Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/64/IYfAkO30FFNQ0NLxemsf-zs6iNA.roa
File: IYfAkO30FFNQ0NLxemsf-zs6iNA.roa (raw, json)
Hash identifier: zIOBveQUSlLmVJeKCea/oWuVgo0OjGpDfgdm4U8G8mE=
Subject key identifier: 21:87:C0:90:ED:F4:14:53:50:D0:D2:F1:7A:6B:1F:FB:3B:3A:88:D0
Certificate issuer: /CN=5EB8C57D72F7946DD7B2420599288ECA153CB709
Certificate serial: 12
Authority key identifier: 5E:B8:C5:7D:72:F7:94:6D:D7:B2:42:05:99:28:8E:CA:15:3C:B7:09
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XrjFfXL3lG3XskIFmSiOyhU8twk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/IYfAkO30FFNQ0NLxemsf-zs6iNA.roa
Signing time: Mon 26 May 2025 00:56:39 +0000
ROA not before: Mon 26 May 2025 00:56:39 +0000
ROA not after: Tue 26 May 2026 00:40:26 +0000
asID: 23724
IP address blocks: 211.157.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5EB8C57D72F7946DD7B2420599288ECA153CB709
Validity
Not Before: May 26 00:56:39 2025 GMT
Not After : May 26 00:40:26 2026 GMT
Subject: CN=2187C090EDF4145350D0D2F17A6B1FFB3B3A88D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:26:dc:30:35:df:86:a6:76:20:46:64:67:cb:
d0:19:a8:cb:25:fd:4c:c6:c6:0c:36:11:da:96:8b:
6d:f1:40:56:99:79:4b:28:7f:c7:b3:88:42:37:a6:
3f:4f:dd:c9:04:0f:be:d4:78:f7:a6:24:6f:fc:2a:
19:44:14:b7:e2:1e:4b:e2:a2:8f:0a:25:ed:d4:9c:
32:4c:1c:22:02:39:e0:dc:50:ec:3d:63:0f:04:f2:
3f:18:49:dd:58:f5:66:34:4f:a0:04:fa:3e:47:79:
96:34:53:8e:ac:90:ef:48:6c:49:d4:4e:f1:70:af:
63:eb:fc:d0:4a:83:9c:47:8b:1b:66:58:2a:bc:b6:
7f:71:26:15:d1:74:2a:95:e3:02:05:36:6f:71:6b:
0a:a9:9a:42:2f:ef:aa:86:51:05:c5:d9:70:bb:91:
96:ca:c3:86:51:97:01:19:20:02:83:68:03:28:d6:
7f:ee:45:9e:ab:3c:61:6c:dc:ea:03:36:6c:06:93:
01:2c:14:6c:00:b8:4f:4d:8c:f5:f9:47:1f:76:f6:
eb:a3:66:37:48:96:7f:93:43:ca:b2:05:52:23:04:
8f:06:47:ca:ed:9d:fe:de:3b:65:8a:59:23:5a:99:
3d:9d:de:b8:7e:b0:f8:74:a3:33:e7:47:5f:1e:c6:
d0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:87:C0:90:ED:F4:14:53:50:D0:D2:F1:7A:6B:1F:FB:3B:3A:88:D0
X509v3 Authority Key Identifier:
keyid:5E:B8:C5:7D:72:F7:94:6D:D7:B2:42:05:99:28:8E:CA:15:3C:B7:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/XrjFfXL3lG3XskIFmSiOyhU8twk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XrjFfXL3lG3XskIFmSiOyhU8twk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/IYfAkO30FFNQ0NLxemsf-zs6iNA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.157.224.0/19
Signature Algorithm: sha256WithRSAEncryption
2a:20:20:9b:f5:da:91:17:89:68:dd:3a:06:86:a2:af:c7:ed:
41:e5:4d:55:49:70:ce:74:0c:f5:36:d3:48:09:28:98:cf:8c:
