Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1212/WgrIRnAmsxWBO3TfjMU3y8eDt78.roa
File: WgrIRnAmsxWBO3TfjMU3y8eDt78.roa (raw, json)
Hash identifier: tiz5vTjFJ5BFKOBFmxtwDOUTL38Wd7N2mFJNr9UBYpk=
Subject key identifier: 5A:0A:C8:46:70:26:B3:15:81:3B:74:DF:8C:C5:37:CB:C7:83:B7:BF
Certificate issuer: /CN=2820258AB65FF61FD5D66D95964F48EFA35DCC86
Certificate serial: 0F6F
Authority key identifier: 28:20:25:8A:B6:5F:F6:1F:D5:D6:6D:95:96:4F:48:EF:A3:5D:CC:86
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KCAlirZf9h_V1m2Vlk9I76NdzIY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1212/WgrIRnAmsxWBO3TfjMU3y8eDt78.roa
Signing time: Tue 24 Sep 2024 00:22:13 +0000
ROA not before: Tue 24 Sep 2024 00:22:13 +0000
ROA not after: Sat 20 Sep 2025 07:41:26 +0000
asID: 149628
IP address blocks: 45.116.96.0/22 maxlen: 22
103.23.164.0/22 maxlen: 22
103.56.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3951 (0xf6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2820258AB65FF61FD5D66D95964F48EFA35DCC86
Validity
Not Before: Sep 24 00:22:13 2024 GMT
Not After : Sep 20 07:41:26 2025 GMT
Subject: CN=5A0AC8467026B315813B74DF8CC537CBC783B7BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:df:ab:a4:be:05:40:c8:dd:ec:a0:c2:b7:25:
ea:f2:e5:c4:ad:95:f8:4c:00:b1:9b:c1:0a:66:6d:
6e:a0:ab:7f:7d:bc:98:13:55:63:59:cc:82:4b:94:
93:78:5e:e5:49:5c:43:ab:2f:14:b9:bc:24:93:aa:
6e:bf:1e:f5:0c:92:af:72:3e:cc:45:a3:c3:1f:68:
43:85:1d:06:f0:65:eb:d5:eb:8f:07:62:c2:ac:7e:
e8:ea:58:28:90:06:c3:1f:8f:00:38:2a:0c:fd:e5:
a0:8e:6a:af:2c:8d:c4:4a:a4:6b:d7:13:48:ad:65:
e0:34:fc:7d:c0:16:0a:57:70:f5:cf:92:3e:f9:db:
6f:b6:48:e3:89:92:2b:d6:95:24:9f:76:bc:0b:43:
f5:8d:23:9a:50:25:a3:4f:d5:7d:77:88:6a:14:74:
2d:69:7c:7c:e2:63:88:06:58:85:07:65:75:89:e2:
42:85:11:5a:ed:78:5c:11:8e:77:2f:e7:eb:55:13:
a9:8c:43:5b:fb:72:00:26:9a:b6:d4:cf:b1:9a:e9:
db:15:0a:38:13:15:60:61:4d:05:bd:4b:d8:f2:8a:
64:34:7d:e9:f8:7f:70:77:aa:e1:38:54:c8:f9:cc:
e3:0c:f0:77:cd:f7:52:a9:ae:5b:cd:6a:70:93:3b:
d3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0A:C8:46:70:26:B3:15:81:3B:74:DF:8C:C5:37:CB:C7:83:B7:BF
X509v3 Authority Key Identifier:
keyid:28:20:25:8A:B6:5F:F6:1F:D5:D6:6D:95:96:4F:48:EF:A3:5D:CC:86
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1212/KCAlirZf9h_V1m2Vlk9I76NdzIY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KCAlirZf9h_V1m2Vlk9I76NdzIY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1212/WgrIRnAmsxWBO3TfjMU3y8eDt78.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.116.96.0/22
