Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/Qb5nc17MwcIfZA8guzGE91RbzX8.roa
File: Qb5nc17MwcIfZA8guzGE91RbzX8.roa (raw, json)
Hash identifier: soBwuwfVGFtYjdBZh4ZMhpar1pjUGxKjiaQClRwtGr4=
Subject key identifier: 41:BE:67:73:5E:CC:C1:C2:1F:64:0F:20:BB:31:84:F7:54:5B:CD:7F
Certificate issuer: /CN=194ACC313935AF5433C2B9456D742682F961EABB
Certificate serial: 07E5
Authority key identifier: 19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Qb5nc17MwcIfZA8guzGE91RbzX8.roa
Signing time: Thu 26 May 2022 01:30:40 +0000
ROA not before: Thu 26 May 2022 01:30:40 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 139259
IP address blocks: 45.252.8.0/22 maxlen: 24
45.252.12.0/22 maxlen: 24
45.252.16.0/22 maxlen: 24
45.252.20.0/22 maxlen: 24
45.252.24.0/22 maxlen: 24
45.252.28.0/22 maxlen: 24
45.252.32.0/22 maxlen: 24
45.252.36.0/22 maxlen: 24
45.252.40.0/22 maxlen: 24
45.252.44.0/22 maxlen: 24
45.252.48.0/22 maxlen: 24
45.252.100.0/22 maxlen: 24
45.252.144.0/22 maxlen: 24
103.6.108.0/24 maxlen: 24
103.220.248.0/22 maxlen: 24
103.220.252.0/22 maxlen: 24
103.221.0.0/22 maxlen: 24
103.221.4.0/22 maxlen: 24
103.221.8.0/22 maxlen: 24
103.221.12.0/22 maxlen: 24
103.221.16.0/22 maxlen: 24
103.221.20.0/22 maxlen: 24
103.221.24.0/22 maxlen: 24
103.221.28.0/22 maxlen: 24
103.221.32.0/22 maxlen: 24
103.221.36.0/22 maxlen: 24
103.221.40.0/22 maxlen: 24
103.221.44.0/22 maxlen: 24
103.221.48.0/22 maxlen: 24
103.221.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2021 (0x7e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194ACC313935AF5433C2B9456D742682F961EABB
Validity
Not Before: May 26 01:30:40 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=41BE67735ECCC1C21F640F20BB3184F7545BCD7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b5:b9:97:72:05:f2:34:8a:61:a8:5b:03:97:
f1:14:45:14:f5:70:9c:e1:aa:eb:b0:5c:5e:48:a4:
fd:9e:9e:b5:3b:67:19:30:c7:21:1d:c5:48:9b:1b:
11:d9:41:3c:0a:a4:66:c7:dc:c2:76:10:11:fa:78:
da:e0:62:ff:02:da:4f:ce:70:16:ed:72:8a:d4:a8:
bd:59:84:97:1e:f9:48:29:2c:a1:5a:03:28:e6:ac:
1f:cd:62:08:0b:da:16:f2:b5:41:5f:54:56:d1:6f:
1a:e1:f0:48:6f:5b:81:cb:4b:a6:b9:12:4e:06:bd:
ea:01:2c:e1:c7:ca:43:0d:91:81:9f:92:15:25:de:
9e:19:75:63:14:86:22:54:96:98:69:16:0c:cf:fe:
f8:bf:e7:1f:ae:a8:1a:84:e4:43:0e:16:40:8a:ca:
20:5f:36:42:50:c8:98:0a:ef:1c:fc:99:56:35:71:
e7:eb:76:87:36:fe:d6:67:26:8a:e7:62:6a:0f:d9:
8b:4f:a8:e4:89:3e:90:32:dd:0d:da:60:29:20:57:
70:59:2e:53:be:ab:dc:dc:ce:54:41:18:a4:53:28:
77:a4:3e:4e:01:92:a5:55:09:c2:0c:a4:69:c5:9c:
e2:75:65:9d:67:32:8d:33:d3:35:47:c6:1d:5d:e4:
56:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:BE:67:73:5E:CC:C1:C2:1F:64:0F:20:BB:31:84:F7:54:5B:CD:7F
X509v3 Authority Key Identifier:
