Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/KTiq78Jg5fVWza3PzU5M8hGCvPs.roa
File: KTiq78Jg5fVWza3PzU5M8hGCvPs.roa (raw, json)
Hash identifier: 4PrxOd1FpV3qymSaXcjQPehCROBwDWFzCN22izYl0t0=
Subject key identifier: 29:38:AA:EF:C2:60:E5:F5:56:CD:AD:CF:CD:4E:4C:F2:11:82:BC:FB
Certificate issuer: /CN=194ACC313935AF5433C2B9456D742682F961EABB
Certificate serial: 039C
Authority key identifier: 19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/KTiq78Jg5fVWza3PzU5M8hGCvPs.roa
Signing time: Mon 15 Nov 2021 12:08:16 +0000
ROA not before: Mon 15 Nov 2021 12:08:16 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 63889
IP address blocks: 45.252.100.0/22 maxlen: 24
103.220.248.0/22 maxlen: 24
103.220.252.0/22 maxlen: 24
103.221.0.0/22 maxlen: 24
103.221.4.0/22 maxlen: 24
103.221.8.0/22 maxlen: 24
103.221.12.0/22 maxlen: 24
103.221.16.0/22 maxlen: 24
103.221.20.0/22 maxlen: 24
103.221.24.0/22 maxlen: 24
103.221.28.0/22 maxlen: 24
103.221.32.0/22 maxlen: 24
103.221.36.0/22 maxlen: 24
103.221.40.0/22 maxlen: 24
103.221.44.0/22 maxlen: 24
103.221.48.0/22 maxlen: 24
103.221.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 924 (0x39c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194ACC313935AF5433C2B9456D742682F961EABB
Validity
Not Before: Nov 15 12:08:16 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=2938AAEFC260E5F556CDADCFCD4E4CF21182BCFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:23:77:67:96:37:cd:94:f7:3d:2a:a4:c7:58:
a5:ed:e1:cb:bf:d8:51:21:46:3a:52:07:54:50:d8:
e7:d6:57:9a:fe:c4:5d:8f:7b:78:82:ba:62:53:de:
26:f5:54:1b:2a:8a:da:f4:94:68:8b:7a:9e:f5:9a:
35:01:fd:44:67:1b:41:28:ac:ac:2d:4c:0f:32:d0:
7c:38:b0:b2:3e:1b:f0:c4:a0:1a:0b:1c:31:d8:f2:
08:f4:ab:a8:0a:6a:86:73:3f:40:da:9d:e8:a5:50:
ef:1e:80:b5:8a:c0:7e:18:d9:f8:77:c6:8b:51:63:
07:a2:65:e6:d3:ae:8a:0a:d9:23:da:49:8d:9c:9f:
a9:b6:ae:a2:eb:09:e4:69:f7:54:dd:6a:e1:01:de:
e0:dc:a5:98:e3:bc:f4:7a:fe:10:b2:19:ae:1e:01:
d1:e5:76:39:fd:79:ec:1f:23:c1:0f:d1:51:b9:a2:
26:3b:a2:65:da:62:e6:87:1e:1c:f0:40:b7:c7:55:
c3:8c:b7:45:d0:d5:27:6c:0f:55:d9:6e:c7:d6:09:
8f:5a:74:8d:c6:d3:62:e3:8a:63:e8:35:7d:13:2b:
2d:c0:c8:b6:fc:89:1d:97:00:83:df:07:8c:79:27:
56:83:ee:94:fc:7b:f4:5a:ce:43:31:31:b7:74:12:
ea:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:38:AA:EF:C2:60:E5:F5:56:CD:AD:CF:CD:4E:4C:F2:11:82:BC:FB
X509v3 Authority Key Identifier:
keyid:19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/GUrMMTk1r1QzwrlFbXQmgvlh6rs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/KTiq78Jg5fVWza3PzU5M8hGCvPs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.252.100.0/22
