Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/sI3dS5o0qeprE1cAl9VPomjPW6E.roa
File: sI3dS5o0qeprE1cAl9VPomjPW6E.roa (raw, json)
Hash identifier: 7uCPrpeBCE5KZID6M8NGfHiIOGwu+yiXZbzDv6bGYLQ=
Subject key identifier: B0:8D:DD:4B:9A:34:A9:EA:6B:13:57:00:97:D5:4F:A2:68:CF:5B:A1
Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA
Certificate serial: 0819
Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/sI3dS5o0qeprE1cAl9VPomjPW6E.roa
Signing time: Fri 23 May 2025 07:17:25 +0000
ROA not before: Fri 23 May 2025 07:17:25 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 9808
IP address blocks: 223.160.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2073 (0x819)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA
Validity
Not Before: May 23 07:17:25 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=B08DDD4B9A34A9EA6B13570097D54FA268CF5BA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cf:a3:1e:ec:36:45:43:61:f8:58:6e:1e:68:
51:40:02:f3:af:f6:e7:f2:f8:a2:a3:5c:1b:3c:5e:
a4:7b:2c:97:1b:19:52:46:e4:07:5e:dc:7c:aa:5f:
27:08:dd:7b:91:55:5e:a6:41:0a:c6:dd:1d:e9:99:
f3:b4:96:c8:7c:8b:b2:a5:47:91:20:e9:fd:d8:fc:
f4:09:94:b9:c6:ef:10:fd:64:95:41:a8:9f:09:83:
77:72:44:f9:2b:33:db:42:16:37:3d:e9:c4:e1:d8:
40:7b:52:b4:02:51:aa:ee:c7:e1:4f:16:3b:21:1d:
98:0e:c1:d0:0b:6c:58:b5:a5:98:7d:90:87:b7:74:
a6:90:0a:54:d4:7c:2b:84:b3:cf:9c:8b:fe:d3:d5:
0b:32:73:29:c0:43:b0:47:0e:9c:41:c2:93:78:4a:
4c:35:9a:e3:4b:fc:5f:cd:f1:9f:c2:79:7a:fa:57:
c5:8d:7b:2c:92:04:a9:03:e9:f9:13:91:75:a9:96:
2c:4f:01:5f:a0:f8:01:5f:cb:20:63:eb:8c:ae:c6:
d4:db:16:d1:06:0c:35:90:73:6d:f4:20:21:5f:50:
1e:df:69:1d:48:aa:85:72:3e:45:dc:8b:6d:a9:dd:
69:16:8a:31:57:a4:b8:6f:45:9e:43:a5:ca:82:fc:
c6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8D:DD:4B:9A:34:A9:EA:6B:13:57:00:97:D5:4F:A2:68:CF:5B:A1
X509v3 Authority Key Identifier:
keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/sI3dS5o0qeprE1cAl9VPomjPW6E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.160.232.0/22
Signature Algorithm: sha256WithRSAEncryption
43:29:bd:68:60:da:60:6a:36:2f:e3:bc:05:ea:75:aa:04:c2:
55:3d:f9:50:06:63:93:1d:59:eb:e2:3b:6e:95:f9:d3:b1:d9:
03:3a:5f:ab:bc:42:79:79:d4:31:04:9e:5e:ed:98:f7:6d:55:
66:fa:fd:25:7b:2f:a5:a0:c8:91:6c:d5:03:de:f0:f5:92:db:
02:7a:2f:ce:77:eb:3c:08:03:21:36:2f:1a:d8:4c:f4:dc:54:
4e:b9:7f:d0:41:97:aa:8a:1b:ec:e3:fb:df:f0:32:eb:11:f3:
0f:0a:0c:75:95:2e:1e:bb:ae:e7:f8:00:8d:af:92:a1:62:1b:
db:38:2a:71:78:38:39:48:5a:05:b6:c7:a5:e6:7f:fd:cb:cc:
df:13:1b:88:32:de:7f:1f:c0:4d:8e:95:a2:e7:e2:1d:dd:65:
c6:3f:66:0e:f3:d0:4f:0b:1f:c7:60:f6:c6:0a:c7:78:cd:21:
44:93:60:43:ad:44:5c:f0:28:db:f5:ce:26:96:13:08:79:04:
65:08:a1:1d:2c:56:e4:3b:88:9a:0a:3b:3c:eb:91:ed:6e:c0:
09:4c:46:2e:5d:51:02:ce:0a:a8:e0:33:f8:2d:46:5a:c5:6e:
f4:d2:84:2a:2b:e8:07:92:d0:f9:37:e3:43:e6:38:12:38:9a:
68:69:e8:73
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICCBkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw
MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTA1MjMw
NzE3MjVaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEIwOERERDRCOUEzNEE5
RUE2QjEzNTcwMDk3RDU0RkEyNjhDRjVCQTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0z6Me7DZFQ2H4WG4eaFFAAvOv9ufy+KKjXBs8XqR7LJcbGVJG
5Ade3HyqXycI3XuRVV6mQQrG3R3pmfO0lsh8i7KlR5Eg6f3Y/PQJlLnG7xD9ZJVB
qJ8Jg3dyRPkrM9tCFjc96cTh2EB7UrQCUarux+FPFjshHZgOwdALbFi1pZh9kIe3
dKaQClTUfCuEs8+ci/7T1QsycynAQ7BHDpxBwpN4Skw1muNL/F/N8Z/CeXr6V8WN
eyySBKkD6fkTkXWplixPAV+g+AFfyyBj64yuxtTbFtEGDDWQc230ICFfUB7faR1I
qoVyPkXci22p3WkWijFXpLhvRZ5DpcqC/MYlAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUsI3dS5o0qeprE1cAl9VPomjPW6EwHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U
IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv
TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy9zSTNkUzVvMHFlcHJFMWNB
bDlWUG9talBXNkUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
36DoMA0GCSqGSIb3DQEBCwUAA4IBAQBDKb1oYNpgajYv47wF6nWqBMJVPflQBmOT
HVnr4jtulfnTsdkDOl+rvEJ5edQxBJ5e7Zj3bVVm+v0ley+loMiRbNUD3vD1ktsC
ei/Od+s8CAMhNi8a2Ez03FROuX/QQZeqihvs4/vf8DLrEfMPCgx1lS4eu67n+ACN
r5KhYhvbOCpxeDg5SFoFtsel5n/9y8zfExuIMt5/H8BNjpWi5+Id3WXGP2YO89BP
Cx/HYPbGCsd4zSFEk2BDrURc8Cjb9c4mlhMIeQRlCKEdLFbkO4iaCjs865HtbsAJ
TEYuXVECzgqo4DP4LUZaxW700oQqK+gHktD5N+ND5jgSOJpoaehz
-----END CERTIFICATE-----
Generated at Thu Jun 5 20:03:28 2025 by rpki-client