Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/656/nsUhg10ALNcOLwzb7ZK6S80CZ7o.roa
File: nsUhg10ALNcOLwzb7ZK6S80CZ7o.roa (raw, json)
Hash identifier: tzx/Pgs9abSF+uG8pAxr0ZAmgG6hG/gRwaPP+1wjsRI=
Subject key identifier: 9E:C5:21:83:5D:00:2C:D7:0E:2F:0C:DB:ED:92:BA:4B:CD:02:67:BA
Certificate issuer: /CN=64DC20D9612C5B77499A6D223A652B2E38B11647
Certificate serial: 1787
Authority key identifier: 64:DC:20:D9:61:2C:5B:77:49:9A:6D:22:3A:65:2B:2E:38:B1:16:47
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZNwg2WEsW3dJmm0iOmUrLjixFkc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/nsUhg10ALNcOLwzb7ZK6S80CZ7o.roa
Signing time: Fri 17 Jan 2025 01:28:19 +0000
ROA not before: Fri 17 Jan 2025 01:28:19 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 45090
IP address blocks: 124.220.0.0/14 maxlen: 24
175.178.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6023 (0x1787)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64DC20D9612C5B77499A6D223A652B2E38B11647
Validity
Not Before: Jan 17 01:28:19 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=9EC521835D002CD70E2F0CDBED92BA4BCD0267BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:81:e8:10:44:fd:7f:49:89:63:e3:09:61:2e:
7c:e3:53:0a:28:82:98:ab:6d:ff:91:cd:83:75:4c:
1e:b8:4d:b0:aa:b4:41:18:f1:b4:60:6e:f9:3f:f9:
43:be:ef:0b:a1:23:42:0d:be:53:a3:79:14:8f:62:
d1:8d:b5:8b:a5:bf:ef:20:8f:72:9f:74:27:b1:3b:
b2:84:6f:47:68:83:2f:7d:a3:47:52:99:e8:f9:45:
4a:cd:e2:08:fc:4a:39:76:7d:24:57:4d:0b:9d:26:
54:40:88:a8:68:a9:ad:41:b7:99:59:fc:5b:28:cf:
93:f4:73:3a:fc:b1:40:3d:48:58:64:b9:3e:c1:00:
4e:78:64:81:ef:27:28:60:55:70:36:f1:0e:9f:44:
76:ff:db:09:8e:0a:52:1c:6f:c0:14:89:e1:5f:01:
f9:10:8e:78:06:d4:fa:73:b5:9b:9c:c1:34:79:35:
1b:a9:30:01:00:06:50:81:ae:0e:8f:fd:83:5d:66:
1e:9f:e0:12:95:82:3c:13:0a:1d:b2:73:98:63:15:
1c:95:28:c2:33:eb:ee:8d:9c:86:25:aa:ce:5b:2b:
8e:ed:f6:8a:e4:49:0c:0c:19:da:35:e5:17:45:4e:
b6:fc:07:1d:37:f8:08:f3:40:c0:46:64:68:bc:0d:
02:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C5:21:83:5D:00:2C:D7:0E:2F:0C:DB:ED:92:BA:4B:CD:02:67:BA
X509v3 Authority Key Identifier:
keyid:64:DC:20:D9:61:2C:5B:77:49:9A:6D:22:3A:65:2B:2E:38:B1:16:47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/ZNwg2WEsW3dJmm0iOmUrLjixFkc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZNwg2WEsW3dJmm0iOmUrLjixFkc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/nsUhg10ALNcOLwzb7ZK6S80CZ7o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.220.0.0/14
