Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/357/AlMpVeBf3NjWTD4PVb1Oim8XUjc.roa
File: AlMpVeBf3NjWTD4PVb1Oim8XUjc.roa (raw, json)
Hash identifier: 39iF2Jn7lVXDSjTvbNz0G7NY4cKMCf8i2iC6rFwWwgQ=
Subject key identifier: 02:53:29:55:E0:5F:DC:D8:D6:4C:3E:0F:55:BD:4E:8A:6F:17:52:37
Certificate issuer: /CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA
Certificate serial: 14B6
Authority key identifier: B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/AlMpVeBf3NjWTD4PVb1Oim8XUjc.roa
Signing time: Fri 17 Jan 2025 01:27:23 +0000
ROA not before: Fri 17 Jan 2025 01:27:23 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 37963
IP address blocks: 112.124.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5302 (0x14b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA
Validity
Not Before: Jan 17 01:27:23 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=02532955E05FDCD8D64C3E0F55BD4E8A6F175237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fd:12:17:e4:27:d6:db:be:24:63:1d:8c:b7:
0f:11:b6:65:89:cf:99:29:fc:37:d8:d5:e4:69:e4:
a5:c2:a7:67:e2:b5:c2:e7:40:44:17:16:6e:f2:93:
a7:67:88:3d:a5:66:00:24:b3:6b:a8:fa:2e:c6:26:
b2:fa:a7:0b:81:61:4d:8f:23:9e:98:bc:a9:06:c6:
a4:3e:b9:87:73:40:b0:4a:7c:82:73:c4:6b:7e:df:
8b:27:02:42:03:1e:76:db:d5:02:e1:9f:47:a6:93:
b4:5e:94:39:96:b3:b4:7a:ad:79:29:3c:04:93:c3:
6e:63:da:fe:9a:3f:31:e4:c8:ac:a0:cb:89:42:08:
83:85:bf:81:bb:6f:0f:a0:41:91:d3:cc:37:3c:96:
e6:71:42:84:db:8c:86:73:69:cf:9e:fa:8c:d1:21:
f8:fd:91:46:9b:a7:cd:05:a9:75:23:84:37:5d:9b:
61:99:a1:57:59:4e:f7:95:d4:58:a5:63:87:d3:dc:
1b:fc:5c:87:b8:20:d0:c9:5b:86:9d:19:85:67:d0:
f8:85:21:89:b9:1f:d7:08:2e:69:d4:c2:2e:0a:d4:
b3:ce:38:a0:71:06:91:62:60:05:d7:79:16:34:fe:
63:b7:8e:88:e0:9e:5e:e1:16:1e:b6:91:76:b0:5c:
46:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:53:29:55:E0:5F:DC:D8:D6:4C:3E:0F:55:BD:4E:8A:6F:17:52:37
X509v3 Authority Key Identifier:
keyid:B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/AlMpVeBf3NjWTD4PVb1Oim8XUjc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.124.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5e:43:e3:01:e6:81:15:1e:e5:a3:84:d1:7c:8f:48:b9:8e:27:
46:63:cb:8b:65:88:ae:d4:7f:53:0f:5a:7f:d5:da:6c:cf:83:
3c:44:6a:42:d8:eb:2c:00:91:77:a1:59:c8:c6:89:36:97:4b:
19:14:6f:8c:bd:2f:85:be:1e:75:23:62:1a:6b:b3:61:1f:54:
e6:e9:f8:8c:62:28:e9:32:23:45:58:2a:db:36:d3:6d:b3:a7:
ea:79:5a:5e:a9:97:d6:62:8e:58:df:1f:0d:02:97:48:2d:3f:
5f:8a:1a:82:3f:c3:41:38:45:99:a5:9c:42:aa:bd:b0:83:a8:
c2:24:b6:52:a8:23:63:7d:8e:a8:89:55:18:82:db:fe:f2:97:
b5:0b:fa:25:84:19:1a:24:3b:08:2a:df:8b:6e:a3:d4:b5:93:
80:a9:72:b2:2a:55:69:4e:70:41:f0:5a:d9:ef:3a:a5:41:50:
b8:d3:cb:9b:f1:e3:24:9e:1e:27:e8:1b:6b:87:62:a7:51:e3:
fa:04:d1:77:2a:43:94:c8:c5:b2:52:28:97:cf:7f:19:a9:20:
62:46:47:be:2e:72:2a:60:48:63:f5:b9:0b:52:eb:7a:2c:b4:
71:b7:df:e1:39:7d:ad:6a:dc:a9:7e:e3:6a:0f:d7:fe:19:97:
3a:e1:6a:73
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICFLYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjNC
QTZBRUYzQjhGQTJFNUQ5QjVFNDM0MzhFMDAyMEQ0MjZBMUVDQTAeFw0yNTAxMTcw
MTI3MjNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDAyNTMyOTU1RTA1RkRD
RDhENjRDM0UwRjU1QkQ0RThBNkYxNzUyMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDB/RIX5CfW274kYx2Mtw8RtmWJz5kp/DfY1eRp5KXCp2fitcLn
QEQXFm7yk6dniD2lZgAks2uo+i7GJrL6pwuBYU2PI56YvKkGxqQ+uYdzQLBKfIJz
xGt+34snAkIDHnbb1QLhn0emk7RelDmWs7R6rXkpPASTw25j2v6aPzHkyKygy4lC
CIOFv4G7bw+gQZHTzDc8luZxQoTbjIZzac+e+ozRIfj9kUabp80FqXUjhDddm2GZ
oVdZTveV1FilY4fT3Bv8XIe4INDJW4adGYVn0PiFIYm5H9cILmnUwi4K1LPOOKBx
BpFiYAXXeRY0/mO3jojgnl7hFh62kXawXEYLAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUAlMpVeBf3NjWTD4PVb1Oim8XUjcwHwYDVR0jBBgwFoAUs7pq7zuPouXZteQ0
OOACDUJqHsowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzU3
L3M3cHE3enVQb3VYWnRlUTBPT0FDRFVKcUhzby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvczdwcTd6dVBvdVhadGVRME9PQUNEVUpxSHNvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzU3L0FsTXBWZUJmM05qV1RE
NFBWYjFPaW04WFVqYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwfDANBgkqhkiG9w0BAQsFAAOCAQEAXkPjAeaBFR7lo4TRfI9IuY4nRmPLi2WI
rtR/Uw9af9XabM+DPERqQtjrLACRd6FZyMaJNpdLGRRvjL0vhb4edSNiGmuzYR9U
5un4jGIo6TIjRVgq2zbTbbOn6nlaXqmX1mKOWN8fDQKXSC0/X4oagj/DQThFmaWc
Qqq9sIOowiS2UqgjY32OqIlVGILb/vKXtQv6JYQZGiQ7CCrfi26j1LWTgKlysipV
aU5wQfBa2e86pUFQuNPLm/HjJJ4eJ+gba4dip1Hj+gTRdypDlMjFslIol89/Gakg
YkZHvi5yKmBIY/W5C1Lreiy0cbff4Tl9rWrcqX7jag/X/hmXOuFqcw==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:17:24 2025 by rpki-client