Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/P5JGvGJ5JGo9xHbh5PVjhcXYcHE.roa
File: P5JGvGJ5JGo9xHbh5PVjhcXYcHE.roa (raw, json)
Hash identifier: MgXvpmbZi0f0A4/L85jVaJgcfPoqxSadGXWmlCoplhM=
Subject key identifier: 3F:92:46:BC:62:79:24:6A:3D:C4:76:E1:E4:F5:63:85:C5:D8:70:71
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 10D9
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/P5JGvGJ5JGo9xHbh5PVjhcXYcHE.roa
Signing time: Sun 09 Mar 2025 16:18:41 +0000
ROA not before: Sun 09 Mar 2025 16:18:41 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 62387
IP address blocks: 101.232.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4313 (0x10d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Mar 9 16:18:41 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=3F9246BC6279246A3DC476E1E4F56385C5D87071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:eb:f1:f9:da:0c:a9:7c:67:66:cd:ac:66:a4:
9f:23:cc:cc:05:e8:08:fa:4c:0b:0e:16:31:e5:40:
7e:4f:4d:49:ec:35:54:37:9f:67:e0:b4:d9:c7:43:
fc:5a:7d:76:4b:81:dc:54:58:9f:dc:48:e6:38:5d:
07:5d:2d:3d:d1:d1:ac:47:04:9c:4d:f5:fc:df:d2:
c6:1f:5c:65:b1:71:67:f4:a1:b6:9d:e5:02:e8:83:
83:70:5a:75:71:e4:05:42:56:fd:c0:b7:cc:42:96:
26:fe:ef:4b:3d:ed:d4:82:31:22:10:3d:42:a7:2b:
76:68:b4:7b:ad:9a:c0:ff:ed:db:68:43:62:87:c9:
e4:38:d1:f4:f9:40:c9:18:1d:bc:a1:3c:e9:64:bf:
33:27:ae:51:8c:d7:1f:30:8f:7a:bf:79:02:5a:3c:
c2:8b:22:b2:27:03:4e:a9:e4:c6:45:cd:bf:bd:1d:
3e:14:d3:ca:67:cc:63:5f:2e:74:f0:f6:41:81:9a:
a0:13:c4:66:e7:da:66:6a:44:7b:d8:44:d5:96:87:
ac:77:e4:6a:af:ac:94:72:65:11:cc:b9:14:ab:f1:
17:b6:d2:95:c9:e3:1c:76:26:ce:20:52:ff:f6:be:
ab:bb:52:58:57:72:a7:bc:be:d1:71:ba:ee:43:9c:
c9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:92:46:BC:62:79:24:6A:3D:C4:76:E1:E4:F5:63:85:C5:D8:70:71
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/P5JGvGJ5JGo9xHbh5PVjhcXYcHE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.232.12.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:25:27:da:51:35:4f:ba:45:59:c8:a0:47:c3:30:a7:cb:4f:
fe:47:5d:4f:84:9e:d9:99:03:3d:13:69:06:c1:4e:96:3d:90:
99:cb:e9:c7:d5:a8:b0:98:4f:ef:e5:dd:d4:de:7a:75:6e:d4:
e9:fc:b4:9b:f2:1c:24:db:da:f7:4b:b6:0b:65:6d:c0:ab:00:
51:42:3f:46:78:21:2e:48:2b:4c:d7:ac:df:7b:61:e2:7a:d6:
61:ef:77:15:ef:57:fb:2e:10:49:09:0a:93:4c:db:30:61:61:
ed:98:b5:eb:ff:24:be:c4:46:3c:98:4a:c9:85:e7:12:07:6b:
76:3d:f6:15:06:2d:2e:c4:38:db:c7:0b:01:86:ae:89:f4:cc:
10:02:ac:ef:18:0a:b7:f8:31:6d:2d:8c:f9:00:5a:d2:0a:f4:
f3:0e:1a:56:9c:4b:e2:e6:e7:00:da:20:74:8e:5a:10:2b:59:
c2:07:2e:b7:f3:85:11:d2:77:36:95:cf:0d:90:5e:d6:2c:f2:
81:db:50:ed:54:da:c0:60:4e:d0:55:80:a3:65:de:f2:22:8c:
2e:e0:a4:0b:e8:ea:cc:a0:dd:1c:05:80:33:27:18:22:34:36:
32:83:3b:c9:5d:4f:ff:4d:01:94:2b:d0:c2:84:58:cb:53:27:
cc:c2:b0:1a
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICENkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1
QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yNTAzMDkx
NjE4NDFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDNGOTI0NkJDNjI3OTI0
NkEzREM0NzZFMUU0RjU2Mzg1QzVEODcwNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCn6/H52gypfGdmzaxmpJ8jzMwF6Aj6TAsOFjHlQH5PTUnsNVQ3
n2fgtNnHQ/xafXZLgdxUWJ/cSOY4XQddLT3R0axHBJxN9fzf0sYfXGWxcWf0obad
5QLog4NwWnVx5AVCVv3At8xClib+70s97dSCMSIQPUKnK3ZotHutmsD/7dtoQ2KH
yeQ40fT5QMkYHbyhPOlkvzMnrlGM1x8wj3q/eQJaPMKLIrInA06p5MZFzb+9HT4U
08pnzGNfLnTw9kGBmqATxGbn2mZqRHvYRNWWh6x35GqvrJRyZRHMuRSr8Re20pXJ
4xx2Js4gUv/2vqu7UlhXcqe8vtFxuu5DnMkHAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUP5JGvGJ5JGo9xHbh5PVjhcXYcHEwHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l
qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz
L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzL1A1Skd2R0o1SkdvOXhI
Ymg1UFZqaGNYWWNIRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAJl6AwwDQYJKoZIhvcNAQELBQADggEBAG8lJ9pRNU+6RVnIoEfDMKfLT/5HXU+E
ntmZAz0TaQbBTpY9kJnL6cfVqLCYT+/l3dTeenVu1On8tJvyHCTb2vdLtgtlbcCr
AFFCP0Z4IS5IK0zXrN97YeJ61mHvdxXvV/suEEkJCpNM2zBhYe2Ytev/JL7ERjyY
SsmF5xIHa3Y99hUGLS7EONvHCwGGron0zBACrO8YCrf4MW0tjPkAWtIK9PMOGlac
S+Lm5wDaIHSOWhArWcIHLrfzhRHSdzaVzw2QXtYs8oHbUO1U2sBgTtBVgKNl3vIi
jC7gpAvo6syg3RwFgDMnGCI0NjKDO8ldT/9NAZQr0MKEWMtTJ8zCsBo=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:33:53 2025 by rpki-client