Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/620/9Jdk8KOSJRfL2mrB3YfKxFMxZQE.roa
File: 9Jdk8KOSJRfL2mrB3YfKxFMxZQE.roa (raw, json)
Hash identifier: m5o9rgoWIViF2OCxVgXp3gjdyjYdlkUCHSrZyBPT+jQ=
Subject key identifier: F4:97:64:F0:A3:92:25:17:CB:DA:6A:C1:DD:87:CA:C4:53:31:65:01
Certificate issuer: /CN=309C2A943B28DC0858C39B9208A1609C0973E49A
Certificate serial: 37
Authority key identifier: 30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/9Jdk8KOSJRfL2mrB3YfKxFMxZQE.roa
Signing time: Wed 22 Jan 2025 01:22:08 +0000
ROA not before: Wed 22 Jan 2025 01:22:08 +0000
ROA not after: Tue 13 Jan 2026 01:35:26 +0000
asID: 142132
IP address blocks: 114.28.202.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=309C2A943B28DC0858C39B9208A1609C0973E49A
Validity
Not Before: Jan 22 01:22:08 2025 GMT
Not After : Jan 13 01:35:26 2026 GMT
Subject: CN=F49764F0A3922517CBDA6AC1DD87CAC453316501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:63:06:95:9f:0b:12:93:7e:f7:f0:e3:a3:b5:
36:a3:a9:a9:ce:b1:89:07:f7:1b:4a:7e:3b:ac:bc:
91:7e:76:99:ef:ae:eb:e5:f5:13:a1:7e:b7:0f:3e:
57:17:4c:de:f2:4e:04:cd:2b:42:14:69:89:30:cc:
d5:5e:ea:23:76:b9:da:50:17:5b:6a:af:fe:af:58:
46:c2:04:32:d4:e4:b9:f2:37:77:9a:9a:06:ee:8d:
e1:df:58:a1:49:80:33:a3:6f:33:da:a9:3f:05:2f:
3c:11:6e:b7:11:9d:07:6a:62:12:1f:81:d2:fd:52:
b8:2e:c7:5b:d6:7d:95:7e:05:55:87:c4:13:76:d8:
b2:9b:00:90:87:39:70:b7:f1:b0:1a:71:32:4b:ae:
8c:14:3d:b2:1a:10:04:72:77:59:af:cb:c1:87:bb:
3e:e9:a2:8c:e3:93:b8:2d:ed:2e:cf:c0:d5:5e:37:
cb:b3:ac:d5:ca:53:b3:47:ed:b0:cd:b5:78:e7:1f:
c5:93:d8:ed:de:7b:af:36:ff:6c:9e:7b:03:e1:7b:
73:0e:2e:cc:c9:d7:70:e9:ed:72:49:c2:2c:a2:bf:
28:e6:6b:89:e4:db:d3:0b:8b:e1:bb:a6:d9:16:0a:
e1:e4:e3:d1:7a:72:bf:06:ca:53:57:f0:21:ae:1c:
8b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:97:64:F0:A3:92:25:17:CB:DA:6A:C1:DD:87:CA:C4:53:31:65:01
X509v3 Authority Key Identifier:
keyid:30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/9Jdk8KOSJRfL2mrB3YfKxFMxZQE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.28.202.0/24
Signature Algorithm: sha256WithRSAEncryption
91:16:f0:c2:9c:48:38:00:14:11:63:cb:65:8c:0a:57:e8:d6:
56:e3:4a:37:ca:21:47:b6:db:7a:b8:c6:6b:23:73:c5:4b:aa:
46:0c:bf:6e:25:6a:b3:40:95:73:55:8d:c3:8d:73:e6:68:82:
90:de:f8:2d:02:11:77:42:5a:ab:0c:04:74:59:2a:d6:31:74:
