Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/T4ko1N2lHkyz823L9IwdZGgyn9Q.roa
File: T4ko1N2lHkyz823L9IwdZGgyn9Q.roa (raw, json)
Hash identifier: TAy0RoevF3V5TgKxQmj/uV/rfFWvfa5ZEp6hD9fvdxg=
Subject key identifier: 4F:89:28:D4:DD:A5:1E:4C:B3:F3:6D:CB:F4:8C:1D:64:68:32:9F:D4
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1843
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/T4ko1N2lHkyz823L9IwdZGgyn9Q.roa
Signing time: Fri 17 Jan 2025 01:24:48 +0000
ROA not before: Fri 17 Jan 2025 01:24:48 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 59083
IP address blocks: 43.254.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6211 (0x1843)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:24:48 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=4F8928D4DDA51E4CB3F36DCBF48C1D6468329FD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:23:8c:8b:a6:66:4e:68:47:45:2d:f0:3e:01:
92:0f:c0:36:e8:91:7c:5f:b2:0b:f4:80:30:65:71:
a8:92:54:91:03:9c:28:3d:69:3d:56:6c:74:04:67:
c6:22:d3:05:a1:89:ad:7b:1c:e9:14:55:9e:52:a3:
f7:8c:ed:a0:94:8b:dd:55:29:ff:80:9e:a5:1f:34:
a3:60:97:03:74:f6:50:9e:c7:2f:8b:d6:97:ff:e1:
51:3c:cf:86:15:14:e7:a9:75:96:9a:0d:c9:5a:49:
ad:bb:49:e6:b5:98:6d:56:4a:1c:41:7a:6d:fa:2a:
f2:7f:f2:5f:1c:72:83:66:c4:ae:f4:5c:71:cb:d8:
fc:3e:42:9d:26:54:70:7b:ab:4b:36:24:3c:60:9d:
5f:24:e1:e7:6f:a8:50:b1:12:50:77:e7:60:ba:f4:
63:11:dc:1f:40:b0:60:a9:24:73:d1:49:45:f8:f2:
72:ac:db:32:4a:1a:5b:ef:97:11:ba:88:15:91:55:
f9:3a:e7:54:53:ab:e1:02:a2:d4:9f:9f:d8:bf:0e:
23:5c:be:57:7c:72:b1:f1:ac:f9:47:62:8b:ed:86:
71:fc:d6:7b:9e:3d:62:ff:16:72:4c:bf:82:92:e8:
03:7d:40:66:ea:6d:25:6d:f3:43:ea:2a:39:f9:05:
45:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:89:28:D4:DD:A5:1E:4C:B3:F3:6D:CB:F4:8C:1D:64:68:32:9F:D4
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/T4ko1N2lHkyz823L9IwdZGgyn9Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.254.155.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:b0:d2:82:e9:41:8b:18:df:83:51:f0:50:4a:4d:6b:66:19:
80:56:43:a6:ad:5b:f9:0b:ce:38:55:77:c6:1d:3b:6c:d8:14:
71:c2:88:49:eb:5a:43:11:b7:11:eb:b1:a0:b1:73:8a:5b:e8:
86:9a:ca:30:e0:94:6c:ab:6e:ec:41:b1:4e:60:d8:b0:2e:d1:
41:c5:6b:70:b5:b3:ec:7b:7d:59:ef:bc:03:47:41:d0:77:8e:
c6:c1:e9:e6:d6:0b:e0:ad:b2:ab:02:64:3b:b7:9c:56:58:b1:
dc:99:7b:94:cb:d8:dc:5d:67:db:a9:9f:e2:3f:bb:c6:39:32:
70:ec:b1:ed:f8:ca:29:e3:98:50:ce:ed:af:80:ca:1f:e7:9f:
0a:58:c2:93:1d:35:c5:35:82:32:49:38:9a:e7:98:68:d3:51:
eb:2d:cb:35:52:5f:9f:c0:07:cb:fe:c5:42:db:5d:74:22:1d:
12:73:59:76:2c:e1:a6:9b:ff:48:55:49:9c:8a:66:5f:86:bf:
ac:65:e3:01:8e:89:45:6d:34:7c:95:bb:e5:8a:f8:62:6e:34:
28:8d:e5:b3:24:53:6e:be:19:cc:26:66:e3:a1:26:42:ab:a5:
13:8b:90:0a:60:05:ef:f9:ab:09:49:7f:c1:a4:9a:b0:60:0a:
3f:86:d6:6a
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICGEMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC
NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw
MTI0NDhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDRGODkyOEQ0RERBNTFF
NENCM0YzNkRDQkY0OEMxRDY0NjgzMjlGRDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDdI4yLpmZOaEdFLfA+AZIPwDbokXxfsgv0gDBlcaiSVJEDnCg9
aT1WbHQEZ8Yi0wWhia17HOkUVZ5So/eM7aCUi91VKf+AnqUfNKNglwN09lCexy+L
1pf/4VE8z4YVFOepdZaaDclaSa27Sea1mG1WShxBem36KvJ/8l8ccoNmxK70XHHL
2Pw+Qp0mVHB7q0s2JDxgnV8k4edvqFCxElB352C69GMR3B9AsGCpJHPRSUX48nKs
2zJKGlvvlxG6iBWRVfk651RTq+ECotSfn9i/DiNcvld8crHxrPlHYovthnH81nue
PWL/FnJMv4KS6AN9QGbqbSVt80PqKjn5BUXbAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUT4ko1N2lHkyz823L9IwdZGgyn9QwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c
9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3
L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1Q0a28xTjJsSGt5ejgy
M0w5SXdkWkdneW45US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAAr/pswDQYJKoZIhvcNAQELBQADggEBANaw0oLpQYsY34NR8FBKTWtmGYBWQ6at
W/kLzjhVd8YdO2zYFHHCiEnrWkMRtxHrsaCxc4pb6IaayjDglGyrbuxBsU5g2LAu
0UHFa3C1s+x7fVnvvANHQdB3jsbB6ebWC+CtsqsCZDu3nFZYsdyZe5TL2NxdZ9up
n+I/u8Y5MnDsse34yinjmFDO7a+Ayh/nnwpYwpMdNcU1gjJJOJrnmGjTUestyzVS
X5/AB8v+xULbXXQiHRJzWXYs4aab/0hVSZyKZl+Gv6xl4wGOiUVtNHyVu+WK+GJu
NCiN5bMkU26+GcwmZuOhJkKrpROLkApgBe/5qwlJf8GkmrBgCj+G1mo=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:47:20 2025 by rpki-client