Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/rplvGQ0dZ3M6Iyf5R6Nrvc-Aan4.roa
File: rplvGQ0dZ3M6Iyf5R6Nrvc-Aan4.roa (raw, json)
Hash identifier: XNDBtpbYKgmdIIuGSrRsBQFHLiT/ixqQ8XdBFUs4cLw=
Subject key identifier: AE:99:6F:19:0D:1D:67:73:3A:23:27:F9:47:A3:6B:BD:CF:80:6A:7E
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 01AC
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/rplvGQ0dZ3M6Iyf5R6Nrvc-Aan4.roa
Signing time: Fri 05 May 2023 02:43:47 +0000
ROA not before: Fri 05 May 2023 02:43:47 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 35913
IP address blocks: 123.98.64.0/22 maxlen: 24
123.98.72.0/22 maxlen: 24
123.98.80.0/22 maxlen: 24
123.98.100.0/22 maxlen: 24
210.79.68.0/22 maxlen: 24
210.79.72.0/22 maxlen: 24
210.79.76.0/22 maxlen: 24
210.79.84.0/22 maxlen: 24
210.79.92.0/22 maxlen: 24
210.79.100.0/22 maxlen: 24
210.79.104.0/22 maxlen: 24
210.79.112.0/22 maxlen: 24
210.79.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 428 (0x1ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: May 5 02:43:47 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=AE996F190D1D67733A2327F947A36BBDCF806A7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:44:f6:36:a0:dc:a3:53:9e:f0:6e:76:31:1d:
d6:bf:4d:cf:f4:54:6b:c8:9a:1c:59:eb:54:bd:fe:
27:82:6d:fc:ea:e9:76:ab:21:bf:7c:62:d8:f5:13:
c3:db:49:dc:87:92:88:70:27:6e:67:85:ed:08:d4:
b4:c0:1f:06:53:db:91:9a:2f:6f:ec:8d:aa:a7:6b:
a7:a5:d8:be:c8:87:e6:33:79:c9:97:83:7e:8c:14:
35:d7:8c:55:2d:de:47:c3:d4:55:40:83:5a:ae:81:
8b:75:f8:3a:d4:ed:b3:17:e4:1e:c7:3a:53:47:1b:
b4:23:98:26:9d:01:bd:89:f1:e9:72:e8:fa:7f:b5:
3b:0d:87:93:ee:b1:e9:16:ac:bd:5a:71:d3:53:3c:
a6:a8:b1:88:36:a8:e3:b8:51:0e:d9:ff:b0:c7:93:
64:35:0b:e4:62:60:33:fb:5e:01:6e:99:a1:0e:31:
ed:1c:f2:00:30:0d:7d:0b:d0:f4:13:75:03:d5:82:
67:99:89:0b:33:04:08:11:2e:e2:f4:29:70:f9:4f:
c3:37:42:6f:81:22:61:7d:06:64:6e:73:83:59:2f:
bb:5e:0f:39:c9:56:2d:be:67:e7:c6:43:53:97:8f:
41:f3:1a:7e:16:fd:8a:77:5b:88:71:78:62:63:70:
e2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:99:6F:19:0D:1D:67:73:3A:23:27:F9:47:A3:6B:BD:CF:80:6A:7E
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/rplvGQ0dZ3M6Iyf5R6Nrvc-Aan4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.98.64.0/22
123.98.72.0/22
123.98.80.0/22
123.98.100.0/22
210.79.68.0-210.79.79.255
210.79.84.0/22
210.79.92.0/22
210.79.100.0-210.79.107.255
210.79.112.0/22
210.79.124.0/22
Signature Algorithm: sha256WithRSAEncryption
