Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/eg_XHxjB62oIIV0-PEYPN8uPZ1M.roa
File: eg_XHxjB62oIIV0-PEYPN8uPZ1M.roa (raw, json)
Hash identifier: sYGNOhrYa43MD6OCtBp42Ye9dthHY0Zjr4+pCdEmCTo=
Subject key identifier: 7A:0F:D7:1F:18:C1:EB:6A:08:21:5D:3E:3C:46:0F:37:CB:8F:67:53
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 0CE0
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/eg_XHxjB62oIIV0-PEYPN8uPZ1M.roa
Signing time: Wed 13 Mar 2024 01:21:59 +0000
ROA not before: Wed 13 Mar 2024 01:21:59 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4812
IP address blocks: 43.254.152.0/24 maxlen: 24
103.5.192.0/22 maxlen: 24
103.24.116.0/24 maxlen: 24
103.24.118.0/23 maxlen: 24
150.242.238.0/23 maxlen: 24
202.89.96.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3296 (0xce0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Mar 13 01:21:59 2024 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=7A0FD71F18C1EB6A08215D3E3C460F37CB8F6753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e1:b9:d8:2b:27:69:fe:56:48:cf:3c:7e:5d:
4b:44:cd:f8:4a:39:ef:53:80:59:87:72:77:74:ea:
72:47:a5:79:e4:26:d3:60:8b:79:d9:60:a9:0c:54:
2b:28:f6:7e:8c:42:61:b8:9f:88:da:3c:2e:77:6c:
1b:59:3f:79:ce:3e:7d:8a:6b:10:92:eb:1e:15:34:
69:c3:9a:55:58:1e:83:70:eb:1b:ba:c3:9b:ca:6b:
5c:1e:ff:d0:5e:ff:e6:2b:17:60:e8:e5:df:3d:b4:
b2:cb:8e:2a:0b:0f:2e:0b:2c:5b:e3:b3:5a:62:43:
80:29:6e:71:0c:c6:3d:71:d5:ce:b4:19:90:f5:cf:
74:b9:55:08:66:a1:72:a6:88:86:b8:98:e6:81:2f:
a6:fa:9e:0e:f8:ad:e5:44:b1:16:1d:9f:fd:45:05:
e9:53:48:cb:e7:7f:bf:cd:ea:f0:37:35:d8:05:7e:
4c:33:57:8f:96:98:c4:00:c2:c4:b9:15:70:70:1e:
a6:02:c1:48:7c:70:0f:69:26:e3:dd:9f:30:49:39:
78:8b:60:d5:7e:29:41:c2:80:20:94:ca:b9:dd:7e:
6d:cf:49:c1:c1:71:54:88:39:e7:a2:64:66:e6:d6:
9e:15:46:4e:a8:72:c9:1f:e3:9a:c1:95:63:f8:69:
6d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0F:D7:1F:18:C1:EB:6A:08:21:5D:3E:3C:46:0F:37:CB:8F:67:53
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/eg_XHxjB62oIIV0-PEYPN8uPZ1M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.254.152.0/24
103.5.192.0/22
103.24.116.0/24
103.24.118.0/23
150.242.238.0/23
202.89.96.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:85:7e:46:05:2b:98:2d:53:85:c3:4d:e3:64:c5:9f:2e:5c:
93:aa:80:83:4a:e7:09:22:71:f9:51:94:0f:c5:fd:e7:94:af:
51:7c:7e:3f:80:f4:7f:5d:1a:44:0d:d9:04:7e:2a:73:be:fb:
ab:ed:40:22:cd:73:22:00:d5:75:f4:52:79:28:3a:06:c9:ca:
c6:4b:71:6e:22:9c:8a:c5:4c:66:60:06:57:27:d4:8b:31:3e:
05:39:9f:39:9c:fc:ae:8b:54:f5:4f:52:55:af:bf:c7:a3:37:
75:37:33:6c:9b:a2:72:40:f3:cb:2a:20:05:45:5d:3e:0b:57:
49:02:13:b5:6f:ad:4b:f7:9b:38:27:e8:b1:45:c6:8b:85:b2:
9a:02:48:0f:28:a6:83:e9:11:cc:32:4a:33:c8:e5:bc:c8:23:
c5:82:ba:d2:17:5d:4a:6f:16:02:85:c8:5e:90:70:f5:e4:8f:
e2:56:29:f1:42:22:29:d7:ab:f0:eb:87:ff:81:bb:7d:1e:3f:
98:ad:58:c4:fc:55:77:24:b8:95:d9:cc:67:d6:7d:2d:be:59:
63:00:87:e6:ff:3e:77:a5:86:39:f6:2d:4f:70:40:e9:f1:9b:
6a:96:3b:b3:76:59:77:c5:04:f1:01:8e:3e:16:07:9d:a1:83:
d0:b7:da:39
-----BEGIN CERTIFICATE-----
MIIE8zCCA9ugAwIBAgICDOAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC
NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNDAzMTMw
MTIxNTlaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDdBMEZENzFGMThDMUVC
NkEwODIxNUQzRTNDNDYwRjM3Q0I4RjY3NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCm4bnYKydp/lZIzzx+XUtEzfhKOe9TgFmHcnd06nJHpXnkJtNg
i3nZYKkMVCso9n6MQmG4n4jaPC53bBtZP3nOPn2KaxCS6x4VNGnDmlVYHoNw6xu6
w5vKa1we/9Be/+YrF2Do5d89tLLLjioLDy4LLFvjs1piQ4ApbnEMxj1x1c60GZD1
z3S5VQhmoXKmiIa4mOaBL6b6ng74reVEsRYdn/1FBelTSMvnf7/N6vA3NdgFfkwz
V4+WmMQAwsS5FXBwHqYCwUh8cA9pJuPdnzBJOXiLYNV+KUHCgCCUyrndfm3PScHB
cVSIOeeiZGbm1p4VRk6ocskf45rBlWP4aW1tAgMBAAGjggIPMIICCzAdBgNVHQ4E
FgQUeg/XHxjB62oIIV0+PEYPN8uPZ1MwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c
9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3
L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2VnX1hIeGpCNjJvSUlW
MC1QRVlQTjh1UFoxTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwPQYIKwYBBQUHAQcBAf8ELjAsMCoEAgABMCQD
BAAr/pgDBAJnBcADBABnGHQDBAFnGHYDBAGW8u4DBADKWWAwDQYJKoZIhvcNAQEL
BQADggEBALqFfkYFK5gtU4XDTeNkxZ8uXJOqgINK5wkicflRlA/F/eeUr1F8fj+A
9H9dGkQN2QR+KnO++6vtQCLNcyIA1XX0UnkoOgbJysZLcW4inIrFTGZgBlcn1Isx
PgU5nzmc/K6LVPVPUlWvv8ejN3U3M2ybonJA88sqIAVFXT4LV0kCE7VvrUv3mzgn
6LFFxouFspoCSA8opoPpEcwySjPI5bzII8WCutIXXUpvFgKFyF6QcPXkj+JWKfFC
IinXq/Drh/+Bu30eP5itWMT8VXckuJXZzGfWfS2+WWMAh+b/Pnelhjn2LU9wQOnx
m2qWO7N2WXfFBPEBjj4WB52hg9C32jk=
-----END CERTIFICATE-----
Generated at Fri Jun 7 04:05:12 2024 by rpki-client on console-ams.rpki-client.org