175.178.0.0/16
Signature Algorithm: sha256WithRSAEncryption
23:18:b9:2c:1b:60:b5:46:51:b9:6e:3b:a0:9a:5d:86:49:82:
22:eb:05:fa:f7:cc:1b:f1:f4:fb:79:cf:0a:70:de:e8:df:41:
e9:09:a1:85:9c:ec:44:86:0a:c5:00:c2:9c:2c:b2:e6:b9:b0:
1e:c5:75:d4:b8:6f:b9:55:7f:a7:c0:b8:91:2f:6f:3f:e8:bc:
59:91:2f:5f:87:81:03:d0:74:b0:38:74:af:b7:c8:65:7b:03:
59:97:99:ff:d7:d1:7b:b4:0a:b2:d3:3e:f4:e6:05:a6:4a:b8:
a9:12:69:ac:2f:93:32:90:57:a7:f3:b7:c9:f0:6b:bf:37:bc:
fb:83:3a:ab:66:df:07:ed:2e:48:2e:4a:f2:33:08:4d:64:81:
13:9c:56:bb:8e:17:5d:80:b6:e9:1c:c7:a7:8a:43:6c:b7:c1:
63:45:2c:79:21:7a:ab:75:e1:ba:54:bb:ca:21:5f:fe:de:1f:
b6:9a:00:58:38:49:31:fc:fa:65:63:e2:96:5e:16:2b:44:f9:
b1:21:94:44:c4:91:59:c0:f9:f1:6c:15:35:67:a8:48:f3:06:
3f:57:47:d8:82:25:0d:94:09:b4:5a:05:0d:46:1a:ce:0c:46:
6f:95:b6:4d:c8:86:b4:16:2a:d5:da:8d:1d:77:33:ef:0e:a0:
59:c6:5d:c8
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgICF4cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjRE
QzIwRDk2MTJDNUI3NzQ5OUE2RDIyM0E2NTJCMkUzOEIxMTY0NzAeFw0yNTAxMTcw
MTI4MTlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDlFQzUyMTgzNUQwMDJD
RDcwRTJGMENEQkVEOTJCQTRCQ0QwMjY3QkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDrgegQRP1/SYlj4wlhLnzjUwoogpirbf+RzYN1TB64TbCqtEEY
8bRgbvk/+UO+7wuhI0INvlOjeRSPYtGNtYulv+8gj3KfdCexO7KEb0dogy99o0dS
mej5RUrN4gj8Sjl2fSRXTQudJlRAiKhoqa1Bt5lZ/Fsoz5P0czr8sUA9SFhkuT7B
AE54ZIHvJyhgVXA28Q6fRHb/2wmOClIcb8AUieFfAfkQjngG1PpztZucwTR5NRup
MAEABlCBrg6P/YNdZh6f4BKVgjwTCh2yc5hjFRyVKMIz6+6NnIYlqs5bK47t9ork
SQwMGdo15RdFTrb8Bx03+AjzQMBGZGi8DQIVAgMBAAGjggH1MIIB8TAdBgNVHQ4E
FgQUnsUhg10ALNcOLwzb7ZK6S80CZ7owHwYDVR0jBBgwFoAUZNwg2WEsW3dJmm0i
OmUrLjixFkcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjU2
L1pOd2cyV0VzVzNkSm1tMGlPbVVyTGppeEZrYy5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvWk53ZzJXRXNXM2RKbW0waU9tVXJMaml4RmtjLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjU2L25zVWhnMTBBTE5jT0x3
emI3Wks2UzgwQ1o3by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwIwYIKwYBBQUHAQcBAf8EFDASMBAEAgABMAoD
AwJ83AMDAK+yMA0GCSqGSIb3DQEBCwUAA4IBAQAjGLksG2C1RlG5bjugml2GSYIi
6wX698wb8fT7ec8KcN7o30HpCaGFnOxEhgrFAMKcLLLmubAexXXUuG+5VX+nwLiR
L28/6LxZkS9fh4ED0HSwOHSvt8hlewNZl5n/19F7tAqy0z705gWmSripEmmsL5My
kFen87fJ8Gu/N7z7gzqrZt8H7S5ILkryMwhNZIETnFa7jhddgLbpHMenikNst8Fj
RSx5IXqrdeG6VLvKIV/+3h+2mgBYOEkx/PplY+KWXhYrRPmxIZRExJFZwPnxbBU1
Z6hI8wY/V0fYgiUNlAm0WgUNRhrODEZvlbZNyIa0FirV2o0ddzPvDqBZxl3I
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:32:41 2025 by rpki-client