Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/acKcSulJc7oamfk0Z-K-XnCjMZA.roa
File: acKcSulJc7oamfk0Z-K-XnCjMZA.roa (raw, json)
Hash identifier: +Xw164qylm6i0WDTJeBC1q7rudJssef1ncc5mnfu0UE=
Subject key identifier: 69:C2:9C:4A:E9:49:73:BA:1A:99:F9:34:67:E2:BE:5E:70:A3:31:90
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 166D
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/acKcSulJc7oamfk0Z-K-XnCjMZA.roa
Signing time: Thu 27 Feb 2025 05:58:33 +0000
ROA not before: Thu 27 Feb 2025 05:58:33 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 10103
IP address blocks: 180.223.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5741 (0x166d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Feb 27 05:58:33 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=69C29C4AE94973BA1A99F93467E2BE5E70A33190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7f:45:ae:04:87:ac:60:5a:d9:0a:af:48:d9:
1a:98:c3:be:ed:c4:7c:9d:6b:9e:56:27:cd:2d:57:
2c:70:ff:4d:0b:a7:73:ea:84:b4:d4:52:2c:ef:c8:
b9:6b:44:c1:b3:83:08:95:41:88:f2:1f:79:d0:ad:
4b:a7:3c:a6:58:68:35:2c:21:bb:8a:b5:e7:6a:7a:
3a:95:2b:7c:10:87:d0:f9:a7:54:aa:79:89:3e:7e:
f3:ff:64:b6:d0:07:54:b4:94:49:84:e0:b2:25:16:
c3:99:c6:b5:39:1a:4a:d3:65:34:d0:b7:bd:ae:8a:
2e:20:c7:57:dd:b1:8b:06:95:6e:86:db:a6:91:af:
78:88:cd:31:1c:04:0a:8b:f0:c8:d5:97:2f:f5:15:
3a:bc:44:48:01:56:06:ee:dd:84:a6:45:84:be:7e:
9e:a3:09:60:6a:04:bb:f2:e3:64:78:48:8f:16:59:
19:19:c1:87:43:35:a1:89:58:d0:e1:55:1a:26:4d:
76:0c:a0:21:ba:2b:9e:7d:ce:24:c0:f2:93:62:33:
09:37:f7:eb:de:81:8a:ba:26:6f:ea:fa:59:41:31:
c2:e1:15:62:0a:91:9a:18:1b:eb:98:bd:32:a5:98:
7e:0e:7c:25:5d:96:cc:dc:61:f2:04:5b:9e:b7:83:
d5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C2:9C:4A:E9:49:73:BA:1A:99:F9:34:67:E2:BE:5E:70:A3:31:90
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/acKcSulJc7oamfk0Z-K-XnCjMZA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.204.0/22
Signature Algorithm: sha256WithRSAEncryption
67:d3:ee:f9:44:15:26:66:4f:39:4c:de:0b:e7:63:75:a8:e5:
a6:8d:35:f3:29:ea:90:f6:0f:7e:75:70:4a:5f:92:c1:60:be:
2c:2e:4a:5e:74:0d:65:af:7a:a2:22:b7:ef:51:44:5a:cc:17:
17:2d:ac:f2:f3:47:68:81:d3:9d:10:cc:a9:e9:4e:31:73:10:
27:7d:e5:f4:bb:c7:17:f1:c9:52:e9:ac:01:89:e1:1a:cf:46:
87:a8:27:db:87:02:6d:f5:3c:71:d4:21:db:69:3e:5a:6e:c2:
16:28:ed:a2:2a:8f:bb:4c:02:96:eb:ec:ca:1c:18:dc:13:41:
56:4d:68:6a:f3:0a:ad:f6:3f:6d:95:99:08:a0:40:67:9b:96:
cf:7f:aa:ef:32:8b:b5:d7:ef:d9:f7:ab:57:5c:80:69:58:45:
6b:78:62:c1:a1:55:70:1b:9a:8d:06:b5:6d:14:31:ec:de:a4:
84:de:97:6a:cb:04:a0:5f:52:62:84:4b:ce:ae:62:74:f4:de:
93:95:d9:48:e3:86:fa:ac:89:c7:3d:b7:ea:1e:66:7d:1c:2e:
6e:b8:e2:73:37:d3:a2:21:c0:91:ea:80:ef:e6:71:11:97:4d:
00:62:8d:3f:cf:51:77:cd:7f:6f:e6:18:3d:a7:cc:f7:ef:18:
ae:a0:5d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:34:29 2025 by rpki-client