Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/h9HYBLHw2Iz-mcIcRe4F0nrxMDE.roa
File: h9HYBLHw2Iz-mcIcRe4F0nrxMDE.roa (raw, json)
Hash identifier: jKKnfpDg2gWk0ffQebEdxt7gOJb996COQxc8DTHIN5g=
Subject key identifier: 87:D1:D8:04:B1:F0:D8:8C:FE:99:C2:1C:45:EE:05:D2:7A:F1:30:31
Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Certificate serial: 0337
Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/h9HYBLHw2Iz-mcIcRe4F0nrxMDE.roa
Signing time: Thu 12 Jan 2023 01:55:16 +0000
ROA not before: Thu 12 Jan 2023 01:55:16 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 4812
IP address blocks: 103.79.228.0/24 maxlen: 24
103.79.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 823 (0x337)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Validity
Not Before: Jan 12 01:55:16 2023 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=87D1D804B1F0D88CFE99C21C45EE05D27AF13031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:38:40:39:f1:f4:5c:7d:9e:1b:c4:ed:86:bf:
f6:a2:48:e7:f7:76:b8:84:8a:7a:83:3d:49:21:fe:
d6:9a:ae:4d:e5:5a:b5:c8:81:db:93:7d:30:68:85:
85:6b:39:e9:20:b6:b6:62:46:bc:be:4b:e3:45:42:
a6:31:23:23:96:ed:10:5d:6e:92:51:e7:9f:aa:91:
b3:b4:a6:6d:9f:0d:8d:ec:9d:2e:b3:6e:7a:e3:b0:
88:46:7c:42:77:b6:55:b3:d1:94:de:72:eb:32:9c:
f2:8c:e8:ec:df:77:d0:42:b5:ae:de:f0:77:41:59:
44:f9:1e:da:f0:18:6b:21:16:48:1a:c7:6a:a8:a4:
56:df:20:c2:f3:52:cd:c3:91:92:15:3f:65:4b:7c:
c6:62:92:cf:f2:8c:5f:21:56:a0:ff:52:4f:71:c2:
17:b8:11:d3:71:6c:fb:c3:b3:18:4f:5a:ba:bc:8e:
87:e8:5e:31:c1:75:ef:93:67:e4:8a:5b:aa:9f:3c:
44:f5:e9:04:fc:05:e0:5a:01:7b:5d:65:0e:14:d0:
48:3d:26:05:31:e0:8d:86:7d:60:a3:94:63:64:f0:
d0:08:f0:09:ad:cd:2b:54:8d:b2:8e:ba:e2:45:5d:
6c:d4:00:90:f2:20:44:64:de:34:a0:f0:e1:0e:07:
8c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D1:D8:04:B1:F0:D8:8C:FE:99:C2:1C:45:EE:05:D2:7A:F1:30:31
X509v3 Authority Key Identifier:
keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/h9HYBLHw2Iz-mcIcRe4F0nrxMDE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.228.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:cc:00:4d:ad:99:b5:67:a3:fd:53:7f:bc:a9:9f:44:09:e1:
de:de:d6:a3:1b:49:5f:14:16:9d:9c:79:7b:7b:08:44:42:ea:
b3:e9:bb:dc:11:92:fc:34:12:0a:45:50:2a:6b:f4:39:06:59:
17:40:25:7f:7f:eb:60:65:ad:5e:0a:06:a5:c4:81:6c:74:94:
96:bb:9f:5b:34:f6:13:fe:c4:f6:92:27:56:81:ed:98:1a:67:
7e:4d:06:20:1c:62:06:7c:4c:af:db:06:ca:11:af:ed:0a:68:
18:66:83:4e:a9:f0:99:9c:b7:99:26:fc:b5:5d:fe:ef:c0:de:
3e:87:53:62:11:11:7c:04:6b:8c:89:9a:78:c4:2f:f5:07:c2:
d8:6d:b6:51:9e:6e:07:86:f0:66:66:11:87:f1:cf:6a:01:b3:
a6:a1:60:53:53:e3:85:80:4a:51:23:ef:8c:c4:3e:8c:bb:2d:
0a:0e:3b:7c:e3:df:6f:fe:45:81:4f:55:0b:41:a9:af:a7:bb:
78:b6:10:27:0d:42:fd:81:5b:1a:b7:31:27:7c:49:27:f7:9e:
77:e8:06:8c:49:1d:75:84:39:44:0d:2e:79:a0:34:5d:21:6e:
6b:09:33:2b:61:fa:c8:5a:f1:d7:ec:f6:65:9c:98:b0:16:7b:
29:d2:27:f8
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICAzcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjQw
OTg3RjQwQTYwMzBDREZBMzNERUQxRUVFN0NGNERDN0MzMDA5NDAeFw0yMzAxMTIw
MTU1MTZaFw0yMzA4MjgwNDE1MzRaMDMxMTAvBgNVBAMTKDg3RDFEODA0QjFGMEQ4
OENGRTk5QzIxQzQ1RUUwNUQyN0FGMTMwMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqOEA58fRcfZ4bxO2Gv/aiSOf3driEinqDPUkh/taark3lWrXI
gduTfTBohYVrOekgtrZiRry+S+NFQqYxIyOW7RBdbpJR55+qkbO0pm2fDY3snS6z
bnrjsIhGfEJ3tlWz0ZTecusynPKM6Ozfd9BCta7e8HdBWUT5HtrwGGshFkgax2qo
pFbfIMLzUs3DkZIVP2VLfMZiks/yjF8hVqD/Uk9xwhe4EdNxbPvDsxhPWrq8jofo
XjHBde+TZ+SKW6qfPET16QT8BeBaAXtdZQ4U0Eg9JgUx4I2GfWCjlGNk8NAI8Amt
zStUjbKOuuJFXWzUAJDyIERk3jSg8OEOB4yFAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUh9HYBLHw2Iz+mcIcRe4F0nrxMDEwHwYDVR0jBBgwFoAUJAmH9ApgMM36M97R
7ufPTcfDAJQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE2
OC9KQW1IOUFwZ01NMzZNOTdSN3VmUFRjZkRBSlEuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0pBbUg5QXBnTU0zNk05N1I3dWZQVGNmREFKUS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNjgvaDlIWUJMSHcySXot
bWNJY1JlNEYwbnJ4TURFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAWdP5DANBgkqhkiG9w0BAQsFAAOCAQEACswATa2ZtWej/VN/vKmfRAnh3t7W
oxtJXxQWnZx5e3sIRELqs+m73BGS/DQSCkVQKmv0OQZZF0Alf3/rYGWtXgoGpcSB
bHSUlrufWzT2E/7E9pInVoHtmBpnfk0GIBxiBnxMr9sGyhGv7QpoGGaDTqnwmZy3
mSb8tV3+78DePodTYhERfARrjImaeMQv9QfC2G22UZ5uB4bwZmYRh/HPagGzpqFg
U1PjhYBKUSPvjMQ+jLstCg47fOPfb/5FgU9VC0Gpr6e7eLYQJw1C/YFbGrcxJ3xJ
J/eed+gGjEkddYQ5RA0ueaA0XSFuawkzK2H6yFrx1+z2ZZyYsBZ7KdIn+A==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:32:16 2025 by rpki-client