Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/620/oo1RAhDNLpypJ4DY-FhJaypVYdc.roa
File: oo1RAhDNLpypJ4DY-FhJaypVYdc.roa (raw, json)
Hash identifier: p20QDfifNmzC/E34EhawcSFaYE4WAwts4xpfIBZiMZk=
Subject key identifier: A2:8D:51:02:10:CD:2E:9C:A9:27:80:D8:F8:58:49:6B:2A:55:61:D7
Certificate issuer: /CN=309C2A943B28DC0858C39B9208A1609C0973E49A
Certificate serial: 9E
Authority key identifier: 30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/oo1RAhDNLpypJ4DY-FhJaypVYdc.roa
Signing time: Tue 11 Feb 2025 09:39:52 +0000
ROA not before: Tue 11 Feb 2025 09:39:52 +0000
ROA not after: Tue 13 Jan 2026 01:35:26 +0000
asID: 38340
IP address blocks: 114.28.253.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=309C2A943B28DC0858C39B9208A1609C0973E49A
Validity
Not Before: Feb 11 09:39:52 2025 GMT
Not After : Jan 13 01:35:26 2026 GMT
Subject: CN=A28D510210CD2E9CA92780D8F858496B2A5561D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:af:fb:be:3d:7e:6f:3b:1e:ba:70:05:8d:c8:
47:a9:ac:80:9a:c0:16:bd:8f:c2:18:cc:fc:fe:30:
2b:61:a8:ab:db:2c:af:31:2d:3f:42:49:dd:82:12:
79:90:02:e5:41:b5:74:27:3b:15:95:72:57:6a:fc:
9f:81:45:ba:3e:fc:48:6e:7f:61:0e:e9:5a:aa:1f:
cb:a7:a5:49:43:b6:d9:be:20:87:a4:b3:f2:34:71:
49:87:c5:c0:eb:a9:af:c4:6c:bf:64:ce:2a:42:61:
ff:ad:42:9a:46:c8:4a:f6:ca:24:4a:23:32:1a:72:
71:d6:e2:38:55:bc:27:b7:0a:f6:32:a4:82:57:f7:
bf:03:fa:13:26:d4:f9:88:88:a4:58:b3:c7:97:14:
95:34:66:bb:c5:dd:a5:69:74:ab:a4:82:82:33:d2:
59:a3:ef:a2:b0:3d:b2:06:6c:9a:03:b4:64:96:ac:
58:8e:09:72:3c:2d:c2:3d:12:b4:b5:96:f8:b7:44:
3c:20:2a:ac:94:18:ee:5c:c6:76:d3:07:bd:73:a2:
43:7c:74:fc:16:e3:d9:eb:94:c2:79:5e:4e:6f:b8:
c9:04:7f:76:f8:fe:d0:02:e1:81:f2:6a:b7:92:43:
48:69:00:9e:21:eb:d8:5a:4d:1a:0f:20:16:de:9f:
7b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8D:51:02:10:CD:2E:9C:A9:27:80:D8:F8:58:49:6B:2A:55:61:D7
X509v3 Authority Key Identifier:
keyid:30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/oo1RAhDNLpypJ4DY-FhJaypVYdc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.28.253.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:fa:64:b0:0e:5a:1f:15:80:bb:d2:2d:ac:8c:95:de:e1:20:
fb:c3:ec:4b:90:e3:ce:94:05:a9:42:94:69:55:e2:eb:67:08:
41:bc:8d:87:05:90:63:88:51:da:0e:1e:a3:b5:3a:01:89:44:
2e:68:ac:94:ba:5e:17:28:f0:88:9f:74:f2:d0:f0:bd:23:10:
91:a5:82:df:67:54:50:b9:de:32:50:aa:5b:aa:93:a5:22:7d:
55:79:b3:47:92:58:b8:d9:0f:62:26:6c:bf:e6:c3:4e:0b:ba:
fd:56:a1:98:fd:26:94:64:e5:1a:1a:fb:86:21:07:04:82:11:
76:a2:93:93:76:d3:8c:af:ad:ef:46:9d:9c:f5:c9:8d:fa:cf:
ef:67:f8:60:94:9b:d6:b3:ad:1e:39:b2:dc:e5:5f:a5:89:26:
32:2e:ca:24:56:f1:a9:64:fa:7e:c3:00:cc:08:94:25:04:ef:
7c:07:c6:60:74:4c:94:20:90:69:10:1f:e5:48:50:bf:b4:57:
85:3a:da:a4:2b:86:a6:00:3a:94:48:14:68:3e:cf:b7:d3:0e:
04:07:3a:aa:13:6b:c2:12:95:97:4c:dd:60:c2:c2:43:7f:26:
5f:70:f7:79:d6:72:d7:62:76:78:11:d8:5e:1e:81:2f:a3:e1:
00:e8:d9:60
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzA5
QzJBOTQzQjI4REMwODU4QzM5QjkyMDhBMTYwOUMwOTczRTQ5QTAeFw0yNTAyMTEw
OTM5NTJaFw0yNjAxMTMwMTM1MjZaMDMxMTAvBgNVBAMTKEEyOEQ1MTAyMTBDRDJF
OUNBOTI3ODBEOEY4NTg0OTZCMkE1NTYxRDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCfr/u+PX5vOx66cAWNyEeprICawBa9j8IYzPz+MCthqKvbLK8x
LT9CSd2CEnmQAuVBtXQnOxWVcldq/J+BRbo+/Ehuf2EO6VqqH8unpUlDttm+IIek
s/I0cUmHxcDrqa/EbL9kzipCYf+tQppGyEr2yiRKIzIacnHW4jhVvCe3CvYypIJX
978D+hMm1PmIiKRYs8eXFJU0ZrvF3aVpdKukgoIz0lmj76KwPbIGbJoDtGSWrFiO
CXI8LcI9ErS1lvi3RDwgKqyUGO5cxnbTB71zokN8dPwW49nrlMJ5Xk5vuMkEf3b4
/tAC4YHyareSQ0hpAJ4h69haTRoPIBben3t5AgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUoo1RAhDNLpypJ4DY+FhJaypVYdcwHwYDVR0jBBgwFoAUMJwqlDso3AhYw5uS
CKFgnAlz5JowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIw
L01Kd3FsRHNvM0FoWXc1dVNDS0ZnbkFsejVKby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvTUp3cWxEc28zQWhZdzV1U0NLRmduQWx6NUpvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIwL29vMVJBaEROTHB5cEo0
RFktRmhKYXlwVllkYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAByHP0wDQYJKoZIhvcNAQELBQADggEBABv6ZLAOWh8VgLvSLayMld7hIPvD7EuQ
486UBalClGlV4utnCEG8jYcFkGOIUdoOHqO1OgGJRC5orJS6Xhco8IifdPLQ8L0j
EJGlgt9nVFC53jJQqluqk6UifVV5s0eSWLjZD2ImbL/mw04Luv1WoZj9JpRk5Roa
+4YhBwSCEXaik5N204yvre9GnZz1yY36z+9n+GCUm9azrR45stzlX6WJJjIuyiRW
8alk+n7DAMwIlCUE73wHxmB0TJQgkGkQH+VIUL+0V4U62qQrhqYAOpRIFGg+z7fT
DgQHOqoTa8ISlZdM3WDCwkN/Jl9w93nWctdidngR2F4egS+j4QDo2WA=
-----END CERTIFICATE-----
Generated at Sat Feb 22 03:38:21 2025 by rpki-client