Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/q-rvnbL1WKSM_nVnVRknygSMSiQ.roa
File: q-rvnbL1WKSM_nVnVRknygSMSiQ.roa (raw, json)
Hash identifier: UWEXP5Sn4Z/wm1B6yMeJW0wEMyr2vbKNqioK2UZumYI=
Subject key identifier: AB:EA:EF:9D:B2:F5:58:A4:8C:FE:75:67:55:19:27:CA:04:8C:4A:24
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 10DF
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/q-rvnbL1WKSM_nVnVRknygSMSiQ.roa
Signing time: Sun 09 Mar 2025 16:19:24 +0000
ROA not before: Sun 09 Mar 2025 16:19:24 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 62387
IP address blocks: 101.232.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4319 (0x10df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Mar 9 16:19:24 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=ABEAEF9DB2F558A48CFE7567551927CA048C4A24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:56:cf:6e:85:1e:60:e2:34:9a:01:63:33:2b:
dc:ff:2e:15:ee:75:3d:35:e3:ec:9d:db:1e:32:a4:
5f:89:d1:c0:cd:72:57:6c:5d:eb:b7:62:fa:f5:c4:
35:da:a3:a9:74:ed:1c:0b:62:dd:20:db:d7:e8:0b:
77:04:13:17:2d:25:b6:77:b1:a3:e8:77:de:d4:f5:
1b:3b:1b:ad:d1:4c:2e:b7:c6:88:17:0c:70:71:24:
07:32:da:5b:11:c8:f8:80:56:aa:00:5c:47:4c:0d:
84:cc:ac:a5:4f:66:14:aa:79:be:30:4f:fb:d5:56:
eb:10:34:ab:be:cf:f0:09:f8:44:6e:86:ab:e2:fb:
2d:b5:2b:10:ca:c6:88:fa:ac:dc:8d:ef:04:6e:88:
68:8b:d0:6f:8e:74:92:31:6e:3f:3a:c2:83:05:b6:
88:5f:d4:42:aa:94:81:e4:a4:1d:49:b9:b0:74:f6:
b2:89:49:ed:93:11:16:77:29:5b:30:01:b7:5d:3d:
9a:e7:08:b9:28:e8:4e:dd:07:ff:ba:73:f9:dc:5d:
71:d2:38:d1:35:a0:ba:9c:39:4a:f5:2b:a2:b4:16:
e1:fc:aa:2b:96:e0:e1:8a:b8:20:34:4a:98:bc:5c:
aa:84:6f:10:43:ad:0c:c7:28:5f:64:10:b7:d4:39:
ea:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:EA:EF:9D:B2:F5:58:A4:8C:FE:75:67:55:19:27:CA:04:8C:4A:24
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/q-rvnbL1WKSM_nVnVRknygSMSiQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.232.24.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:a6:59:4b:90:a9:f6:3b:23:4a:cd:a0:51:a8:0d:02:b8:00:
af:5b:85:f1:a9:39:5e:a5:88:3c:43:eb:72:77:39:05:92:4b:
a6:6e:9f:9b:9c:f6:04:e9:48:5a:d5:c7:4c:17:d7:98:14:bf:
b6:2a:34:13:46:48:af:e3:b3:be:c8:72:3a:7b:35:02:69:27:
e2:29:38:ce:4f:8b:c1:46:fb:fc:fe:4b:d6:ce:44:7e:73:9d:
da:16:69:98:be:25:88:2d:32:7d:42:d9:a2:75:3a:ab:55:ba:
62:39:03:27:0c:25:dd:25:6b:29:1f:0f:a9:6b:f2:e3:b0:ac:
cf:54:da:56:46:00:f1:65:98:82:e2:2e:3d:86:e1:f0:54:bf:
9c:d6:94:ff:d2:49:bd:8f:97:c8:94:73:3d:3e:fe:31:48:f2:
57:15:23:da:ab:ba:54:d0:4d:ef:77:d4:00:ff:07:f9:83:24:
ef:13:19:62:07:bc:e6:42:ed:ed:7a:cf:83:fb:a8:06:43:8f:
04:91:70:f8:83:f2:20:b5:09:bb:cb:a5:9a:8d:88:0d:10:c3:
aa:fa:c7:52:63:c5:da:3e:78:78:40:78:78:3b:f4:ce:f3:f1:
8d:1c:71:8a:b0:4d:6c:b2:e0:55:c5:7c:f3:20:c0:b7:6b:fb:
46:c7:62:26
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICEN8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1
QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yNTAzMDkx
NjE5MjRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEFCRUFFRjlEQjJGNTU4
QTQ4Q0ZFNzU2NzU1MTkyN0NBMDQ4QzRBMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtVs9uhR5g4jSaAWMzK9z/LhXudT014+yd2x4ypF+J0cDNclds
Xeu3Yvr1xDXao6l07RwLYt0g29foC3cEExctJbZ3saPod97U9Rs7G63RTC63xogX
DHBxJAcy2lsRyPiAVqoAXEdMDYTMrKVPZhSqeb4wT/vVVusQNKu+z/AJ+ERuhqvi
+y21KxDKxoj6rNyN7wRuiGiL0G+OdJIxbj86woMFtohf1EKqlIHkpB1JubB09rKJ
Se2TERZ3KVswAbddPZrnCLko6E7dB/+6c/ncXXHSONE1oLqcOUr1K6K0FuH8qiuW
4OGKuCA0Spi8XKqEbxBDrQzHKF9kELfUOeoJAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUq+rvnbL1WKSM/nVnVRknygSMSiQwHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l
qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz
L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzL3EtcnZuYkwxV0tTTV9u
Vm5WUmtueWdTTVNpUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAJl6BgwDQYJKoZIhvcNAQELBQADggEBAIymWUuQqfY7I0rNoFGoDQK4AK9bhfGp
OV6liDxD63J3OQWSS6Zun5uc9gTpSFrVx0wX15gUv7YqNBNGSK/js77Icjp7NQJp
J+IpOM5Pi8FG+/z+S9bORH5zndoWaZi+JYgtMn1C2aJ1OqtVumI5AycMJd0laykf
D6lr8uOwrM9U2lZGAPFlmILiLj2G4fBUv5zWlP/SSb2Pl8iUcz0+/jFI8lcVI9qr
ulTQTe931AD/B/mDJO8TGWIHvOZC7e16z4P7qAZDjwSRcPiD8iC1CbvLpZqNiA0Q
w6r6x1Jjxdo+eHhAeHg79M7z8Y0ccYqwTWyy4FXFfPMgwLdr+0bHYiY=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:19:51 2025 by rpki-client