Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/VuMLI-1t4gcjB87hKbIKBxcQxqQ.roa
File: VuMLI-1t4gcjB87hKbIKBxcQxqQ.roa (raw, json)
Hash identifier: 3Kka3G8hTw1x43DpOEL/Hm85MEEsjzaVJQMxG7ZnODM=
Subject key identifier: 56:E3:0B:23:ED:6D:E2:07:23:07:CE:E1:29:B2:0A:07:17:10:C6:A4
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 09F0
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/VuMLI-1t4gcjB87hKbIKBxcQxqQ.roa
Signing time: Mon 17 Feb 2025 13:58:33 +0000
ROA not before: Mon 17 Feb 2025 13:58:33 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 4766
IP address blocks: 59.107.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2544 (0x9f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Feb 17 13:58:33 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=56E30B23ED6DE2072307CEE129B20A071710C6A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6f:8d:17:2f:4f:6e:8f:13:df:3e:87:1a:3e:
a9:c6:87:1c:46:ce:05:6a:c9:31:42:78:90:42:84:
21:1e:ba:93:a9:56:7b:5f:47:6c:24:c0:62:e9:53:
ad:56:b6:8c:61:13:c0:10:f8:45:81:6d:f4:af:56:
7d:3c:5f:20:27:1b:7f:45:5a:05:78:31:62:9d:6d:
b4:97:fc:cb:87:a3:93:16:fd:35:93:42:6a:6a:2e:
ee:75:5d:17:f4:c9:e9:9f:fe:07:26:07:51:08:74:
3a:af:49:49:51:f8:da:c0:d7:9c:37:9e:3b:36:d2:
1d:03:d4:4d:2d:e8:3f:6f:8f:4c:61:46:19:6e:00:
e0:38:01:91:71:60:79:da:69:21:ed:37:f6:c8:29:
8a:3f:c2:84:5e:3a:7c:32:ae:80:90:50:c2:2e:f0:
26:c1:d1:60:86:78:bd:19:40:b2:f3:8f:7b:9b:3b:
32:55:fe:dc:a5:66:f9:dd:50:1c:2b:65:b6:37:5f:
17:51:88:ed:5f:aa:f1:e8:b7:78:7e:0b:ff:0e:9f:
bf:35:87:9e:e1:cf:8f:9b:f7:b1:f1:da:fc:d5:be:
9e:1b:77:90:79:6d:1b:28:e0:c4:45:fe:1b:a4:be:
5b:dd:0f:fd:f9:23:52:57:3a:94:0a:67:f2:68:b8:
09:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E3:0B:23:ED:6D:E2:07:23:07:CE:E1:29:B2:0A:07:17:10:C6:A4
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/VuMLI-1t4gcjB87hKbIKBxcQxqQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.107.192.0/18
Signature Algorithm: sha256WithRSAEncryption
23:40:5e:48:3b:da:1e:73:4d:bd:9a:6c:ef:c7:c4:af:01:50:
23:33:bf:c6:f8:c6:04:e9:27:64:19:0d:00:29:35:b4:e6:1f:
b4:73:fd:32:b2:37:d9:fb:ab:83:2a:58:39:b4:dd:ab:94:cf:
5c:c3:c6:51:17:77:aa:5b:3f:ca:e3:ba:c9:6a:97:cf:bc:f5:
7a:25:0c:7a:90:8d:37:97:90:f1:2e:14:37:cf:20:0a:57:f9:
94:86:f7:d0:d1:b7:cc:06:8c:0c:37:fa:6a:20:87:90:1c:1e:
bf:43:14:0b:5b:47:fd:1d:cc:51:3f:6b:ff:b9:ae:a6:4d:1e:
37:89:3b:f2:e2:29:55:86:ad:98:45:71:2e:c0:c9:00:0b:37:
af:83:a0:32:75:a2:8b:61:a0:58:60:a3:f3:90:71:76:20:f4:
6d:6b:bf:b7:40:5c:41:2d:eb:6f:63:df:4a:ea:bd:65:92:54:
89:0a:ce:2a:e3:15:71:a4:f1:05:17:02:30:a5:e5:47:f5:55:
d3:56:b5:7c:2e:3c:24:7a:09:e1:e3:a0:cb:bc:69:a6:d6:1e:
e7:9e:e9:84:fb:f2:39:6b:ee:37:64:16:18:c1:68:00:75:0f:
8f:ce:c3:18:31:90:7a:dd:cf:8a:18:a3:25:c8:4c:f0:de:91:
d0:a3:ea:05
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICCfAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTQ4
MUI0RTQwOTAxNUQ4RUI3RDAzRjM2MDM4ODMwRUMxMDk4QUJDMDAeFw0yNTAyMTcx
MzU4MzNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDU2RTMwQjIzRUQ2REUy
MDcyMzA3Q0VFMTI5QjIwQTA3MTcxMEM2QTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKb40XL09ujxPfPocaPqnGhxxGzgVqyTFCeJBChCEeupOpVntf
R2wkwGLpU61WtoxhE8AQ+EWBbfSvVn08XyAnG39FWgV4MWKdbbSX/MuHo5MW/TWT
QmpqLu51XRf0yemf/gcmB1EIdDqvSUlR+NrA15w3njs20h0D1E0t6D9vj0xhRhlu
AOA4AZFxYHnaaSHtN/bIKYo/woReOnwyroCQUMIu8CbB0WCGeL0ZQLLzj3ubOzJV
/tylZvndUBwrZbY3XxdRiO1fqvHot3h+C/8On781h57hz4+b97Hx2vzVvp4bd5B5
bRso4MRF/hukvlvdD/35I1JXOpQKZ/JouAmTAgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUVuMLI+1t4gcjB87hKbIKBxcQxqQwHwYDVR0jBBgwFoAUlIG05AkBXY630D82
A4gw7BCYq8AwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNi9s
SUcwNUFrQlhZNjMwRDgyQTRndzdCQ1lxOEEuY3JsMGMGCCsGAQUFBwEBBFcwVTBT
BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw
MDAwL2xJRzA1QWtCWFk2MzBEODJBNGd3N0JDWXE4QS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtp
LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzYvVnVNTEktMXQ0Z2NqQjg3aEti
SUtCeGNReHFRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNu
L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBjtr
wDANBgkqhkiG9w0BAQsFAAOCAQEAI0BeSDvaHnNNvZps78fErwFQIzO/xvjGBOkn
ZBkNACk1tOYftHP9MrI32furgypYObTdq5TPXMPGURd3qls/yuO6yWqXz7z1eiUM
epCNN5eQ8S4UN88gClf5lIb30NG3zAaMDDf6aiCHkBwev0MUC1tH/R3MUT9r/7mu
pk0eN4k78uIpVYatmEVxLsDJAAs3r4OgMnWii2GgWGCj85BxdiD0bWu/t0BcQS3r
b2PfSuq9ZZJUiQrOKuMVcaTxBRcCMKXlR/VV01a1fC48JHoJ4eOgy7xpptYe557p
hPvyOWvuN2QWGMFoAHUPj87DGDGQet3PihijJchM8N6R0KPqBQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 06:36:13 2025 by rpki-client