Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/890/_V_7ixByiVG1pjZi1mDw4b4VxpI.roa
File: _V_7ixByiVG1pjZi1mDw4b4VxpI.roa (raw, json)
Hash identifier: XyMDQBmqSSFJJTqxQXZg0E/WbwlH0Rpqj7jDNMHguZw=
Subject key identifier: FD:5F:FB:8B:10:72:89:51:B5:A6:36:62:D6:60:F0:E1:BE:15:C6:92
Certificate issuer: /CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E
Certificate serial: 08A7
Authority key identifier: 0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/_V_7ixByiVG1pjZi1mDw4b4VxpI.roa
Signing time: Tue 17 Dec 2024 06:24:28 +0000
ROA not before: Tue 17 Dec 2024 06:24:28 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 63567
IP address blocks: 43.248.80.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2215 (0x8a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0EE863AC570AEEA1F930BEA5E76AAE7DD553804E
Validity
Not Before: Dec 17 06:24:28 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=FD5FFB8B10728951B5A63662D660F0E1BE15C692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:b2:fd:36:59:6c:1e:9b:66:7c:4e:f7:a3:
f0:32:c6:47:38:2f:c8:fb:54:32:dc:84:67:a7:70:
9d:e5:e1:61:40:66:29:d6:d4:cb:62:47:1c:75:d3:
15:4d:3e:9c:e0:b6:28:97:a3:d5:4b:5e:01:9b:50:
41:7f:10:93:e9:e9:e2:96:ab:8f:65:ad:62:2a:b3:
4c:db:a3:b1:47:8b:ed:86:51:b6:33:b5:d1:ec:03:
cb:ef:bd:1b:fb:a8:08:37:06:03:b6:8e:7d:6c:ec:
ea:24:3d:05:5c:2a:e1:ba:b3:9b:98:4a:b1:be:50:
f6:8d:67:76:b2:eb:41:54:86:c6:18:cf:46:a1:bb:
44:0e:dc:51:74:34:63:87:69:69:8e:96:d8:3d:0c:
3a:ba:ca:7c:84:09:b2:5c:98:82:69:a1:88:55:06:
16:55:a5:4e:6d:a5:b2:07:d1:3d:3d:96:49:1a:4a:
c5:0d:e0:95:88:32:c5:c7:84:42:38:11:c4:7d:d4:
4c:c0:d3:d0:8e:e6:62:6c:5d:00:96:69:a7:7c:40:
1a:ae:dc:c8:c2:5a:e1:4f:c8:6f:b5:62:af:fa:1d:
87:2d:25:02:cd:e6:73:f6:b0:b6:54:88:79:83:8e:
0f:a3:6c:10:38:78:30:f4:4d:5d:89:fd:df:c6:e8:
36:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5F:FB:8B:10:72:89:51:B5:A6:36:62:D6:60:F0:E1:BE:15:C6:92
X509v3 Authority Key Identifier:
keyid:0E:E8:63:AC:57:0A:EE:A1:F9:30:BE:A5:E7:6A:AE:7D:D5:53:80:4E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/DuhjrFcK7qH5ML6l52qufdVTgE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DuhjrFcK7qH5ML6l52qufdVTgE4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/_V_7ixByiVG1pjZi1mDw4b4VxpI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.248.80.0/20
Signature Algorithm: sha256WithRSAEncryption
a2:86:cb:3d:7a:56:6c:1b:11:05:f5:07:54:87:98:41:51:cf:
f9:65:78:9c:4a:d2:a2:01:e4:16:bb:76:d0:ad:de:37:53:ea:
66:fc:89:86:f2:b2:e4:82:a7:3b:ab:5f:e9:c3:72:51:d9:84:
fb:f1:1e:cc:57:ce:89:e6:c3:18:99:ab:8c:62:73:d1:13:de:
c9:14:c1:99:63:51:c6:c4:2e:28:1f:39:10:f1:01:17:48:c5:
59:9b:32:f5:65:69:37:46:f5:7f:c8:f5:83:ec:25:75:0e:3d:
45:e0:09:7a:92:0b:14:bb:ca:fa:9c:3d:7d:15:f3:e0:92:86:
6e:d8:e9:97:d3:89:26:52:d2:db:2c:2d:27:7d:27:dc:38:ee:
a7:6c:fb:38:7e:9b:1d:72:03:0b:c1:ad:2f:e3:48:53:23:d4:
d3:e6:34:62:aa:83:49:4a:6d:f5:e2:f5:f7:70:b2:9a:f5:55:
e2:90:39:d6:a9:4a:e0:8f:c3:6a:c2:da:e1:0a:5c:d6:a6:06:
3b:68:0b:67:5f:31:eb:6a:f7:9c:11:fb:73:7f:07:84:03:c1:
f6:4f:6b:7c:1d:1c:78:b1:b2:4d:cb:76:65:38:5e:23:6e:b2:
b1:36:02:91:24:f7:dc:d4:ff:b1:7f:ae:f4:38:79:93:13:2f:
36:e1:f7:3c
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICCKcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEVF
ODYzQUM1NzBBRUVBMUY5MzBCRUE1RTc2QUFFN0RENTUzODA0RTAeFw0yNDEyMTcw
NjI0MjhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEZENUZGQjhCMTA3Mjg5
NTFCNUE2MzY2MkQ2NjBGMEUxQkUxNUM2OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0h7L9NllsHptmfE73o/Ayxkc4L8j7VDLchGencJ3l4WFAZinW
1MtiRxx10xVNPpzgtiiXo9VLXgGbUEF/EJPp6eKWq49lrWIqs0zbo7FHi+2GUbYz
tdHsA8vvvRv7qAg3BgO2jn1s7OokPQVcKuG6s5uYSrG+UPaNZ3ay60FUhsYYz0ah
u0QO3FF0NGOHaWmOltg9DDq6ynyECbJcmIJpoYhVBhZVpU5tpbIH0T09lkkaSsUN
4JWIMsXHhEI4EcR91EzA09CO5mJsXQCWaad8QBqu3MjCWuFPyG+1Yq/6HYctJQLN
5nP2sLZUiHmDjg+jbBA4eDD0TV2J/d/G6DZDAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU/V/7ixByiVG1pjZi1mDw4b4VxpIwHwYDVR0jBBgwFoAUDuhjrFcK7qH5ML6l
52qufdVTgE4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODkw
L0R1aGpyRmNLN3FINU1MNmw1MnF1ZmRWVGdFNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvRHVoanJGY0s3cUg1TUw2bDUycXVmZFZUZ0U0LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODkwL19WXzdpeEJ5aVZHMXBq
WmkxbUR3NGI0VnhwSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAQr+FAwDQYJKoZIhvcNAQELBQADggEBAKKGyz16VmwbEQX1B1SHmEFRz/lleJxK
0qIB5Ba7dtCt3jdT6mb8iYbysuSCpzurX+nDclHZhPvxHsxXzonmwxiZq4xic9ET
3skUwZljUcbELigfORDxARdIxVmbMvVlaTdG9X/I9YPsJXUOPUXgCXqSCxS7yvqc
PX0V8+CShm7Y6ZfTiSZS0tssLSd9J9w47qds+zh+mx1yAwvBrS/jSFMj1NPmNGKq
g0lKbfXi9fdwspr1VeKQOdapSuCPw2rC2uEKXNamBjtoC2dfMetq95wR+3N/B4QD
wfZPa3wdHHixsk3LdmU4XiNusrE2ApEk99zU/7F/rvQ4eZMTLzbh9zw=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:35:09 2025 by rpki-client