Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/U4tECBVY0YH05JAeaOiWPC4eXWQ.roa
File: U4tECBVY0YH05JAeaOiWPC4eXWQ.roa (raw, json)
Hash identifier: xF9dkMK9CE5zZdxQIVxOfOAxVQI9tUzdQu3w2tYyTYs=
Subject key identifier: 53:8B:44:08:15:58:D1:81:F4:E4:90:1E:68:E8:96:3C:2E:1E:5D:64
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 1615
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/U4tECBVY0YH05JAeaOiWPC4eXWQ.roa
Signing time: Sun 16 Feb 2025 03:24:09 +0000
ROA not before: Sun 16 Feb 2025 03:24:09 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 18811
IP address blocks: 180.223.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5653 (0x1615)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Feb 16 03:24:09 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=538B44081558D181F4E4901E68E8963C2E1E5D64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:84:ae:3d:48:a7:fd:e1:95:3a:0d:23:24:9e:
47:8a:3d:fa:b9:89:73:2a:00:79:6d:6e:92:84:45:
83:72:fc:f4:54:f0:50:df:7c:b5:03:a8:64:20:75:
c1:ce:04:4a:0c:05:e4:52:65:d3:40:d4:45:dc:39:
1e:fe:4a:51:e4:4c:fc:7c:4e:11:07:0e:1c:32:ac:
a0:c2:79:52:f1:aa:ad:4d:d6:ce:3a:06:78:5c:0c:
d8:32:cf:99:5c:31:60:3b:f8:c7:2c:bf:6b:13:69:
06:5a:fc:e9:79:8b:a8:ca:4e:2b:86:c4:75:3f:7d:
72:b2:37:56:ec:22:c9:87:ec:b9:8a:fb:a2:41:00:
7f:b2:3e:bf:2e:8b:9d:ee:5f:9c:3d:02:d7:cb:93:
a1:56:6c:5d:74:90:04:39:9e:ec:ba:35:05:33:6e:
ed:ca:58:df:0b:fd:82:43:59:ae:1b:d5:8e:1f:14:
de:80:a0:bf:3e:a5:99:bb:4c:67:c7:ca:78:76:f7:
88:7b:fa:3e:80:4c:e5:34:f9:f6:55:0a:4d:52:93:
7c:65:9c:54:dc:59:b5:54:c5:58:c9:f4:e1:60:d5:
22:ba:1b:ac:72:79:ed:d8:a6:38:eb:5a:c1:67:02:
11:1e:3d:a1:9d:e1:8f:ed:65:78:f6:a2:bb:64:f0:
35:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8B:44:08:15:58:D1:81:F4:E4:90:1E:68:E8:96:3C:2E:1E:5D:64
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/U4tECBVY0YH05JAeaOiWPC4eXWQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.212.0/22
Signature Algorithm: sha256WithRSAEncryption
d5:e1:96:18:05:9b:dd:ca:23:be:4a:e2:a1:95:c6:e9:d2:6a:
8a:ad:b9:6d:50:4b:11:d0:1d:b7:cb:cb:23:f1:2e:7a:4e:dd:
ff:a8:a1:8e:ba:7d:f2:4f:3b:4e:8a:2e:c1:d6:a3:05:1f:27:
a5:74:30:18:6b:7c:24:73:07:5e:6e:9a:54:9b:a7:2e:3c:1f:
e8:b0:d8:79:81:96:75:fc:a1:89:25:05:44:a5:2b:38:a1:11:
4c:9d:81:5d:ca:14:77:5a:58:88:f1:3c:1f:b9:48:c9:20:9c:
b4:ee:ea:3c:fc:7b:ff:ac:28:3e:1e:30:f2:2e:55:06:ff:ee:
b5:ad:0f:de:9e:ee:28:7d:c3:d7:e8:ab:1a:f3:d9:4b:b7:e9:
cb:4f:95:63:e0:c4:ca:35:d1:3b:69:72:1d:d0:23:10:79:fa:
6d:5c:0f:9c:61:cf:34:17:1c:3e:cc:57:ba:a9:05:63:7e:14:
b4:95:e5:b0:b7:40:3b:ee:09:e7:2a:46:2d:9c:14:fc:8b:e5:
ea:c9:f4:3b:47:c3:b4:11:01:bf:3c:ab:cc:ad:dd:64:7c:18:
6c:36:88:60:56:b8:55:63:2c:23:ce:70:6d:83:38:d3:b7:64:
d6:c0:32:03:6b:59:e1:fa:ff:bf:8a:e0:48:17:6e:5a:f7:a4:
f8:51:2d:ac
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICFhUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw
QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTAyMTYw
MzI0MDlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDUzOEI0NDA4MTU1OEQx
ODFGNEU0OTAxRTY4RTg5NjNDMkUxRTVENjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDThK49SKf94ZU6DSMknkeKPfq5iXMqAHltbpKERYNy/PRU8FDf
fLUDqGQgdcHOBEoMBeRSZdNA1EXcOR7+SlHkTPx8ThEHDhwyrKDCeVLxqq1N1s46
BnhcDNgyz5lcMWA7+Mcsv2sTaQZa/Ol5i6jKTiuGxHU/fXKyN1bsIsmH7LmK+6JB
AH+yPr8ui53uX5w9AtfLk6FWbF10kAQ5nuy6NQUzbu3KWN8L/YJDWa4b1Y4fFN6A
oL8+pZm7TGfHynh294h7+j6ATOU0+fZVCk1Sk3xlnFTcWbVUxVjJ9OFg1SK6G6xy
ee3YpjjrWsFnAhEePaGd4Y/tZXj2ortk8DUdAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUU4tECBVY0YH05JAeaOiWPC4eXWQwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD
IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz
MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvVTR0RUNCVlkwWUgw
NUpBZWFPaVdQQzRlWFdRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEArTf1DANBgkqhkiG9w0BAQsFAAOCAQEA1eGWGAWb3cojvkrioZXG6dJqiq25
bVBLEdAdt8vLI/Euek7d/6ihjrp98k87ToouwdajBR8npXQwGGt8JHMHXm6aVJun
Ljwf6LDYeYGWdfyhiSUFRKUrOKERTJ2BXcoUd1pYiPE8H7lIySCctO7qPPx7/6wo
Ph4w8i5VBv/uta0P3p7uKH3D1+irGvPZS7fpy0+VY+DEyjXRO2lyHdAjEHn6bVwP
nGHPNBccPsxXuqkFY34UtJXlsLdAO+4J5ypGLZwU/Ivl6sn0O0fDtBEBvzyrzK3d
ZHwYbDaIYFa4VWMsI85wbYM407dk1sAyA2tZ4fr/v4rgSBduWvek+FEtrA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:19:25 2025 by rpki-client