80:fc:cd:c7:14:9f:5e:80:5e:31:52:d6:9e:72:cf:33:6e:6e:
11:9a:72:a9:0f:34:63:52:00:39:c9:5e:c1:3e:fd:3a:e6:12:
63:85:7d:fa:9f:6e:5a:fc:2d:c1:37:9f:ea:da:14:1f:76:32:
96:8c:02:6d:7d:dc:05:95:a3:d2:52:3d:04:c8:6a:52:05:16:
5d:46:65:68:1d:a2:b2:9e:4b:82:b4:62:05:bc:6c:77:bc:ae:
8c:52:50:88:22:2e:07:1e:df:c7:52:ef:95:d6:0e:62:2c:15:
1f:25:02:dc:70:0a:95:db:bc:5b:68:08:8f:a1:f7:f0:0a:ba:
d8:de:10:07:6e:73:b7:60:f0:e0:ff:cc:ab:75:0c:fd:a4:19:
05:50:6c:42:75:d4:c5:d9:92:5a:09:6e:f0:bb:7a:0b:60:f8:
c2:05:bc:80:9d:7f:b8:46:79:cf:5d:f4:1d:4d:d4:ca:ee:03:
6a:01:24:35:23:02:1d:98:e4:9f:d0:c5:fd:c7:9f:29:69:95:
9d:be:50:74:06:ec:cc:01:47:0a:78:02:cf:60:75:f2:51:37:
dd:b8:5c:b9:a8:89:ac:eb:7c:de:c1:27:cb:af:8e:69:61:48:
2c:74:13:83:de:4a:8e:ca:26:4e:29:9d:c9:38:03:80:c7:3f:
7a:1f:8d:5f
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgICAawwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1
QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yMzA1MDUw
MjQzNDdaFw0yNDAzMjcwMTEzMTBaMDMxMTAvBgNVBAMTKEFFOTk2RjE5MEQxRDY3
NzMzQTIzMjdGOTQ3QTM2QkJEQ0Y4MDZBN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZRPY2oNyjU57wbnYxHda/Tc/0VGvImhxZ61S9/ieCbfzq6Xar
Ib98Ytj1E8PbSdyHkohwJ25nhe0I1LTAHwZT25GaL2/sjaqna6el2L7Ih+YzecmX
g36MFDXXjFUt3kfD1FVAg1qugYt1+DrU7bMX5B7HOlNHG7QjmCadAb2J8ely6Pp/
tTsNh5PusekWrL1acdNTPKaosYg2qOO4UQ7Z/7DHk2Q1C+RiYDP7XgFumaEOMe0c
8gAwDX0L0PQTdQPVgmeZiQszBAgRLuL0KXD5T8M3Qm+BImF9BmRuc4NZL7teDznJ
Vi2+Z+fGQ1OXj0HzGn4W/Yp3W4hxeGJjcOIHAgMBAAGjggI3MIICMzAdBgNVHQ4E
FgQUrplvGQ0dZ3M6Iyf5R6Nrvc+Aan4wHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l
qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz
L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzL3JwbHZHUTBkWjNNNkl5
ZjVSNk5ydmMtQWFuNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwZQYIKwYBBQUHAQcBAf8EVjBUMFIEAgABMEwD
BAJ7YkADBAJ7YkgDBAJ7YlADBAJ7YmQwDAMEAtJPRAMEBNJPQAMEAtJPVAMEAtJP
XDAMAwQC0k9kAwQC0k9oAwQC0k9wAwQC0k98MA0GCSqGSIb3DQEBCwUAA4IBAQCA
/M3HFJ9egF4xUtaecs8zbm4RmnKpDzRjUgA5yV7BPv065hJjhX36n25a/C3BN5/q
2hQfdjKWjAJtfdwFlaPSUj0EyGpSBRZdRmVoHaKynkuCtGIFvGx3vK6MUlCIIi4H
Ht/HUu+V1g5iLBUfJQLccAqV27xbaAiPoffwCrrY3hAHbnO3YPDg/8yrdQz9pBkF
UGxCddTF2ZJaCW7wu3oLYPjCBbyAnX+4RnnPXfQdTdTK7gNqASQ1IwIdmOSf0MX9
x58paZWdvlB0BuzMAUcKeALPYHXyUTfduFy5qIms63zewSfLr45pYUgsdBOD3kqO
yiZOKZ3JOAOAxz96H41f
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:22 2023 by rpki-client on console-fra.rpki-client.org