Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3246/i10qSHnh6m8aVzQOZKXcvexHxls.roa
File: i10qSHnh6m8aVzQOZKXcvexHxls.roa (raw, json)
Hash identifier: H/N+6B6Hpc3orlFtq/bmwtX3N0sXzEiHz+xcVYx8joE=
Subject key identifier: 8B:5D:2A:48:79:E1:EA:6F:1A:57:34:0E:64:A5:DC:BD:EC:47:C6:5B
Certificate issuer: /CN=2CB67186E296C89E1F34779ED66A077F7E050CCB
Certificate serial: 07F2
Authority key identifier: 2C:B6:71:86:E2:96:C8:9E:1F:34:77:9E:D6:6A:07:7F:7E:05:0C:CB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LLZxhuKWyJ4fNHee1moHf34FDMs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3246/i10qSHnh6m8aVzQOZKXcvexHxls.roa
Signing time: Fri 17 Jan 2025 01:24:16 +0000
ROA not before: Fri 17 Jan 2025 01:24:16 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 211392
IP address blocks: 210.87.72.0/24 maxlen: 24
210.87.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2034 (0x7f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CB67186E296C89E1F34779ED66A077F7E050CCB
Validity
Not Before: Jan 17 01:24:16 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=8B5D2A4879E1EA6F1A57340E64A5DCBDEC47C65B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:66:e2:41:df:1b:41:3d:47:96:9c:e3:bd:2d:
c8:4e:63:3c:58:ab:34:64:b0:00:c6:d4:00:46:ad:
c1:c8:4e:f8:37:d9:53:25:dc:76:e9:fd:06:43:83:
e3:48:a0:3f:67:09:2f:fb:87:6f:3d:a0:c2:33:60:
65:8a:e0:02:6a:89:35:92:41:99:d4:89:ab:8c:f4:
f2:72:f7:3f:8f:b4:a1:08:fe:9e:81:fc:03:a9:2d:
ec:18:44:a6:95:15:e2:f3:d3:ae:81:3c:d7:a2:59:
6d:6b:f9:58:6a:49:47:36:ea:40:35:39:2a:fc:32:
c7:a1:0e:8b:cd:ee:63:71:70:c9:2c:14:4b:2a:ec:
2f:da:35:05:f7:47:51:eb:4a:df:a3:37:3f:61:e9:
2e:af:6a:ca:7a:5b:8f:97:45:b7:93:9c:26:bb:b9:
d0:bc:e7:91:f6:22:7d:34:c3:3c:ad:32:31:40:72:
44:9b:03:bb:d6:db:5f:59:cb:b7:3b:fe:53:a9:11:
4c:55:88:43:f8:86:84:b1:0b:20:c2:b5:92:8b:f0:
a8:ac:85:80:a3:ae:98:66:ec:87:82:d1:c2:cd:8c:
6f:f9:75:46:9c:3a:6a:98:96:97:2c:88:3b:a7:99:
18:ee:dd:b8:5f:d3:58:90:74:cf:e2:38:08:79:1a:
25:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5D:2A:48:79:E1:EA:6F:1A:57:34:0E:64:A5:DC:BD:EC:47:C6:5B
X509v3 Authority Key Identifier:
keyid:2C:B6:71:86:E2:96:C8:9E:1F:34:77:9E:D6:6A:07:7F:7E:05:0C:CB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3246/LLZxhuKWyJ4fNHee1moHf34FDMs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LLZxhuKWyJ4fNHee1moHf34FDMs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3246/i10qSHnh6m8aVzQOZKXcvexHxls.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.87.72.0/23
