Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/357/sGUeGRtjIo1Y0qLw-Q5q7iXIoTU.roa
File: sGUeGRtjIo1Y0qLw-Q5q7iXIoTU.roa (raw, json)
Hash identifier: ngxKseVKfi8DqOacXb8bPALDo4+iahlodNaUjcXtWss=
Subject key identifier: B0:65:1E:19:1B:63:22:8D:58:D2:A2:F0:F9:0E:6A:EE:25:C8:A1:35
Certificate issuer: /CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA
Certificate serial: 14B5
Authority key identifier: B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/sGUeGRtjIo1Y0qLw-Q5q7iXIoTU.roa
Signing time: Fri 17 Jan 2025 01:27:23 +0000
ROA not before: Fri 17 Jan 2025 01:27:23 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 37963
IP address blocks: 112.126.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.mft
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 14 Apr 2025 06:07:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5301 (0x14b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA
Validity
Not Before: Jan 17 01:27:23 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=B0651E191B63228D58D2A2F0F90E6AEE25C8A135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2c:52:87:b1:96:11:f5:0b:1b:e2:3e:f2:d9:
38:43:a8:cc:50:a8:6a:cd:fd:f0:2e:1d:91:3e:6a:
ef:cf:f0:7f:51:b3:bc:d7:2c:77:af:40:44:a0:35:
12:3a:71:86:41:04:aa:65:b2:be:f1:84:ab:68:c5:
d6:72:05:5d:2f:f8:20:07:2f:4f:f2:73:f0:c0:1c:
c3:bc:51:cf:87:16:d8:f9:2c:57:fb:f8:02:a8:fd:
3f:22:1a:83:5b:e5:f2:cb:bc:72:41:a1:10:16:86:
0e:09:f9:cb:e4:29:66:33:d8:4f:f0:aa:df:2f:b1:
6e:c7:3d:0e:cb:9c:6c:05:bc:e9:1f:4d:d3:3e:ee:
ce:82:e2:e7:d3:5c:d2:30:dd:23:7f:98:1b:cf:3f:
27:8f:82:34:29:38:2f:60:5d:7f:8f:2b:b7:d2:ef:
da:5c:21:4c:d5:9b:2e:ff:40:6c:6d:8c:94:27:04:
d2:0d:6f:75:8e:0d:dd:8f:de:bf:ba:a6:03:67:82:
1d:28:48:59:5e:eb:c7:32:39:87:f0:4d:dc:b7:ef:
84:a4:d8:34:5b:12:0a:db:98:a3:cb:49:cf:3e:54:
99:20:01:c9:b6:72:c9:2b:2e:4a:71:a5:1d:e5:db:
27:4a:f3:6a:82:56:f7:0b:f6:3b:47:56:e4:a1:92:
87:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:65:1E:19:1B:63:22:8D:58:D2:A2:F0:F9:0E:6A:EE:25:C8:A1:35
X509v3 Authority Key Identifier:
keyid:B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/sGUeGRtjIo1Y0qLw-Q5q7iXIoTU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.126.0.0/15
Signature Algorithm: sha256WithRSAEncryption
79:db:75:e8:27:68:05:8f:9c:47:3d:d6:87:17:e8:2f:b1:d4:
d9:96:45:db:48:62:cd:d7:cd:88:87:53:f4:72:08:4a:e6:a3:
69:3c:d8:c5:c8:9c:74:ae:b2:0e:3b:f5:6f:dd:15:20:94:66:
08:aa:c8:d6:20:cd:fb:b2:34:b6:f2:9b:f4:54:ae:ba:fb:da:
29:b5:88:83:5c:e0:c8:b2:47:f2:16:e8:cf:41:44:6a:78:77:
fd:87:9e:39:d8:a5:eb:31:27:98:90:af:b3:80:13:71:f7:a8:
a2:be:de:bc:23:53:d9:1a:72:85:1c:df:01:69:e4:73:0e:87:
c6:da:23:7c:c8:f9:27:b6:bb:d7:da:ba:02:69:3d:9f:47:ef:
85:e9:2b:bf:d2:3f:a8:e2:73:bf:31:eb:2f:6b:3e:12:77:c1:
5a:9f:50:ac:41:44:a6:8f:87:5e:50:2a:f9:6b:45:a3:3e:ae:
b1:9a:09:59:cb:00:23:3a:7a:88:b3:03:12:2e:52:54:0b:2a:
cd:99:8f:99:71:9e:ab:57:91:5c:0a:0a:5b:8b:43:63:8a:42:
d7:42:3a:3a:95:97:0f:61:c1:fc:0b:44:9a:a4:7b:58:38:de:
3f:ab:7a:47:df:7f:fe:ee:22:2a:09:55:52:31:7c:cf:b6:4d:
00:99:dd:21
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICFLUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjNC
QTZBRUYzQjhGQTJFNUQ5QjVFNDM0MzhFMDAyMEQ0MjZBMUVDQTAeFw0yNTAxMTcw
MTI3MjNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEIwNjUxRTE5MUI2MzIy
OEQ1OEQyQTJGMEY5MEU2QUVFMjVDOEExMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDdLFKHsZYR9Qsb4j7y2ThDqMxQqGrN/fAuHZE+au/P8H9Rs7zX
LHevQESgNRI6cYZBBKplsr7xhKtoxdZyBV0v+CAHL0/yc/DAHMO8Uc+HFtj5LFf7
+AKo/T8iGoNb5fLLvHJBoRAWhg4J+cvkKWYz2E/wqt8vsW7HPQ7LnGwFvOkfTdM+
7s6C4ufTXNIw3SN/mBvPPyePgjQpOC9gXX+PK7fS79pcIUzVmy7/QGxtjJQnBNIN
b3WODd2P3r+6pgNngh0oSFle68cyOYfwTdy374Sk2DRbEgrbmKPLSc8+VJkgAcm2
cskrLkpxpR3l2ydK82qCVvcL9jtHVuShkodFAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUsGUeGRtjIo1Y0qLw+Q5q7iXIoTUwHwYDVR0jBBgwFoAUs7pq7zuPouXZteQ0
OOACDUJqHsowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzU3
L3M3cHE3enVQb3VYWnRlUTBPT0FDRFVKcUhzby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvczdwcTd6dVBvdVhadGVRME9PQUNEVUpxSHNvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzU3L3NHVWVHUnRqSW8xWTBx
THctUTVxN2lYSW9UVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwFwfjANBgkqhkiG9w0BAQsFAAOCAQEAedt16CdoBY+cRz3WhxfoL7HU2ZZF20hi
zdfNiIdT9HIISuajaTzYxcicdK6yDjv1b90VIJRmCKrI1iDN+7I0tvKb9FSuuvva
KbWIg1zgyLJH8hboz0FEanh3/YeeOdil6zEnmJCvs4ATcfeoor7evCNT2RpyhRzf
AWnkcw6HxtojfMj5J7a719q6Amk9n0fvhekrv9I/qOJzvzHrL2s+EnfBWp9QrEFE
po+HXlAq+WtFoz6usZoJWcsAIzp6iLMDEi5SVAsqzZmPmXGeq1eRXAoKW4tDY4pC
10I6OpWXD2HB/AtEmqR7WDjeP6t6R99//u4iKglVUjF8z7ZNAJndIQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 04:46:19 2025 by rpki-client