08:71:96:3c:e7:d7:74:d6:75:c0:ad:31:b1:07:ea:17:00:da:
0f:72:2e:42:71:16:ac:03:1b:66:bd:9b:8f:93:ad:d3:e4:7b:
97:70:76:7c:04:bc:03:c1:a1:26:be:c1:3c:8e:bb:4d:ab:e5:
03:14:ae:dd:23:38:d6:97:7d:75:55:75:3e:7e:f6:6d:15:b5:
f2:ed:e4:89:c5:e1:cd:a2:15:f6:df:ef:29:35:61:b6:f9:44:
18:14:56:0a:33:ae:ab:39:d8:fa:ae:e0:94:9d:73:c9:3a:dd:
f0:19:ca:41:04:61:e0:e1:fa:73:30:bf:34:dd:02:b1:1b:e7:
c4:51:30:97:48:e6:6e:74:65:d8:b1:6a:ea:2c:3c:16:c5:64:
e0:1e:b8:24:4a:01:2b:f4:7d:3f:db:8c:d2:41:db:5e:09:50:
a8:50:a5:2b:d3:50:bf:26:f4:a5:03:6a:0e:15:e8:87:8c:90:
7e:f3:4c:f3:ba:c2:ce:44:1c:f9:d2:bc:40:33:81:50:6d:3a:
58:dd:15:7a:89:de:d7:e0:04:20:c5:b2:92:21:1a:8e:0e:5e:
6c:ec:66:ea
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgIBEjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1RUI4
QzU3RDcyRjc5NDZERDdCMjQyMDU5OTI4OEVDQTE1M0NCNzA5MB4XDTI1MDUyNjAw
NTYzOVoXDTI2MDUyNjAwNDAyNlowMzExMC8GA1UEAxMoMjE4N0MwOTBFREY0MTQ1
MzUwRDBEMkYxN0E2QjFGRkIzQjNBODhEMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM4m3DA134amdiBGZGfL0BmoyyX9TMbGDDYR2paLbfFAVpl5Syh/
x7OIQjemP0/dyQQPvtR496Ykb/wqGUQUt+IeS+Kijwol7dScMkwcIgI54NxQ7D1j
DwTyPxhJ3Vj1ZjRPoAT6Pkd5ljRTjqyQ70hsSdRO8XCvY+v80EqDnEeLG2ZYKry2
f3EmFdF0KpXjAgU2b3FrCqmaQi/vqoZRBcXZcLuRlsrDhlGXARkgAoNoAyjWf+5F
nqs8YWzc6gM2bAaTASwUbAC4T02M9flHH3b266NmN0iWf5NDyrIFUiMEjwZHyu2d
/t47ZYpZI1qZPZ3euH6w+HSjM+dHXx7G0DsCAwEAAaOCAe8wggHrMB0GA1UdDgQW
BBQhh8CQ7fQUU1DQ0vF6ax/7OzqI0DAfBgNVHSMEGDAWgBReuMV9cveUbdeyQgWZ
KI7KFTy3CTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGA1UdHwRUMFIwUKBO
oEyGSnJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC82NC9Y
cmpGZlhMM2xHM1hza0lGbVNpT3loVTh0d2suY3JsMGMGCCsGAQUFBwEBBFcwVTBT
BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw
MDAwL1hyakZmWEwzbEczWHNrSUZtU2lPeWhVOHR3ay5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGbBggrBgEFBQcBCwSBjjCBizBWBggrBgEFBQcwC4ZKcnN5bmM6Ly9ycGtp
LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzY0L0lZZkFrTzMwRkZOUTBOTHhl
bXNmLXpzNmlOQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5j
bi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXT
neAwDQYJKoZIhvcNAQELBQADggEBACogIJv12pEXiWjdOgaGoq/H7UHlTVVJcM50
DPU200gJKJjPjAhxljzn13TWdcCtMbEH6hcA2g9yLkJxFqwDG2a9m4+TrdPke5dw
dnwEvAPBoSa+wTyOu02r5QMUrt0jONaXfXVVdT5+9m0VtfLt5InF4c2iFfbf7yk1
Ybb5RBgUVgozrqs52Pqu4JSdc8k63fAZykEEYeDh+nMwvzTdArEb58RRMJdI5m50
ZdixauosPBbFZOAeuCRKASv0fT/bjNJB214JUKhQpSvTUL8m9KUDag4V6IeMkH7z
TPO6ws5EHPnSvEAzgVBtOljdFXqJ3tfgBCDFspIhGo4OXmzsZuo=
-----END CERTIFICATE-----
Generated at Thu Jun 5 20:21:59 2025 by rpki-client