103.220.248.0-103.221.51.255
103.221.92.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:43:a9:a1:e0:2f:d5:a2:0a:0c:f6:ed:1c:bb:54:47:a3:27:
7b:1d:93:4c:a1:af:53:06:bd:98:8a:72:f0:8b:5e:68:87:9c:
89:4e:39:2a:bf:56:4f:a1:82:6a:f2:c5:5d:fa:0d:55:8d:dd:
72:cd:1d:90:a6:ac:73:3d:3b:96:bb:81:9f:e4:40:45:ed:d4:
a8:de:fa:d0:c7:65:e2:b8:cd:f3:50:41:4b:b1:d8:22:87:7b:
67:7e:bd:10:b2:74:bf:8f:5a:59:81:39:b4:53:3f:44:04:e0:
cf:26:fa:5d:40:00:05:3d:80:aa:93:bf:99:80:47:53:d8:95:
df:f1:34:d1:d7:0a:93:a8:c4:ba:68:8a:a0:07:87:ed:05:46:
e7:c3:8d:34:f9:a6:3a:3f:b4:cd:e7:7c:92:a5:20:35:95:e3:
3f:a5:01:a4:b2:0b:0a:63:b4:3c:37:1d:be:a7:83:6a:d3:61:
3a:f5:c4:f5:5a:b3:36:72:68:f4:6e:0b:f3:a3:8a:82:64:f6:
41:6d:3c:c5:2c:96:f8:85:71:1e:7d:79:bc:5c:ef:aa:fc:93:
77:0c:ca:9f:d8:8f:27:9b:89:73:b0:a3:01:09:43:57:3b:2a:
43:ac:8b:67:f8:08:f9:3a:a7:4b:68:b3:d6:22:66:cb:30:2f:
d7:c5:16:4b
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICA5wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTk0
QUNDMzEzOTM1QUY1NDMzQzJCOTQ1NkQ3NDI2ODJGOTYxRUFCQjAeFw0yMTExMTUx
MjA4MTZaFw0yMjA1MjcwNDU5NTJaMDMxMTAvBgNVBAMTKDI5MzhBQUVGQzI2MEU1
RjU1NkNEQURDRkNENEU0Q0YyMTE4MkJDRkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDWI3dnljfNlPc9KqTHWKXt4cu/2FEhRjpSB1RQ2OfWV5r+xF2P
e3iCumJT3ib1VBsqitr0lGiLep71mjUB/URnG0EorKwtTA8y0Hw4sLI+G/DEoBoL
HDHY8gj0q6gKaoZzP0DaneilUO8egLWKwH4Y2fh3xotRYweiZebTrooK2SPaSY2c
n6m2rqLrCeRp91TdauEB3uDcpZjjvPR6/hCyGa4eAdHldjn9eewfI8EP0VG5oiY7
omXaYuaHHhzwQLfHVcOMt0XQ1SdsD1XZbsfWCY9adI3G02LjimPoNX0TKy3AyLb8
iR2XAIPfB4x5J1aD7pT8e/RazkMxMbd0EupHAgMBAAGjggIFMIICATAdBgNVHQ4E
FgQUKTiq78Jg5fVWza3PzU5M8hGCvPswHwYDVR0jBBgwFoAUGUrMMTk1r1QzwrlF
bXQmgvlh6rswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3
L0dVck1NVGsxcjFRendybEZiWFFtZ3ZsaDZycy5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvR1VyTU1UazFyMVF6d3JsRmJYUW1ndmxoNnJzLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L0tUaXE3OEpnNWZWV3ph
M1B6VTVNOGhHQ3ZQcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwMwYIKwYBBQUHAQcBAf8EJDAiMCAEAgABMBoD
BAIt/GQwDAMEA2fc+AMEAmfdMAMEAmfdXDANBgkqhkiG9w0BAQsFAAOCAQEArEOp
oeAv1aIKDPbtHLtUR6Mnex2TTKGvUwa9mIpy8IteaIeciU45Kr9WT6GCavLFXfoN
VY3dcs0dkKascz07lruBn+RARe3UqN760Mdl4rjN81BBS7HYIod7Z369ELJ0v49a
WYE5tFM/RATgzyb6XUAABT2AqpO/mYBHU9iV3/E00dcKk6jEumiKoAeH7QVG58ON
NPmmOj+0zed8kqUgNZXjP6UBpLILCmO0PDcdvqeDatNhOvXE9VqzNnJo9G4L86OK
gmT2QW08xSyW+IVxHn15vFzvqvyTdwzKn9iPJ5uJc7CjAQlDVzsqQ6yLZ/gI+Tqn
S2iz1iJmyzAv18UWSw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:18 2023 by rpki-client on console-ams.rpki-client.org