Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/TA6vtiD7R791IffrKb2AtOL1Ik0.roa
File: TA6vtiD7R791IffrKb2AtOL1Ik0.roa (raw, json)
Hash identifier: 2r5GezgYIXL7M63L1NbDJynTf9SZGNpPBGvbYxVAI48=
Subject key identifier: 4C:0E:AF:B6:20:FB:47:BF:75:21:F7:EB:29:BD:80:B4:E2:F5:22:4D
Certificate issuer: /CN=194ACC313935AF5433C2B9456D742682F961EABB
Certificate serial: 079C
Authority key identifier: 19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/TA6vtiD7R791IffrKb2AtOL1Ik0.roa
Signing time: Sat 14 May 2022 15:11:05 +0000
ROA not before: Sat 14 May 2022 15:11:05 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 139259
IP address blocks: 45.252.100.0/22 maxlen: 24
103.6.108.0/24 maxlen: 24
103.220.248.0/22 maxlen: 24
103.220.252.0/22 maxlen: 24
103.221.0.0/22 maxlen: 24
103.221.4.0/22 maxlen: 24
103.221.8.0/22 maxlen: 24
103.221.12.0/22 maxlen: 24
103.221.16.0/22 maxlen: 24
103.221.20.0/22 maxlen: 24
103.221.24.0/22 maxlen: 24
103.221.28.0/22 maxlen: 24
103.221.32.0/22 maxlen: 24
103.221.36.0/22 maxlen: 24
103.221.40.0/22 maxlen: 24
103.221.44.0/22 maxlen: 24
103.221.48.0/22 maxlen: 24
103.221.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1948 (0x79c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194ACC313935AF5433C2B9456D742682F961EABB
Validity
Not Before: May 14 15:11:05 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=4C0EAFB620FB47BF7521F7EB29BD80B4E2F5224D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:11:3a:fb:20:9c:7e:fc:39:6f:4c:10:1c:b5:
9f:85:f4:5d:2c:58:0f:54:ed:63:8c:3d:a4:4e:78:
53:e6:c7:33:b4:ed:01:dc:e5:df:af:64:34:35:b2:
62:77:be:cd:6f:09:40:8e:89:89:2b:7b:40:e2:d5:
b3:c2:d3:b4:4c:5e:e0:18:32:dc:1f:15:69:d0:56:
64:5f:cc:a2:4b:69:b1:97:16:68:7f:4a:a4:3b:f6:
f8:22:67:99:ed:cc:10:e1:a7:5c:db:19:77:c7:ea:
28:8c:45:72:a6:64:11:88:62:0a:15:2e:ea:97:c8:
c2:43:8b:fd:9f:ea:91:4a:e9:cf:6a:80:3c:75:02:
5e:52:d2:b2:9f:4f:87:0f:34:c9:81:c9:6f:40:bf:
36:a8:76:e7:86:49:17:e5:22:63:c7:6f:be:9a:6b:
51:89:4c:36:c0:d1:38:40:75:d5:6f:4b:52:a3:4e:
5c:b4:3f:11:cb:a1:42:8d:01:a1:b7:eb:fe:27:d9:
5f:a5:6a:b6:fe:02:61:36:57:4b:ea:10:76:1d:7d:
59:6f:fb:4c:40:06:00:d7:00:6d:22:99:52:3f:9e:
07:0b:7d:f1:c3:a6:48:64:0b:59:72:df:ad:c9:5e:
00:75:e0:bc:95:66:52:ff:ae:0a:cf:97:8d:5a:79:
c2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0E:AF:B6:20:FB:47:BF:75:21:F7:EB:29:BD:80:B4:E2:F5:22:4D
X509v3 Authority Key Identifier:
keyid:19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/GUrMMTk1r1QzwrlFbXQmgvlh6rs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/TA6vtiD7R791IffrKb2AtOL1Ik0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.252.100.0/22