48:87:a5:75:fc:d1:96:c8:ea:e2:d7:5c:76:1c:93:ee:06:18:
88:59:3d:29:69:8e:bc:f8:f4:84:a9:7d:80:a0:e2:09:30:3e:
12:5e:f3:b1:bc:da:47:c7:e0:4d:8b:ee:67:33:b5:5f:64:8e:
a4:b2:30:1d:e9:68:67:19:62:9c:49:a6:84:0c:2c:4d:91:53:
ae:84:e1:c3:3d:49:c1:30:6e:d6:e1:c8:06:e8:62:aa:32:68:
47:20:c4:89:c1:70:46:c2:c2:8a:24:04:0b:96:a1:37:7e:e6:
fc:33:0d:8a:88:1a:81:18:6f:12:a3:66:51:de:79:05:eb:30:
a9:b0:16:94:3a:b0:85:25:62:20:32:55:7f:87:3c:07:16:ed:
32:c7:cc:d2:f7:ed:e4:1a:71:5b:d2:c6:f0:6b:96:ee:06:3b:
d0:0d:85:1e:a4:df:dd:ae:77:79:c8:2d:92:c6:8c:01:78:5a:
f5:e1:1e:e2
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgIBNzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzMDlD
MkE5NDNCMjhEQzA4NThDMzlCOTIwOEExNjA5QzA5NzNFNDlBMB4XDTI1MDEyMjAx
MjIwOFoXDTI2MDExMzAxMzUyNlowMzExMC8GA1UEAxMoRjQ5NzY0RjBBMzkyMjUx
N0NCREE2QUMxREQ4N0NBQzQ1MzMxNjUwMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKVjBpWfCxKTfvfw46O1NqOpqc6xiQf3G0p+O6y8kX52me+u6+X1
E6F+tw8+VxdM3vJOBM0rQhRpiTDM1V7qI3a52lAXW2qv/q9YRsIEMtTkufI3d5qa
Bu6N4d9YoUmAM6NvM9qpPwUvPBFutxGdB2piEh+B0v1SuC7HW9Z9lX4FVYfEE3bY
spsAkIc5cLfxsBpxMkuujBQ9shoQBHJ3Wa/LwYe7PumijOOTuC3tLs/A1V43y7Os
1cpTs0ftsM21eOcfxZPY7d57rzb/bJ57A+F7cw4uzMnXcOntcknCLKK/KOZrieTb
0wuL4bum2RYK4eTj0XpyvwbKU1fwIa4ci48CAwEAAaOCAfEwggHtMB0GA1UdDgQW
BBT0l2Two5IlF8vaasHdh8rEUzFlATAfBgNVHSMEGDAWgBQwnCqUOyjcCFjDm5II
oWCcCXPkmjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP
oE2GS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC82MjAv
TUp3cWxEc28zQWhZdzV1U0NLRmduQWx6NUpvLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9NSndxbERzbzNBaFl3NXVTQ0tGZ25BbHo1Sm8uY2VyMA4GA1UdDwEB/wQE
AwIHgDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC82MjAvOUpkazhLT1NKUmZMMm1y
QjNZZkt4Rk14WlFFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmlj
LmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AHIcyjANBgkqhkiG9w0BAQsFAAOCAQEAkRbwwpxIOAAUEWPLZYwKV+jWVuNKN8oh
R7bberjGayNzxUuqRgy/biVqs0CVc1WNw41z5miCkN74LQIRd0JaqwwEdFkq1jF0
SIeldfzRlsjq4tdcdhyT7gYYiFk9KWmOvPj0hKl9gKDiCTA+El7zsbzaR8fgTYvu
ZzO1X2SOpLIwHeloZxlinEmmhAwsTZFTroThwz1JwTBu1uHIBuhiqjJoRyDEicFw
RsLCiiQEC5ahN37m/DMNiogagRhvEqNmUd55BeswqbAWlDqwhSViIDJVf4c8Bxbt
MsfM0vft5BpxW9LG8GuW7gY70A2FHqTf3a53ecgtksaMAXha9eEe4g==
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:33:17 2025 by rpki-client