Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/yNfcNjfolInxDQyG4GQKwfGLw44.roa
File: yNfcNjfolInxDQyG4GQKwfGLw44.roa (raw, json)
Hash identifier: hNTzBJdT7znJNdVO0t22OmQq3EnGbaxTZKPq3spHf8k=
Subject key identifier: C8:D7:DC:36:37:E8:94:89:F1:0D:0C:86:E0:64:0A:C1:F1:8B:C3:8E
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0107
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/yNfcNjfolInxDQyG4GQKwfGLw44.roa
Signing time: Wed 12 Apr 2023 16:54:33 +0000
ROA not before: Wed 12 Apr 2023 16:54:33 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 21700
IP address blocks: 210.79.64.0/22 maxlen: 24
210.79.80.0/22 maxlen: 24
210.79.96.0/22 maxlen: 24
210.79.108.0/22 maxlen: 24
210.79.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 263 (0x107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Apr 12 16:54:33 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=C8D7DC3637E89489F10D0C86E0640AC1F18BC38E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0c:0a:e7:47:51:90:21:5f:b5:7a:20:53:cb:
9d:af:61:6f:c2:ba:c3:b5:40:1d:be:10:91:94:cc:
32:1d:67:19:25:5d:9b:05:f6:4a:36:aa:92:cc:f7:
cd:e5:ba:e7:fd:c5:45:e3:d8:94:df:83:5c:7d:7e:
cc:da:a1:db:6a:78:bb:a7:d1:08:b7:7d:5d:05:ff:
a0:d5:76:23:d0:b6:2b:29:65:39:6e:d4:cd:8b:7b:
db:b0:14:28:73:c4:60:4c:b4:0d:ea:90:5f:d5:48:
4e:f5:7f:7b:3c:37:aa:7c:fd:de:6d:ce:79:90:45:
c3:c6:9a:16:c1:ff:f3:25:1a:29:87:b7:b4:78:9f:
6e:85:47:95:79:b9:9a:cb:0d:b1:3c:24:5e:ea:79:
97:15:f3:d9:6a:60:fe:c6:c8:49:27:03:f9:72:45:
c5:ae:33:e0:30:ed:d4:81:14:32:7d:c2:6e:8d:b6:
ff:0d:b8:db:d1:e3:fc:ef:fb:6f:7f:8e:5e:e6:e8:
f9:6c:5d:af:02:a0:20:31:3c:44:a1:3c:06:3f:71:
55:a5:95:95:25:e2:62:25:37:8d:30:b0:7f:5f:0f:
dd:57:de:7b:15:3a:4d:14:0e:47:9a:f1:a9:3f:55:
2e:12:9f:f7:2d:5a:18:fd:8e:3c:e3:96:ab:88:4b:
42:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D7:DC:36:37:E8:94:89:F1:0D:0C:86:E0:64:0A:C1:F1:8B:C3:8E
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/yNfcNjfolInxDQyG4GQKwfGLw44.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.79.64.0/22
210.79.80.0/22
210.79.96.0/22
210.79.108.0/22
210.79.120.0/22
Signature Algorithm: sha256WithRSAEncryption
26:9c:03:61:dd:fc:77:ed:7e:03:3f:a2:fd:79:34:85:24:1a:
36:89:a6:9f:b7:52:d0:dc:c1:03:1e:e6:c7:11:b9:aa:1f:28:
c4:17:42:ad:a2:c4:a8:a2:27:7e:c2:0d:58:57:93:0e:16:8b:
5f:d7:6c:35:12:e7:08:5a:0d:18:44:21:16:c6:79:c5:0c:de:
16:f4:47:d6:ed:9e:9c:27:ff:b7:72:70:1a:3b:b7:85:98:97:
9e:c8:80:e3:64:a0:c7:06:50:0b:69:e6:42:cf:19:98:64:e4:
73:b7:1c:7c:6f:d8:09:6a:63:1f:ee:8b:29:3c:d1:1b:29:d5:
17:d9:11:c0:7e:28:55:75:39:b9:ac:eb:4c:70:93:ef:5a:d2:
24:e4:84:57:1f:a7:e6:b8:ff:6b:4c:1b:14:55:c7:52:e0:7b:
4c:c1:82:a7:52:9b:dc:62:6d:2a:a5:a1:06:28:54:c5:22:b0:
04:29:b2:8d:28:d0:ca:4f:39:4b:b5:35:39:8a:e2:b6:76:03:
40:8c:28:49:08:83:af:d4:01:47:7b:f7:ab:cb:5c:e1:e0:4f:
23:d1:b8:19:7e:8c:4e:b0:b0:66:98:93:10:63:b0:f3:37:0a:
8b:37:c2:9b:aa:81:fd:8f:9b:6c:5f:f3:dd:3d:2d:ec:bb:f9:
38:64:a2:5f
-----BEGIN CERTIFICATE-----
MIIE7TCCA9WgAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1
QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yMzA0MTIx
NjU0MzNaFw0yNDAzMjcwMTEzMTBaMDMxMTAvBgNVBAMTKEM4RDdEQzM2MzdFODk0
ODlGMTBEMEM4NkUwNjQwQUMxRjE4QkMzOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2DArnR1GQIV+1eiBTy52vYW/CusO1QB2+EJGUzDIdZxklXZsF
9ko2qpLM983luuf9xUXj2JTfg1x9fszaodtqeLun0Qi3fV0F/6DVdiPQtispZTlu
1M2Le9uwFChzxGBMtA3qkF/VSE71f3s8N6p8/d5tznmQRcPGmhbB//MlGimHt7R4
n26FR5V5uZrLDbE8JF7qeZcV89lqYP7GyEknA/lyRcWuM+Aw7dSBFDJ9wm6Ntv8N
uNvR4/zv+29/jl7m6PlsXa8CoCAxPEShPAY/cVWllZUl4mIlN40wsH9fD91X3nsV
Ok0UDkea8ak/VS4Sn/ctWhj9jjzjlquIS0IjAgMBAAGjggIJMIICBTAdBgNVHQ4E
FgQUyNfcNjfolInxDQyG4GQKwfGLw44wHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l
qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz
L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzL3lOZmNOamZvbElueERR
eUc0R1FLd2ZHTHc0NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwNwYIKwYBBQUHAQcBAf8EKDAmMCQEAgABMB4D
BALST0ADBALST1ADBALST2ADBALST2wDBALST3gwDQYJKoZIhvcNAQELBQADggEB
ACacA2Hd/HftfgM/ov15NIUkGjaJpp+3UtDcwQMe5scRuaofKMQXQq2ixKiiJ37C
DVhXkw4Wi1/XbDUS5whaDRhEIRbGecUM3hb0R9btnpwn/7dycBo7t4WYl57IgONk
oMcGUAtp5kLPGZhk5HO3HHxv2AlqYx/uiyk80Rsp1RfZEcB+KFV1Obms60xwk+9a
0iTkhFcfp+a4/2tMGxRVx1Lge0zBgqdSm9xibSqloQYoVMUisAQpso0o0MpPOUu1
NTmK4rZ2A0CMKEkIg6/UAUd796vLXOHgTyPRuBl+jE6wsGaYkxBjsPM3Cos3wpuq
gf2Pm2xf8909Ley7+Thkol8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:18 2023 by rpki-client on console-ams.rpki-client.org