keyid:19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/GUrMMTk1r1QzwrlFbXQmgvlh6rs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Qb5nc17MwcIfZA8guzGE91RbzX8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.252.8.0-45.252.51.255
45.252.100.0/22
45.252.144.0/22
103.6.108.0/24
103.220.248.0-103.221.51.255
103.221.92.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:41:2d:91:59:f1:f5:0f:80:9a:59:31:fd:45:71:cd:92:46:
34:0e:d4:df:56:92:fa:61:dc:ee:58:7f:85:70:31:20:5f:9b:
c4:ee:2a:fa:12:b8:6a:e5:53:74:fd:fe:52:2f:b0:1a:cc:77:
32:70:ad:5f:9b:a0:b8:48:0f:ed:34:8d:81:8f:71:73:bf:ee:
4e:3c:b9:9e:ec:b4:d8:b6:63:af:30:1e:5e:c6:a6:e6:cd:1e:
5e:5f:73:b3:94:4b:e8:7e:38:98:bb:98:46:21:a2:6b:c1:c6:
c7:71:bd:0c:70:21:9a:8b:94:99:4d:4f:60:a2:9f:73:24:10:
1b:1c:71:3d:0b:3b:31:c8:aa:12:1b:13:60:31:95:32:34:11:
e2:1d:ad:99:96:d9:3f:a6:70:80:ef:7c:ee:df:34:05:02:40:
b6:3c:e0:a2:35:72:49:db:4a:41:32:8a:ac:69:23:7b:17:22:
e1:7b:17:bf:9b:ea:98:76:df:cb:a4:bd:0c:ad:07:b0:b9:f0:
ff:5c:19:3e:ab:b0:66:fa:6a:94:61:bc:41:ba:31:47:06:43:
35:3f:55:cb:84:e7:17:0a:4b:56:a7:4e:e8:9b:05:97:b0:d4:
a8:52:86:d5:63:de:74:83:ce:1b:42:f6:d3:db:b9:ab:bc:e5:
e3:b6:e0:41
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgICB+UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTk0
QUNDMzEzOTM1QUY1NDMzQzJCOTQ1NkQ3NDI2ODJGOTYxRUFCQjAeFw0yMjA1MjYw
MTMwNDBaFw0yMjA1MjcwNDU5NTJaMDMxMTAvBgNVBAMTKDQxQkU2NzczNUVDQ0Mx
QzIxRjY0MEYyMEJCMzE4NEY3NTQ1QkNEN0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFtbmXcgXyNIphqFsDl/EURRT1cJzhquuwXF5IpP2enrU7Zxkw
xyEdxUibGxHZQTwKpGbH3MJ2EBH6eNrgYv8C2k/OcBbtcorUqL1ZhJce+UgpLKFa
AyjmrB/NYggL2hbytUFfVFbRbxrh8EhvW4HLS6a5Ek4GveoBLOHHykMNkYGfkhUl
3p4ZdWMUhiJUlphpFgzP/vi/5x+uqBqE5EMOFkCKyiBfNkJQyJgK7xz8mVY1cefr
doc2/tZnJornYmoP2YtPqOSJPpAy3Q3aYCkgV3BZLlO+q9zczlRBGKRTKHekPk4B
kqVVCcIMpGnFnOJ1ZZ1nMo0z0zVHxh1d5FZdAgMBAAGjggIfMIICGzAdBgNVHQ4E
FgQUQb5nc17MwcIfZA8guzGE91RbzX8wHwYDVR0jBBgwFoAUGUrMMTk1r1QzwrlF
bXQmgvlh6rswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3
L0dVck1NVGsxcjFRendybEZiWFFtZ3ZsaDZycy5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvR1VyTU1UazFyMVF6d3JsRmJYUW1ndmxoNnJzLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1FiNW5jMTdNd2NJZlpB
OGd1ekdFOTFSYnpYOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwTQYIKwYBBQUHAQcBAf8EPjA8MDoEAgABMDQw
DAMEAy38CAMEAi38MAMEAi38ZAMEAi38kAMEAGcGbDAMAwQDZ9z4AwQCZ90wAwQC
Z91cMA0GCSqGSIb3DQEBCwUAA4IBAQAfQS2RWfH1D4CaWTH9RXHNkkY0DtTfVpL6
YdzuWH+FcDEgX5vE7ir6Erhq5VN0/f5SL7AazHcycK1fm6C4SA/tNI2Bj3Fzv+5O
PLme7LTYtmOvMB5exqbmzR5eX3OzlEvofjiYu5hGIaJrwcbHcb0McCGai5SZTU9g
op9zJBAbHHE9CzsxyKoSGxNgMZUyNBHiHa2Zltk/pnCA73zu3zQFAkC2POCiNXJJ
20pBMoqsaSN7FyLhexe/m+qYdt/LpL0MrQewufD/XBk+q7Bm+mqUYbxBujFHBkM1
P1XLhOcXCktWp07omwWXsNSoUobVY950g84bQvbT27mrvOXjtuBB
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:18 2023 by rpki-client on console-ams.rpki-client.org