103.6.108.0/24
103.220.248.0-103.221.51.255
103.221.92.0/22
Signature Algorithm: sha256WithRSAEncryption
02:b1:81:53:15:a2:25:95:e7:92:0a:6e:e8:86:ad:14:66:23:
dd:64:f0:e3:03:20:e6:17:c1:98:5c:47:b4:50:ee:7d:9d:e2:
1b:92:46:48:48:69:4f:05:4e:ab:3e:ed:6d:6f:34:23:04:3e:
bf:68:3b:cf:d1:dd:da:53:ed:7a:1c:3e:91:8a:6d:62:35:7e:
57:8e:a7:16:c3:9f:2a:39:c2:ed:a0:f7:41:83:7d:0b:19:6c:
bc:f1:fe:56:6a:90:72:59:32:98:33:03:96:74:b5:48:f8:e2:
71:36:9c:00:df:42:e8:b0:2e:34:47:c0:38:97:56:8f:4a:fc:
d8:ad:ea:14:cd:f9:23:67:36:87:8b:0c:9f:ab:cb:e3:7e:fb:
0c:a9:51:0f:72:90:78:5e:b0:85:c9:a5:0d:bc:e3:22:b7:4d:
fd:fa:68:8e:b0:79:2a:e4:f6:41:04:21:5f:3e:5d:da:d4:e7:
f0:a2:05:db:e9:62:c6:1b:4d:0b:03:4d:48:09:e6:74:ca:be:
e0:45:69:2e:0c:49:6e:58:5f:09:e2:29:1a:a7:bb:c8:78:c1:
77:4f:fc:14:12:3c:7a:d4:a9:d2:5e:f3:72:96:7c:45:cf:00:
b3:3b:c9:ea:c0:6e:13:9d:50:7b:72:39:9b:99:3e:b0:23:d3:
a3:8c:a6:a2
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgICB5wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTk0
QUNDMzEzOTM1QUY1NDMzQzJCOTQ1NkQ3NDI2ODJGOTYxRUFCQjAeFw0yMjA1MTQx
NTExMDVaFw0yMjA1MjcwNDU5NTJaMDMxMTAvBgNVBAMTKDRDMEVBRkI2MjBGQjQ3
QkY3NTIxRjdFQjI5QkQ4MEI0RTJGNTIyNEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIETr7IJx+/DlvTBActZ+F9F0sWA9U7WOMPaROeFPmxzO07QHc
5d+vZDQ1smJ3vs1vCUCOiYkre0Di1bPC07RMXuAYMtwfFWnQVmRfzKJLabGXFmh/
SqQ79vgiZ5ntzBDhp1zbGXfH6iiMRXKmZBGIYgoVLuqXyMJDi/2f6pFK6c9qgDx1
Al5S0rKfT4cPNMmByW9AvzaodueGSRflImPHb76aa1GJTDbA0ThAddVvS1KjTly0
PxHLoUKNAaG36/4n2V+larb+AmE2V0vqEHYdfVlv+0xABgDXAG0imVI/ngcLffHD
pkhkC1ly363JXgB14LyVZlL/rgrPl41aecLVAgMBAAGjggILMIICBzAdBgNVHQ4E
FgQUTA6vtiD7R791IffrKb2AtOL1Ik0wHwYDVR0jBBgwFoAUGUrMMTk1r1QzwrlF
bXQmgvlh6rswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3
L0dVck1NVGsxcjFRendybEZiWFFtZ3ZsaDZycy5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvR1VyTU1UazFyMVF6d3JsRmJYUW1ndmxoNnJzLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L1RBNnZ0aUQ3Ujc5MUlm
ZnJLYjJBdE9MMUlrMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwOQYIKwYBBQUHAQcBAf8EKjAoMCYEAgABMCAD
BAIt/GQDBABnBmwwDAMEA2fc+AMEAmfdMAMEAmfdXDANBgkqhkiG9w0BAQsFAAOC
AQEAArGBUxWiJZXnkgpu6IatFGYj3WTw4wMg5hfBmFxHtFDufZ3iG5JGSEhpTwVO
qz7tbW80IwQ+v2g7z9Hd2lPtehw+kYptYjV+V46nFsOfKjnC7aD3QYN9CxlsvPH+
VmqQclkymDMDlnS1SPjicTacAN9C6LAuNEfAOJdWj0r82K3qFM35I2c2h4sMn6vL
4377DKlRD3KQeF6whcmlDbzjIrdN/fpojrB5KuT2QQQhXz5d2tTn8KIF2+lixhtN
CwNNSAnmdMq+4EVpLgxJblhfCeIpGqe7yHjBd0/8FBI8etSp0l7zcpZ8Rc8AszvJ
6sBuE51Qe3I5m5k+sCPTo4ymog==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:18 2023 by rpki-client on console-ams.rpki-client.org