Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/247/ssHneZR2tutGoYiDaFJkMHkw5h4.roa
File: ssHneZR2tutGoYiDaFJkMHkw5h4.roa (raw, json)
Hash identifier: NHf6oPDk6In6hvk17izBm3FLhO7pRX7U6ADygpi2VBU=
Subject key identifier: B2:C1:E7:79:94:76:B6:EB:46:A1:88:83:68:52:64:30:79:30:E6:1E
Certificate issuer: /CN=FD27EB32A94DA8CBCB9D7D343FE471DF35C85003
Certificate serial: 207F
Authority key identifier: FD:27:EB:32:A9:4D:A8:CB:CB:9D:7D:34:3F:E4:71:DF:35:C8:50:03
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_SfrMqlNqMvLnX00P-Rx3zXIUAM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/ssHneZR2tutGoYiDaFJkMHkw5h4.roa
Signing time: Wed 09 Apr 2025 07:08:30 +0000
ROA not before: Wed 09 Apr 2025 07:08:30 +0000
ROA not after: Thu 09 Apr 2026 06:40:07 +0000
asID: 54994
IP address blocks: 203.130.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8319 (0x207f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD27EB32A94DA8CBCB9D7D343FE471DF35C85003
Validity
Not Before: Apr 9 07:08:30 2025 GMT
Not After : Apr 9 06:40:07 2026 GMT
Subject: CN=B2C1E7799476B6EB46A18883685264307930E61E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1c:f6:ac:8d:c7:46:54:4f:d3:b7:7c:38:ff:
2a:7f:3e:2c:72:27:58:8b:d2:28:36:4d:02:61:7b:
aa:db:d4:22:e4:3f:d5:19:31:d7:0d:81:56:8e:db:
9c:e2:fb:15:be:a8:d4:97:e1:09:59:58:4c:43:a5:
07:e4:16:4f:8a:ec:01:86:33:c6:91:76:4d:37:14:
06:2e:7d:c0:9a:5b:43:a7:b8:61:ab:13:55:af:cc:
f3:03:4a:fa:0b:fe:9a:ec:07:80:2f:bc:98:18:25:
48:e1:a1:83:ab:12:c4:f4:ff:06:24:c2:d3:fc:9c:
8b:24:c4:a8:66:d7:31:fe:03:3e:82:ac:23:ee:15:
6a:94:4c:4e:0e:74:84:1e:0a:75:90:55:26:43:a7:
ec:35:53:74:6b:c4:71:3a:99:6c:3a:23:6f:76:3c:
fd:44:20:08:7c:76:9e:4d:ff:4b:82:65:e9:e5:8a:
85:5c:6d:8f:c1:f3:f9:15:82:50:13:77:d7:01:9b:
89:6b:cc:12:17:19:92:49:c9:9d:db:04:bf:75:24:
d1:1b:81:ac:d2:39:92:37:1b:4f:16:86:71:b4:fa:
56:9e:88:1a:4a:7f:59:95:de:53:25:e6:f5:a3:b0:
5a:82:98:ed:6a:07:f8:cb:bc:cf:5d:8c:0f:e9:4e:
5f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C1:E7:79:94:76:B6:EB:46:A1:88:83:68:52:64:30:79:30:E6:1E
X509v3 Authority Key Identifier:
keyid:FD:27:EB:32:A9:4D:A8:CB:CB:9D:7D:34:3F:E4:71:DF:35:C8:50:03
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/_SfrMqlNqMvLnX00P-Rx3zXIUAM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_SfrMqlNqMvLnX00P-Rx3zXIUAM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/ssHneZR2tutGoYiDaFJkMHkw5h4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.130.50.0/24
