Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/IsyO2SNWROsZW5FFlkwafdk3Akc.roa
File: IsyO2SNWROsZW5FFlkwafdk3Akc.roa (raw, json)
Hash identifier: y7xKK0gFSCVpYzy8yC3+M4iHDg9LgYQEhlxWsTHFFxY=
Subject key identifier: 22:CC:8E:D9:23:56:44:EB:19:5B:91:45:96:4C:1A:7D:D9:37:02:47
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0FB2
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/IsyO2SNWROsZW5FFlkwafdk3Akc.roa
Signing time: Fri 17 Jan 2025 01:27:53 +0000
ROA not before: Fri 17 Jan 2025 01:27:53 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 62387
IP address blocks: 119.59.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4018 (0xfb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Jan 17 01:27:53 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=22CC8ED9235644EB195B9145964C1A7DD9370247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8c:48:56:14:d6:29:23:c9:72:be:46:63:c0:
8f:57:6b:7c:40:5b:91:67:67:ba:9f:f1:ba:56:99:
67:fe:88:9d:be:0a:a7:a1:d2:7b:fd:1f:47:26:06:
07:61:1c:18:27:0e:43:3b:5e:11:02:39:f8:85:f6:
4c:6f:e9:0f:38:7a:6a:58:89:ea:94:19:a0:1f:56:
96:fd:44:2d:b9:74:9a:93:1e:5c:b1:d3:9f:18:b2:
d4:f8:b0:e6:87:ff:51:d8:dc:ca:f0:00:16:72:e2:
92:b4:a8:67:27:aa:23:bc:38:f6:5a:de:b2:62:62:
a8:52:0f:27:73:11:2f:95:2b:ce:93:f5:7d:e6:3b:
52:d1:bf:45:07:44:da:71:96:98:0f:5b:d7:46:2c:
57:a6:f7:26:c0:89:42:0e:68:c3:83:57:a3:53:da:
ee:1a:14:05:12:09:37:17:60:f3:9c:60:40:bc:75:
08:1f:bf:35:b1:90:a5:ac:03:f6:a3:21:71:81:ed:
13:c1:bc:65:71:bb:3f:e1:ea:f0:77:01:e0:5f:7e:
f4:e0:ab:88:26:49:32:9e:86:9e:60:47:1d:05:66:
12:76:a3:02:96:ee:47:4a:2e:17:52:3d:0f:2c:e6:
8f:9e:5c:66:6f:95:d6:47:42:31:9f:db:ad:43:a4:
b0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CC:8E:D9:23:56:44:EB:19:5B:91:45:96:4C:1A:7D:D9:37:02:47
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/IsyO2SNWROsZW5FFlkwafdk3Akc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.59.248.0/22
Signature Algorithm: sha256WithRSAEncryption
19:a6:3a:5c:51:0d:37:db:5a:2a:8e:7c:23:9c:cb:cb:07:98:
b4:f2:62:d3:64:bc:16:5d:59:db:11:11:0b:68:12:2d:4c:c0:
6d:71:73:8a:b8:08:8b:e4:a0:e3:58:65:f9:c3:78:17:1f:0b:
7a:da:aa:00:d3:a5:01:df:89:40:89:25:a8:83:76:90:7f:1d:
6e:b3:7b:d9:35:e7:4e:44:0b:af:62:ed:5a:64:59:60:f0:03:
81:d2:be:70:42:42:9b:26:15:1a:2d:0f:5a:9f:de:4c:29:d3:
a8:31:b7:a1:28:3a:ad:d2:4b:2a:c4:d7:ee:28:4b:2c:20:df:
40:6e:ba:9b:da:17:c8:a2:a4:bf:e8:a8:54:f2:46:4d:57:81:
11:95:28:d5:f9:7d:41:b3:e2:36:50:92:9e:34:5a:90:f6:e8:
22:a3:e4:35:b4:a4:c2:bd:c1:21:25:78:92:fc:80:11:01:ca:
3a:5c:3a:88:46:3f:17:9a:46:2b:45:1f:fd:9d:1f:fe:b5:8c:
e2:15:84:9a:e6:26:d1:19:a3:67:a1:bc:7c:eb:a1:e2:c4:f1:
2b:7d:ea:ea:7c:dc:71:71:91:25:da:07:a9:74:97:5e:42:24:
e4:23:5d:c8:28:0f:49:00:65:15:cd:fd:f2:f4:07:7a:ea:00:
54:a7:cb:45
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICD7IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1
QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yNTAxMTcw
MTI3NTNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDIyQ0M4RUQ5MjM1NjQ0
RUIxOTVCOTE0NTk2NEMxQTdERDkzNzAyNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5jEhWFNYpI8lyvkZjwI9Xa3xAW5FnZ7qf8bpWmWf+iJ2+Cqeh
0nv9H0cmBgdhHBgnDkM7XhECOfiF9kxv6Q84empYieqUGaAfVpb9RC25dJqTHlyx
058YstT4sOaH/1HY3MrwABZy4pK0qGcnqiO8OPZa3rJiYqhSDydzES+VK86T9X3m
O1LRv0UHRNpxlpgPW9dGLFem9ybAiUIOaMODV6NT2u4aFAUSCTcXYPOcYEC8dQgf
vzWxkKWsA/ajIXGB7RPBvGVxuz/h6vB3AeBffvTgq4gmSTKehp5gRx0FZhJ2owKW
7kdKLhdSPQ8s5o+eXGZvldZHQjGf261DpLB3AgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUIsyO2SNWROsZW5FFlkwafdk3AkcwHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l
qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz
L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzL0lzeU8yU05XUk9zWlc1
RkZsa3dhZmRrM0FrYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAJ3O/gwDQYJKoZIhvcNAQELBQADggEBABmmOlxRDTfbWiqOfCOcy8sHmLTyYtNk
vBZdWdsREQtoEi1MwG1xc4q4CIvkoONYZfnDeBcfC3raqgDTpQHfiUCJJaiDdpB/
HW6ze9k1505EC69i7VpkWWDwA4HSvnBCQpsmFRotD1qf3kwp06gxt6EoOq3SSyrE
1+4oSywg30BuupvaF8iipL/oqFTyRk1XgRGVKNX5fUGz4jZQkp40WpD26CKj5DW0
pMK9wSEleJL8gBEByjpcOohGPxeaRitFH/2dH/61jOIVhJrmJtEZo2ehvHzroeLE
8St96up83HFxkSXaB6l0l15CJOQjXcgoD0kAZRXN/fL0B3rqAFSny0U=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:14:40 2025 by rpki-client