Signature Algorithm: sha256WithRSAEncryption
36:9a:d8:3b:51:16:79:5a:e5:0f:d3:8c:7a:cf:f6:d4:89:a5:
d2:d0:96:a6:71:11:b4:1f:28:f1:ba:a6:06:24:bb:8d:64:06:
f6:a3:f4:a1:94:97:18:8c:68:34:0a:b1:16:58:78:7c:c0:e4:
dc:86:5e:6e:88:dc:68:1f:dd:9f:66:c7:6f:a1:81:ba:f4:dc:
93:01:63:bc:b8:24:72:f2:d4:28:71:7d:2c:c6:af:29:44:4a:
85:88:0c:68:89:93:71:8c:b1:23:75:cb:f2:e7:aa:6f:ef:59:
a1:da:c8:4e:db:a7:88:62:fb:01:5a:3e:59:d1:54:f9:65:98:
0a:32:03:2a:21:94:24:4a:a1:a4:fe:5c:25:46:46:0d:26:c5:
9d:ea:36:a2:76:6e:a9:c1:ef:55:1c:67:e7:a4:89:7f:f1:b4:
7b:e4:98:3e:fa:9d:56:6e:5b:82:0c:f2:1d:8d:15:12:bc:32:
58:0b:0f:1c:91:8e:af:ff:49:7c:28:6d:b2:04:e5:ea:c2:23:
67:8c:92:c3:ef:35:3d:9a:11:0e:e4:49:dc:4d:cc:03:df:5d:
01:97:f2:c3:6a:10:45:f2:4a:2c:16:c1:a3:d0:2a:ab:93:fa:
6f:9c:bc:47:f4:55:5e:ad:80:25:73:3a:f6:67:bc:7b:6b:00:
29:87:e1:08
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICB/IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkNC
NjcxODZFMjk2Qzg5RTFGMzQ3NzlFRDY2QTA3N0Y3RTA1MENDQjAeFw0yNTAxMTcw
MTI0MTZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDhCNUQyQTQ4NzlFMUVB
NkYxQTU3MzQwRTY0QTVEQ0JERUM0N0M2NUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxZuJB3xtBPUeWnOO9LchOYzxYqzRksADG1ABGrcHITvg32VMl
3Hbp/QZDg+NIoD9nCS/7h289oMIzYGWK4AJqiTWSQZnUiauM9PJy9z+PtKEI/p6B
/AOpLewYRKaVFeLz066BPNeiWW1r+VhqSUc26kA1OSr8MsehDovN7mNxcMksFEsq
7C/aNQX3R1HrSt+jNz9h6S6vasp6W4+XRbeTnCa7udC855H2In00wzytMjFAckSb
A7vW219Zy7c7/lOpEUxViEP4hoSxCyDCtZKL8KishYCjrphm7IeC0cLNjG/5dUac
OmqYlpcsiDunmRju3bhf01iQdM/iOAh5GiUdAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUi10qSHnh6m8aVzQOZKXcvexHxlswHwYDVR0jBBgwFoAULLZxhuKWyJ4fNHee
1moHf34FDMswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI0
Ni9MTFp4aHVLV3lKNGZOSGVlMW1vSGYzNEZETXMuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0xMWnhodUtXeUo0Zk5IZWUxbW9IZjM0RkRNcy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyNDYvaTEwcVNIbmg2bThh
VnpRT1pLWGN2ZXhIeGxzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAdJXSDANBgkqhkiG9w0BAQsFAAOCAQEANprYO1EWeVrlD9OMes/21Iml0tCW
pnERtB8o8bqmBiS7jWQG9qP0oZSXGIxoNAqxFlh4fMDk3IZebojcaB/dn2bHb6GB
uvTckwFjvLgkcvLUKHF9LMavKURKhYgMaImTcYyxI3XL8ueqb+9ZodrITtuniGL7
AVo+WdFU+WWYCjIDKiGUJEqhpP5cJUZGDSbFneo2onZuqcHvVRxn56SJf/G0e+SY
PvqdVm5bggzyHY0VErwyWAsPHJGOr/9JfChtsgTl6sIjZ4ySw+81PZoRDuRJ3E3M
A99dAZfyw2oQRfJKLBbBo9Aqq5P6b5y8R/RVXq2AJXM69me8e2sAKYfhCA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:21:48 2025 by rpki-client