Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/G5NGNduIBzRZV9ud9ClJIygxkkQ.roa
File: G5NGNduIBzRZV9ud9ClJIygxkkQ.roa (raw, json)
Hash identifier: GZxR8YWxvlzOXnMgjtP/BVraIC3A32uOacHzxm/7wQA=
Subject key identifier: 1B:93:46:35:DB:88:07:34:59:57:DB:9D:F4:29:49:23:28:31:92:44
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 093E
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/G5NGNduIBzRZV9ud9ClJIygxkkQ.roa
Signing time: Fri 17 Jan 2025 01:23:42 +0000
ROA not before: Fri 17 Jan 2025 01:23:42 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 7018
IP address blocks: 58.66.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2366 (0x93e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Jan 17 01:23:42 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=1B934635DB8807345957DB9DF429492328319244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c2:01:6e:0c:cd:f5:fd:ed:ee:bb:79:ba:19:
9f:9f:b0:58:cf:75:d8:78:20:ea:e0:41:ad:24:91:
72:ac:6a:7e:ec:96:bc:35:91:1a:78:c7:1b:ff:a8:
e9:56:7b:99:38:d6:f4:12:86:70:df:b3:16:32:af:
6f:b8:87:b3:73:1c:7d:27:a0:41:f8:88:b9:fa:ee:
c9:36:36:b2:95:b7:14:4e:ff:56:88:2a:ec:3c:8f:
b9:a9:0f:7e:4c:b7:eb:b2:06:e2:06:17:ea:2e:c7:
7c:23:ef:05:16:5d:55:61:1c:6c:01:c3:9c:49:01:
17:d3:16:5f:b9:51:b7:00:ee:d7:2a:3c:2b:14:c1:
fb:f7:e3:0e:64:76:87:b4:58:eb:2f:01:76:d6:50:
09:8d:31:2f:44:fd:69:73:48:be:6f:92:a6:9b:e9:
32:0b:df:60:1f:37:2f:5b:9d:fa:d8:42:fc:df:e0:
d6:a5:6a:7f:81:41:b7:c4:1c:11:93:81:21:bc:5e:
1b:25:e0:fe:a6:3a:5d:af:f7:f7:bb:36:ad:aa:25:
48:e2:9e:d1:ae:7f:f9:ab:7d:cf:cb:68:74:b5:9b:
27:2a:29:d5:d6:f4:25:53:69:da:a9:8a:1a:13:82:
dc:c1:91:96:a0:99:e5:0d:24:b2:f9:ad:03:e4:e4:
3b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:93:46:35:DB:88:07:34:59:57:DB:9D:F4:29:49:23:28:31:92:44
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/G5NGNduIBzRZV9ud9ClJIygxkkQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
58.66.64.0/18
Signature Algorithm: sha256WithRSAEncryption
17:72:f2:a3:f9:8f:88:5b:a7:f7:86:0e:09:79:3c:25:ab:49:
98:ca:9e:91:0c:c6:b9:ed:10:f1:3f:e0:43:c8:cb:0c:8b:7f:
83:5d:59:6d:96:f5:bd:4b:75:3e:44:c9:4a:8b:67:d8:41:36:
c2:d1:65:35:c2:65:59:d7:83:5a:6d:6a:22:c9:da:c6:91:e8:
e4:ec:8a:df:cb:a8:29:66:1e:af:fd:1f:a6:c1:21:6f:da:3f:
80:1d:1d:97:30:04:c9:3d:e3:73:bc:25:81:8c:00:2a:a3:11:
c2:4e:2a:8e:bb:aa:6b:45:63:e3:7d:55:94:50:04:5b:8b:4a:
c1:e2:ac:03:17:e4:a1:05:75:e4:41:74:04:21:e3:f4:ed:4b:
9e:c6:71:1b:f5:aa:b4:b9:b2:15:06:90:96:62:db:1f:d3:f4:
4c:32:a1:30:ec:24:b0:d7:5b:62:22:45:91:7d:d0:91:ad:e0:
9f:9c:05:1d:fc:1e:8d:86:fc:c4:dd:b4:ee:96:6d:e1:10:cb:
27:54:d5:d0:f1:fd:21:7e:10:66:d7:9c:73:39:5a:5a:19:15:
d8:ef:6a:32:6f:f9:01:f4:f4:d4:01:35:7b:23:35:41:ca:42:
b0:2b:7c:34:ea:9e:1a:64:1e:25:09:36:35:c9:aa:d6:1e:9e:
bd:7d:c3:da
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICCT4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTQ4
MUI0RTQwOTAxNUQ4RUI3RDAzRjM2MDM4ODMwRUMxMDk4QUJDMDAeFw0yNTAxMTcw
MTIzNDJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDFCOTM0NjM1REI4ODA3
MzQ1OTU3REI5REY0Mjk0OTIzMjgzMTkyNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOwgFuDM31/e3uu3m6GZ+fsFjPddh4IOrgQa0kkXKsan7slrw1
kRp4xxv/qOlWe5k41vQShnDfsxYyr2+4h7NzHH0noEH4iLn67sk2NrKVtxRO/1aI
Kuw8j7mpD35Mt+uyBuIGF+oux3wj7wUWXVVhHGwBw5xJARfTFl+5UbcA7tcqPCsU
wfv34w5kdoe0WOsvAXbWUAmNMS9E/WlzSL5vkqab6TIL32AfNy9bnfrYQvzf4Nal
an+BQbfEHBGTgSG8Xhsl4P6mOl2v9/e7Nq2qJUjintGuf/mrfc/LaHS1mycqKdXW
9CVTadqpihoTgtzBkZagmeUNJLL5rQPk5DtjAgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUG5NGNduIBzRZV9ud9ClJIygxkkQwHwYDVR0jBBgwFoAUlIG05AkBXY630D82
A4gw7BCYq8AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNi9s
SUcwNUFrQlhZNjMwRDgyQTRndzdCQ1lxOEEuY3JsMGMGCCsGAQUFBwEBBFcwVTBT
BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw
MDAwL2xJRzA1QWtCWFk2MzBEODJBNGd3N0JDWXE4QS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtp
LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzYvRzVOR05kdUlCelJaVjl1ZDlD
bEpJeWd4a2tRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNu
L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBjpC
QDANBgkqhkiG9w0BAQsFAAOCAQEAF3Lyo/mPiFun94YOCXk8JatJmMqekQzGue0Q
8T/gQ8jLDIt/g11ZbZb1vUt1PkTJSotn2EE2wtFlNcJlWdeDWm1qIsnaxpHo5OyK
38uoKWYer/0fpsEhb9o/gB0dlzAEyT3jc7wlgYwAKqMRwk4qjruqa0Vj431VlFAE
W4tKweKsAxfkoQV15EF0BCHj9O1LnsZxG/WqtLmyFQaQlmLbH9P0TDKhMOwksNdb
YiJFkX3Qka3gn5wFHfwejYb8xN207pZt4RDLJ1TV0PH9IX4QZtecczlaWhkV2O9q
Mm/5AfT01AE1eyM1QcpCsCt8NOqeGmQeJQk2Ncmq1h6evX3D2g==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:45:17 2025 by rpki-client