/zaavREFBJH2BBrO5mtaKgY9L/BpOHBx2gPqG7OQZNGnBr8i+P
10NbT5GlzMQWUMTrlxmOc0Swgg9derek6hKFCjl8gqYf6XNEHqLJmx9RilZaevjS
qRuD1su5Q/gauRx6bsm+lXgN/HMESwwv+Py7vRtbYNHpb5rMAOpFEoZRJ1yq+luX
U92eRmrCdWaDob6jDUPo8Yn8zcEGD7sr80lKMOuXgWm53UGf76Yy2l8tGl0wVfmr
7dAdu8W0E7y+ZF/mMoQkTpXgNFucH1s3f5dbAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQU/2jpYc8o+12vDu0Y3xFr00T3HcQwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD
IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz
MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvXzJqcFljOG8tMTJ2
RHUwWTN4RnIwMFQzSGNRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEArTffDANBgkqhkiG9w0BAQsFAAOCAQEAuN5vrTx6zJgYcoSMIRacVSZm/QNK
mjh7r4KVebMWCuCNvTcPtWr10JwLbbDDWeSnpfeQBK6m2FzO977MuWspGhkL2wQ6
jLgZ0r03VxLllafaeFZaoHTvw5uH4PfqGipJDKkmjGyuU+LT91kYgY9X0WeWymbw
fUHtPGEPAZtFDGpJsZhHAsGXReBMf2WKLb5/BZ3KCjfCR6zNXu8BX6O+1y33Rfdb
qMSwz3D85jRHgUcOSTT4jIAtXTce3AczXc9BA87wGzxb/APGQm9gLmLZHbCbwzj9
4JQy8xpuFWbQsJURql+KEMPa4l7TDk2cvSKnHF0+JDuwqsWJ82IUTXuA+w==
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:40:41 2025 by rpki-client