Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/iJVJvcnXuKNFI9GtmipWn6rh_nU.roa
File: iJVJvcnXuKNFI9GtmipWn6rh_nU.roa (raw, json)
Hash identifier: xqpd9HPnh8PjBNNRGO/tkvxC87Vb3FHNaEPqdhWxxt8=
Subject key identifier: 88:95:49:BD:C9:D7:B8:A3:45:23:D1:AD:9A:2A:56:9F:AA:E1:FE:75
Certificate issuer: /CN=2DE14F2AC7F0238137052EAA315C5BD643134022
Certificate serial: 1D86
Authority key identifier: 2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/iJVJvcnXuKNFI9GtmipWn6rh_nU.roa
Signing time: Thu 03 Apr 2025 08:53:55 +0000
ROA not before: Thu 03 Apr 2025 08:53:55 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 132168
IP address blocks: 202.160.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7558 (0x1d86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DE14F2AC7F0238137052EAA315C5BD643134022
Validity
Not Before: Apr 3 08:53:55 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=889549BDC9D7B8A34523D1AD9A2A569FAAE1FE75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:81:5e:f4:b5:6c:f6:fb:d8:cc:6b:36:25:c6:
f8:04:90:35:b4:63:6a:69:95:cd:c7:d6:43:49:a2:
8e:55:ec:ca:a6:cd:c4:13:d6:3e:e6:7c:c8:46:68:
5a:fb:d7:95:ee:e7:1f:97:9a:24:57:1a:dd:e9:50:
7b:d8:b1:39:3c:c6:76:be:45:3f:43:41:88:4d:19:
a7:17:b3:73:d0:c0:ef:87:fc:b8:1b:3b:28:e7:9f:
4b:38:04:24:eb:9d:17:43:b5:8a:33:eb:73:ae:e2:
83:6b:3f:a5:4d:72:fa:cf:79:ec:02:bb:81:58:34:
f5:c9:da:9b:4c:68:e6:3c:27:58:9f:9e:b8:b2:f4:
39:cd:f0:72:47:55:ba:99:a0:7a:92:8b:87:6a:cb:
62:53:89:0b:25:52:41:3a:c5:40:75:84:77:07:f6:
f3:ce:48:fe:f0:3c:f8:9e:b5:dc:b0:54:02:2f:02:
46:32:1f:19:79:b1:23:92:24:20:d6:c4:6e:46:10:
2e:0d:ee:b9:19:16:1b:24:97:fe:39:96:ac:d2:c9:
67:0f:e0:93:6c:7e:de:17:64:c3:23:b9:fb:39:1f:
05:d6:02:72:08:1b:9a:b1:cf:80:39:15:d1:0b:e0:
c5:c2:47:e7:ad:b1:e1:4c:d9:08:87:da:08:a7:b3:
bd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:95:49:BD:C9:D7:B8:A3:45:23:D1:AD:9A:2A:56:9F:AA:E1:FE:75
X509v3 Authority Key Identifier:
keyid:2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/LeFPKsfwI4E3BS6qMVxb1kMTQCI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/iJVJvcnXuKNFI9GtmipWn6rh_nU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.160.140.0/22
Signature Algorithm: sha256WithRSAEncryption
06:c9:66:13:94:9a:e2:82:5e:fa:49:5c:e5:86:5d:cf:aa:76:
a9:d0:db:a9:0b:48:0c:4f:bb:83:9e:8e:db:66:91:a5:dd:43:
65:89:40:56:af:8d:2f:c0:17:b4:ec:59:6c:c0:9c:3e:82:ab:
82:c4:61:ab:e3:f8:17:ba:e5:96:9e:ca:a1:11:4f:50:ad:96:
2b:9d:23:2c:33:64:a8:4a:65:01:19:4a:08:fb:6f:51:77:a9:
fb:43:77:32:27:71:1b:6c:28:f6:85:e2:98:d0:93:0c:bf:fe:
fb:43:7d:b7:1e:d3:57:59:ef:9c:cc:9c:f8:db:3e:e8:61:fd:
c1:d5:ac:a6:e6:f4:7b:5b:76:9e:32:d3:e3:34:20:ea:1c:42:
e3:2b:4e:4f:08:cc:79:c8:43:2a:d6:75:da:ae:94:06:ff:91:
7c:11:c3:41:45:c9:99:f8:da:03:05:b5:d3:b0:94:6c:2a:89:
2f:ca:f1:7f:e3:27:cf:70:56:7e:fd:0c:86:4b:c2:9e:ff:3a:
72:9d:a2:88:62:e3:80:52:6e:14:b3:bb:ad:38:f5:57:cc:ae:
7a:42:b2:7f:59:d8:28:30:9f:01:a8:1b:ed:cb:d0:2a:6f:7e:
8b:61:e9:99:d7:50:44:90:a3:02:6c:f9:46:96:72:3a:5b:a5:
65:1d:50:46
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICHYYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkRF
MTRGMkFDN0YwMjM4MTM3MDUyRUFBMzE1QzVCRDY0MzEzNDAyMjAeFw0yNTA0MDMw
ODUzNTVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDg4OTU0OUJEQzlEN0I4
QTM0NTIzRDFBRDlBMkE1NjlGQUFFMUZFNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5gV70tWz2+9jMazYlxvgEkDW0Y2pplc3H1kNJoo5V7MqmzcQT
1j7mfMhGaFr715Xu5x+XmiRXGt3pUHvYsTk8xna+RT9DQYhNGacXs3PQwO+H/Lgb
Oyjnn0s4BCTrnRdDtYoz63Ou4oNrP6VNcvrPeewCu4FYNPXJ2ptMaOY8J1ifnriy
9DnN8HJHVbqZoHqSi4dqy2JTiQslUkE6xUB1hHcH9vPOSP7wPPietdywVAIvAkYy
Hxl5sSOSJCDWxG5GEC4N7rkZFhskl/45lqzSyWcP4JNsft4XZMMjufs5HwXWAnII
G5qxz4A5FdEL4MXCR+etseFM2QiH2gins70zAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUiJVJvcnXuKNFI9GtmipWn6rh/nUwHwYDVR0jBBgwFoAULeFPKsfwI4E3BS6q
MVxb1kMTQCIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4
Ny9MZUZQS3Nmd0k0RTNCUzZxTVZ4YjFrTVRRQ0kuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0xlRlBLc2Z3STRFM0JTNnFNVnhiMWtNVFFDSS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODcvaUpWSnZjblh1S05G
STlHdG1pcFduNnJoX25VLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAsqgjDANBgkqhkiG9w0BAQsFAAOCAQEABslmE5Sa4oJe+klc5YZdz6p2qdDb
qQtIDE+7g56O22aRpd1DZYlAVq+NL8AXtOxZbMCcPoKrgsRhq+P4F7rllp7KoRFP
UK2WK50jLDNkqEplARlKCPtvUXep+0N3MidxG2wo9oXimNCTDL/++0N9tx7TV1nv
nMyc+Ns+6GH9wdWspub0e1t2njLT4zQg6hxC4ytOTwjMechDKtZ12q6UBv+RfBHD
QUXJmfjaAwW107CUbCqJL8rxf+Mnz3BWfv0MhkvCnv86cp2iiGLjgFJuFLO7rTj1
V8yuekKyf1nYKDCfAagb7cvQKm9+i2HpmddQRJCjAmz5RpZyOlulZR1QRg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:27:56 2025 by rpki-client