103.23.164.0/22
103.56.140.0/22
Signature Algorithm: sha256WithRSAEncryption
19:6d:c9:da:4f:e7:7d:d9:65:de:b6:40:f9:06:05:1e:86:50:
b9:42:bd:4a:8f:90:fd:54:9c:64:1b:e1:84:f1:2a:d0:81:45:
c3:f1:9f:99:26:48:46:50:77:98:b7:6f:34:04:bb:b5:b3:61:
8e:41:95:10:e6:5a:f0:23:27:87:08:18:d5:75:bf:bb:26:be:
aa:f5:04:47:b7:5b:25:0e:c3:92:08:91:e2:51:e3:7d:27:54:
50:74:36:d8:cf:a3:43:65:86:99:3f:82:b2:cb:c4:b2:72:23:
7c:e6:d5:ba:62:f0:8f:e0:fc:3f:11:c9:e6:f5:19:8f:32:8c:
c1:09:41:3d:64:f0:28:9f:cd:12:b8:f2:9d:94:43:f9:2e:5c:
3a:c3:b5:e0:6b:42:a7:0e:94:6e:16:5f:b3:f3:f9:bf:b8:b7:
62:fb:f9:f7:bf:4a:af:cc:7a:7c:d3:3e:30:2d:2c:44:97:3d:
a9:f4:0b:46:5d:5a:ce:97:22:ab:c0:68:03:ab:7b:e2:c1:b8:
78:e5:3a:15:58:32:4e:0f:49:29:29:cd:d7:dd:f0:dd:f5:32:
5b:eb:9f:38:1c:1b:4f:f0:49:d2:42:fe:57:72:19:a1:78:e4:
ce:59:51:fb:a5:bc:38:a8:52:b1:0e:1e:46:9d:c6:63:c9:1c:
eb:ac:2c:49
-----BEGIN CERTIFICATE-----
MIIE4zCCA8ugAwIBAgICD28wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjgy
MDI1OEFCNjVGRjYxRkQ1RDY2RDk1OTY0RjQ4RUZBMzVEQ0M4NjAeFw0yNDA5MjQw
MDIyMTNaFw0yNTA5MjAwNzQxMjZaMDMxMTAvBgNVBAMTKDVBMEFDODQ2NzAyNkIz
MTU4MTNCNzRERjhDQzUzN0NCQzc4M0I3QkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC436ukvgVAyN3soMK3Jery5cStlfhMALGbwQpmbW6gq399vJgT
VWNZzIJLlJN4XuVJXEOrLxS5vCSTqm6/HvUMkq9yPsxFo8MfaEOFHQbwZevV648H
YsKsfujqWCiQBsMfjwA4Kgz95aCOaq8sjcRKpGvXE0itZeA0/H3AFgpXcPXPkj75
22+2SOOJkivWlSSfdrwLQ/WNI5pQJaNP1X13iGoUdC1pfHziY4gGWIUHZXWJ4kKF
EVrteFwRjncv5+tVE6mMQ1v7cgAmmrbUz7Ga6dsVCjgTFWBhTQW9S9jyimQ0fen4
f3B3quE4VMj5zOMM8HfN91KprlvNanCTO9NJAgMBAAGjggH/MIIB+zAdBgNVHQ4E
FgQUWgrIRnAmsxWBO3TfjMU3y8eDt78wHwYDVR0jBBgwFoAUKCAlirZf9h/V1m2V
lk9I76NdzIYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIx
Mi9LQ0FsaXJaZjloX1YxbTJWbGs5STc2TmR6SVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0tDQWxpclpmOWhfVjFtMlZsazlJNzZOZHpJWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEyMTIvV2dySVJuQW1zeFdC
TzNUZmpNVTN5OGVEdDc4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEw
EgMEAi10YAMEAmcXpAMEAmc4jDANBgkqhkiG9w0BAQsFAAOCAQEAGW3J2k/nfdll
3rZA+QYFHoZQuUK9So+Q/VScZBvhhPEq0IFFw/GfmSZIRlB3mLdvNAS7tbNhjkGV
EOZa8CMnhwgY1XW/uya+qvUER7dbJQ7DkgiR4lHjfSdUUHQ22M+jQ2WGmT+CssvE
snIjfObVumLwj+D8PxHJ5vUZjzKMwQlBPWTwKJ/NErjynZRD+S5cOsO14GtCpw6U
bhZfs/P5v7i3Yvv5979Kr8x6fNM+MC0sRJc9qfQLRl1azpciq8BoA6t74sG4eOU6
FVgyTg9JKSnN193w3fUyW+ufOBwbT/BJ0kL+V3IZoXjkzllR+6W8OKhSsQ4eRp3G
Y8kc66wsSQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:38:44 2025 by rpki-client