Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/65/NJ6BNlK4xsz2pWt6jh9TRbdmtwo.roa
File: NJ6BNlK4xsz2pWt6jh9TRbdmtwo.roa (raw, json)
Hash identifier: Y+tSg/LbrZHtVLaNMJYRvOXDF9n+5BI9LZsRPd5h1io=
Subject key identifier: 34:9E:81:36:52:B8:C6:CC:F6:A5:6B:7A:8E:1F:53:45:B7:66:B7:0A
Certificate issuer: /CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9
Certificate serial: 128D
Authority key identifier: 98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/NJ6BNlK4xsz2pWt6jh9TRbdmtwo.roa
Signing time: Fri 23 May 2025 11:37:39 +0000
ROA not before: Fri 23 May 2025 11:37:39 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 23853
IP address blocks: 120.136.184.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4749 (0x128d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9
Validity
Not Before: May 23 11:37:39 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=349E813652B8C6CCF6A56B7A8E1F5345B766B70A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ca:8b:dd:9c:c7:1a:9d:64:58:c6:a9:49:ef:
88:3a:e3:0d:97:f0:fb:a4:78:a2:e5:de:87:52:b1:
c8:51:da:af:b1:f4:ce:60:1c:0d:bb:66:0a:c5:4d:
4b:0b:d8:8d:3a:82:d8:ac:65:2e:72:25:78:30:b7:
49:c0:0f:72:eb:49:de:4f:f4:31:53:48:30:b8:fa:
6c:d5:96:2b:ed:17:87:25:0a:ae:58:ba:46:13:42:
88:59:0a:d5:1d:35:d5:27:93:55:db:34:f5:87:04:
3d:69:da:f9:7b:42:13:68:6c:13:bd:9d:a9:14:e1:
2f:f8:a1:c0:b2:6a:d9:32:b8:c8:c9:a2:51:4b:e6:
7c:a3:05:5b:9c:5a:77:65:25:4b:c8:2d:08:16:12:
58:cd:63:e6:81:e9:23:c8:fb:a2:ab:90:42:c9:08:
af:f0:69:c9:6d:3f:c6:88:76:80:83:46:d9:e8:de:
df:4e:d1:f9:94:22:64:e5:f2:ab:9e:5e:68:ab:fc:
b6:fb:18:17:46:7c:4d:a5:a3:cb:bc:2e:51:7a:25:
50:9a:46:1f:6e:2e:c5:48:3e:bb:db:ab:04:78:31:
1f:b2:cd:20:d0:af:b4:88:f3:5c:b1:16:ab:16:05:
a1:06:66:7b:57:8b:c2:7b:52:f5:06:b3:01:be:3a:
9e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9E:81:36:52:B8:C6:CC:F6:A5:6B:7A:8E:1F:53:45:B7:66:B7:0A
X509v3 Authority Key Identifier:
keyid:98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/NJ6BNlK4xsz2pWt6jh9TRbdmtwo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.136.184.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:3e:35:b3:46:e4:5c:4b:51:ad:b7:9c:44:3a:2f:7c:2a:71:
e8:b8:dd:b6:73:e5:f9:50:d0:4b:47:0b:2a:d5:52:c2:d0:ee:
a1:d0:a4:99:c5:38:d5:62:a4:5b:4e:50:a1:db:87:46:b5:09:
24:e2:2b:28:56:14:57:56:d2:88:1b:2f:1b:8a:34:da:a6:0d:
3b:5b:33:0b:d3:ca:bd:15:ed:50:a8:0c:d2:b6:e4:1e:ba:22:
06:b5:e7:c4:81:66:9b:e5:b2:9a:81:4d:68:ac:78:4c:1f:3d:
bc:cc:92:17:4b:30:39:40:01:58:c4:fa:47:dc:8e:a7:8a:68:
bc:d0:26:50:06:4e:e2:6d:90:6e:34:b0:50:d0:83:a0:12:bb:
43:5f:2f:ff:8c:70:1a:58:f6:e6:eb:5c:e4:34:1e:e7:8a:7c:
5b:de:0e:ba:2b:33:23:8c:ee:82:21:47:ec:bd:dc:4c:40:c9:
5f:df:24:d3:03:2d:73:3e:b3:2a:7d:2a:d7:01:c6:bc:23:e4:
eb:9f:06:2d:c5:3e:58:a5:98:35:a2:36:2b:55:56:51:05:ab:
73:67:17:01:05:10:78:f5:06:26:ff:3a:81:69:e3:9e:ad:87:
73:87:48:d3:37:c2:3f:36:ee:e5:f3:f3:fa:a8:6c:1e:24:b5:
55:e4:8f:b3
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICEo0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTgy
NEM1NTUyMjhCMjhCNjk4RERFNzdCQzFBREQwRTI4MDdCODZCOTAeFw0yNTA1MjMx
MTM3MzlaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDM0OUU4MTM2NTJCOEM2
Q0NGNkE1NkI3QThFMUY1MzQ1Qjc2NkI3MEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCkyovdnMcanWRYxqlJ74g64w2X8PukeKLl3odSschR2q+x9M5g
HA27ZgrFTUsL2I06gtisZS5yJXgwt0nAD3LrSd5P9DFTSDC4+mzVlivtF4clCq5Y
ukYTQohZCtUdNdUnk1XbNPWHBD1p2vl7QhNobBO9nakU4S/4ocCyatkyuMjJolFL
5nyjBVucWndlJUvILQgWEljNY+aB6SPI+6KrkELJCK/wacltP8aIdoCDRtno3t9O
0fmUImTl8queXmir/Lb7GBdGfE2lo8u8LlF6JVCaRh9uLsVIPrvbqwR4MR+yzSDQ
r7SI81yxFqsWBaEGZntXi8J7UvUGswG+Op7HAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUNJ6BNlK4xsz2pWt6jh9TRbdmtwowHwYDVR0jBBgwFoAUmCTFVSKLKLaY3ed7
wa3Q4oB7hrkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjUv
bUNURlZTS0xLTGFZM2VkN3dhM1E0b0I3aHJrLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9tQ1RGVlNLTEtMYVkzZWQ3d2EzUTRvQjdocmsuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC82NS9OSjZCTmxLNHhzejJwV3Q2
amg5VFJiZG10d28ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
eIi4MA0GCSqGSIb3DQEBCwUAA4IBAQDBPjWzRuRcS1Gtt5xEOi98KnHouN22c+X5
UNBLRwsq1VLC0O6h0KSZxTjVYqRbTlCh24dGtQkk4isoVhRXVtKIGy8bijTapg07
WzML08q9Fe1QqAzStuQeuiIGtefEgWab5bKagU1orHhMHz28zJIXSzA5QAFYxPpH
3I6nimi80CZQBk7ibZBuNLBQ0IOgErtDXy//jHAaWPbm61zkNB7ninxb3g66KzMj
jO6CIUfsvdxMQMlf3yTTAy1zPrMqfSrXAca8I+TrnwYtxT5YpZg1ojYrVVZRBatz
ZxcBBRB49QYm/zqBaeOerYdzh0jTN8I/Nu7l8/P6qGweJLVV5I+z
-----END CERTIFICATE-----
Generated at Wed Jun 4 03:17:07 2025 by rpki-client