Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/l9HQrN7ua9NNz2dOiPxXStJzck8.roa
File: l9HQrN7ua9NNz2dOiPxXStJzck8.roa (raw, json)
Hash identifier: BcBsoGa1hGEuBSFq6peTP1dxCvdPL7RTjHQJQACj5FE=
Subject key identifier: 97:D1:D0:AC:DE:EE:6B:D3:4D:CF:67:4E:88:FC:57:4A:D2:73:72:4F
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 183F
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/l9HQrN7ua9NNz2dOiPxXStJzck8.roa
Signing time: Fri 17 Jan 2025 01:24:47 +0000
ROA not before: Fri 17 Jan 2025 01:24:47 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 59083
IP address blocks: 202.174.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6207 (0x183f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:24:47 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=97D1D0ACDEEE6BD34DCF674E88FC574AD273724F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:42:2d:b9:f3:81:7d:62:69:cd:64:72:2c:b0:
19:9c:ba:ad:95:1d:16:1b:d7:4e:59:05:ad:69:ad:
d1:b3:0f:d7:23:0d:3a:36:4c:20:94:6d:e4:27:f8:
e2:00:64:d7:d3:b3:fd:0e:53:b8:ec:eb:3e:47:4a:
6c:ac:48:c2:ab:b1:19:0c:57:4e:b8:1c:fc:9d:e3:
08:c2:b4:84:1c:31:99:da:d0:7c:2f:55:02:4a:35:
48:46:e5:50:23:9d:5e:85:6d:d6:cd:ed:1d:cb:91:
3f:bd:35:14:d6:9a:d8:df:54:37:5f:37:cb:73:f0:
42:b1:02:54:36:a7:dd:c7:fe:47:61:b3:ed:eb:ec:
d6:0e:61:24:93:00:22:05:32:22:5d:99:a5:7c:8a:
0b:81:95:0b:d4:d4:92:c4:97:04:bc:88:d6:00:c4:
6d:91:72:e4:8f:31:c3:43:30:8b:f4:ca:47:39:b9:
51:a3:c6:16:dc:e5:df:83:7b:ff:44:5a:15:35:5f:
88:ef:05:27:ef:ce:be:02:27:1a:35:8d:07:d6:1e:
82:30:e1:7e:28:5b:15:29:6a:ad:1c:af:5b:dc:1b:
07:41:41:4a:e2:9f:6b:60:6e:de:97:78:c1:70:86:
9c:e6:a5:22:9e:ae:0e:f8:f6:c9:d9:5b:07:ac:f2:
20:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D1:D0:AC:DE:EE:6B:D3:4D:CF:67:4E:88:FC:57:4A:D2:73:72:4F
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/l9HQrN7ua9NNz2dOiPxXStJzck8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.174.124.0/22
Signature Algorithm: sha256WithRSAEncryption
48:0f:8b:45:cf:41:10:1e:7a:64:11:0e:1a:6e:3f:82:cb:15:
4d:45:ff:2a:68:22:74:e8:eb:3c:96:58:a4:88:7f:93:67:20:
63:59:d2:b8:1b:d9:4e:f5:aa:8e:dc:22:42:7c:52:35:46:ec:
e9:30:ed:50:b2:40:4d:9b:b3:fd:2c:0f:0e:62:0c:61:2b:be:
25:9c:a2:72:ac:4f:fe:04:85:85:da:8c:a1:d7:69:b8:bd:c3:
52:c6:76:2d:e4:f3:b6:3c:49:04:6a:cc:f4:de:ed:f5:27:ad:
fb:b0:5f:43:c6:04:98:0b:72:7f:fa:54:65:71:ae:fa:52:19:
81:0c:5f:68:93:b4:9e:5d:62:54:89:f4:a9:9a:41:76:f8:31:
e5:58:c0:db:b8:7b:72:c6:f4:61:7f:62:16:a3:ec:c4:9d:3c:
00:52:7c:c9:b1:43:ef:7f:aa:9b:9f:4f:9a:3d:b0:f2:57:cd:
e8:a7:c5:4b:f3:65:3e:6f:18:7a:42:67:38:f4:5e:d8:9a:39:
96:51:8e:9d:33:45:e9:f2:37:5b:9d:9b:57:86:57:4a:58:a5:
4a:b0:a9:7a:10:96:2e:37:40:e0:20:12:ff:ca:c5:6a:4d:67:
ae:4b:28:b8:9f:ca:e1:b9:8a:bd:6e:3f:8a:70:59:61:b0:a8:
35:cd:9c:0d
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICGD8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC
NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw
MTI0NDdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDk3RDFEMEFDREVFRTZC
RDM0RENGNjc0RTg4RkM1NzRBRDI3MzcyNEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDvQi2584F9YmnNZHIssBmcuq2VHRYb105ZBa1prdGzD9cjDTo2
TCCUbeQn+OIAZNfTs/0OU7js6z5HSmysSMKrsRkMV064HPyd4wjCtIQcMZna0Hwv
VQJKNUhG5VAjnV6FbdbN7R3LkT+9NRTWmtjfVDdfN8tz8EKxAlQ2p93H/kdhs+3r
7NYOYSSTACIFMiJdmaV8iguBlQvU1JLElwS8iNYAxG2RcuSPMcNDMIv0ykc5uVGj
xhbc5d+De/9EWhU1X4jvBSfvzr4CJxo1jQfWHoIw4X4oWxUpaq0cr1vcGwdBQUri
n2tgbt6XeMFwhpzmpSKerg749snZWwes8iB1AgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUl9HQrN7ua9NNz2dOiPxXStJzck8wHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c
9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3
L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2w5SFFyTjd1YTlOTnoy
ZE9pUHhYU3RKemNrOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BALKrnwwDQYJKoZIhvcNAQELBQADggEBAEgPi0XPQRAeemQRDhpuP4LLFU1F/ypo
InTo6zyWWKSIf5NnIGNZ0rgb2U71qo7cIkJ8UjVG7Okw7VCyQE2bs/0sDw5iDGEr
viWconKsT/4EhYXajKHXabi9w1LGdi3k87Y8SQRqzPTe7fUnrfuwX0PGBJgLcn/6
VGVxrvpSGYEMX2iTtJ5dYlSJ9KmaQXb4MeVYwNu4e3LG9GF/Yhaj7MSdPABSfMmx
Q+9/qpufT5o9sPJXzeinxUvzZT5vGHpCZzj0XtiaOZZRjp0zRenyN1udm1eGV0pY
pUqwqXoQli43QOAgEv/KxWpNZ65LKLifyuG5ir1uP4pwWWGwqDXNnA0=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:47:03 2025 by rpki-client