Signature Algorithm: sha256WithRSAEncryption
93:cc:51:0a:a1:da:9c:65:95:91:63:09:8e:90:06:6a:1c:10:
07:f3:2a:7f:e4:aa:cf:bd:4a:51:5d:ca:1a:4b:a9:e6:c4:e7:
e7:af:c3:3d:c7:66:ad:a0:53:f9:7d:24:12:a4:9f:65:6d:53:
17:67:75:32:f3:e3:6b:e6:ad:23:18:6c:1f:bb:cc:eb:57:f7:
f4:ca:92:e7:88:6e:96:af:fa:c7:d3:23:b5:02:48:00:cc:fb:
d9:f2:37:ff:81:be:47:24:39:74:f0:8e:a7:10:93:ac:99:4b:
33:42:8c:54:15:26:bc:a3:9c:8b:c2:6f:ad:d3:dd:56:08:e5:
76:16:4d:c8:96:88:25:cc:80:96:4c:b8:06:0a:bb:e0:d4:10:
90:28:13:fe:fe:eb:3e:e7:91:f7:f8:99:39:09:e7:70:4b:c6:
41:95:fa:7d:f4:41:7a:71:a6:14:d0:8c:7a:77:69:0c:4f:3d:
48:8f:2c:96:e6:e7:15:5a:27:b7:98:1b:e6:69:91:e0:90:9c:
4c:1b:d5:3d:94:69:45:f0:df:c3:d8:0b:44:5c:96:c1:d3:a5:
22:6c:14:52:a4:07:b0:d6:ae:ec:dc:2b:5d:41:fc:55:93:32:
89:3d:b7:89:c8:dc:db:a8:b7:20:88:b3:f1:a1:9b:5f:a0:91:
5b:d6:fc:d4
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICIH8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkQy
N0VCMzJBOTREQThDQkNCOUQ3RDM0M0ZFNDcxREYzNUM4NTAwMzAeFw0yNTA0MDkw
NzA4MzBaFw0yNjA0MDkwNjQwMDdaMDMxMTAvBgNVBAMTKEIyQzFFNzc5OTQ3NkI2
RUI0NkExODg4MzY4NTI2NDMwNzkzMEU2MUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDdHPasjcdGVE/Tt3w4/yp/PixyJ1iL0ig2TQJhe6rb1CLkP9UZ
MdcNgVaO25zi+xW+qNSX4QlZWExDpQfkFk+K7AGGM8aRdk03FAYufcCaW0OnuGGr
E1WvzPMDSvoL/prsB4AvvJgYJUjhoYOrEsT0/wYkwtP8nIskxKhm1zH+Az6CrCPu
FWqUTE4OdIQeCnWQVSZDp+w1U3RrxHE6mWw6I292PP1EIAh8dp5N/0uCZenlioVc
bY/B8/kVglATd9cBm4lrzBIXGZJJyZ3bBL91JNEbgazSOZI3G08WhnG0+laeiBpK
f1mV3lMl5vWjsFqCmO1qB/jLvM9djA/pTl9NAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUssHneZR2tutGoYiDaFJkMHkw5h4wHwYDVR0jBBgwFoAU/SfrMqlNqMvLnX00
P+Rx3zXIUAMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjQ3
L19TZnJNcWxOcU12TG5YMDBQLVJ4M3pYSVVBTS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvX1Nmck1xbE5xTXZMblgwMFAtUngzelhJVUFNLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjQ3L3NzSG5lWlIydHV0R29Z
aURhRkprTUhrdzVoNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADLgjIwDQYJKoZIhvcNAQELBQADggEBAJPMUQqh2pxllZFjCY6QBmocEAfzKn/k
qs+9SlFdyhpLqebE5+evwz3HZq2gU/l9JBKkn2VtUxdndTLz42vmrSMYbB+7zOtX
9/TKkueIbpav+sfTI7UCSADM+9nyN/+BvkckOXTwjqcQk6yZSzNCjFQVJryjnIvC
b63T3VYI5XYWTciWiCXMgJZMuAYKu+DUEJAoE/7+6z7nkff4mTkJ53BLxkGV+n30
QXpxphTQjHp3aQxPPUiPLJbm5xVaJ7eYG+ZpkeCQnEwb1T2UaUXw38PYC0RclsHT
pSJsFFKkB7DWruzcK11B/FWTMok9t4nI3NuotyCIs/Ghm1+gkVvW/NQ=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:11:39 2025 by rpki-client