Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/mw1ID4-TpEAq9EZjTq5gEK2IR9A.roa
File: mw1ID4-TpEAq9EZjTq5gEK2IR9A.roa (raw, json)
Hash identifier: aV+34RnAAB0boqrbvJv7VvfZHZVoX+q+SvBp49y3Wt0=
Subject key identifier: 9B:0D:48:0F:8F:93:A4:40:2A:F4:46:63:4E:AE:60:10:AD:88:47:D0
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 1574
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/mw1ID4-TpEAq9EZjTq5gEK2IR9A.roa
Signing time: Fri 17 Jan 2025 01:27:46 +0000
ROA not before: Fri 17 Jan 2025 01:27:46 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 136897
IP address blocks: 180.223.232.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5492 (0x1574)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Jan 17 01:27:46 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=9B0D480F8F93A4402AF446634EAE6010AD8847D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0a:40:8f:49:1a:47:02:75:92:d3:c2:c4:91:
3e:67:04:c2:6e:7a:aa:b6:ad:86:4b:a7:6a:06:8e:
a5:c2:70:40:96:01:2e:36:50:e7:91:05:69:d3:9e:
c6:b5:82:4c:7a:9a:46:8e:b3:fc:a8:19:0f:c4:48:
f2:80:39:1c:06:26:36:69:59:bb:d9:b0:3a:94:e4:
26:60:38:94:12:d0:7c:9e:e7:47:41:28:d9:b5:76:
62:83:8f:32:00:74:75:4e:be:c8:5c:24:27:75:75:
0c:1c:b3:da:76:26:e1:75:c5:b5:50:87:7a:a9:47:
f1:e7:e6:17:dc:6c:e2:ba:88:34:a0:44:21:1b:0f:
03:8a:37:64:17:53:26:be:5d:de:b6:63:2b:3a:08:
f3:5e:44:41:89:f6:0d:3e:84:3f:e6:f3:7b:25:17:
9d:b6:57:57:d2:65:ea:df:af:0e:fd:13:f6:d8:5e:
71:01:87:74:7d:38:03:df:05:71:9b:9a:39:ad:40:
8b:65:09:b4:a9:cd:fe:af:07:a3:2a:1c:c9:ff:61:
2c:b4:fd:9f:90:68:61:3e:5d:5c:c5:78:33:83:51:
f0:6b:ac:60:44:22:a6:ad:c3:c8:ef:0e:db:c0:a0:
d6:63:4a:54:1f:bd:78:86:d8:75:3b:cb:19:02:07:
64:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0D:48:0F:8F:93:A4:40:2A:F4:46:63:4E:AE:60:10:AD:88:47:D0
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/mw1ID4-TpEAq9EZjTq5gEK2IR9A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.232.0/21
Signature Algorithm: sha256WithRSAEncryption
7b:a8:55:0a:ff:5f:cb:f8:80:a2:50:f4:2b:b6:1a:af:93:d1:
66:c0:6c:c3:5b:34:69:25:d6:07:0d:ea:28:ba:d2:a1:3b:f7:
cc:e9:76:20:88:c9:05:70:71:a8:9d:f5:bb:c0:30:e6:b8:1c:
d9:f6:f0:0c:d0:2f:f6:cd:9b:e7:f6:e6:4f:b8:95:a6:6d:09:
cc:37:ba:20:11:54:ce:51:17:ad:12:7c:c0:eb:5b:72:cc:4d:
8b:eb:15:d9:d3:f3:11:03:e8:63:e9:2c:c2:51:97:0b:0f:3b:
d7:18:ed:63:a4:3e:56:5f:4b:6a:f5:0b:8c:9c:ec:09:25:e2:
9d:b8:4a:90:5b:12:5f:2c:23:a0:f7:52:8e:06:8a:c7:4d:b0:
5f:56:2e:9b:00:bd:21:e5:17:61:1b:1e:b4:fa:20:74:a9:80:
6c:36:20:57:3f:cc:7d:34:9f:be:de:c4:c2:54:81:27:04:a8:
69:5f:c3:c9:6f:02:2b:cb:4e:8e:0d:d6:32:34:6f:67:00:e6:
52:d2:02:8b:7d:6e:b8:8e:50:c2:1f:88:a7:ce:f1:dd:84:4b:
1c:e9:89:9d:d2:11:3f:50:1c:45:4f:22:c5:40:a2:fe:06:4e:
fb:79:df:56:3d:ef:d6:2e:ef:86:77:9c:e9:98:e4:0a:fb:d7:
45:8c:26:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:28 2025 by rpki-client