Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1534/a5-Wj5I5VErLom0wWrhgv_mtkeo.roa
File: a5-Wj5I5VErLom0wWrhgv_mtkeo.roa (raw, json)
Hash identifier: I2TkRHnUDrdO/PPyUrEFoEYsEfVK7Siv+A+c5NtH1PM=
Subject key identifier: 6B:9F:96:8F:92:39:54:4A:CB:A2:6D:30:5A:B8:60:BF:F9:AD:91:EA
Certificate issuer: /CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E
Certificate serial: 21AF
Authority key identifier: 0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/a5-Wj5I5VErLom0wWrhgv_mtkeo.roa
Signing time: Fri 17 Jan 2025 01:28:34 +0000
ROA not before: Fri 17 Jan 2025 01:28:34 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 59067
IP address blocks: 202.89.232.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8623 (0x21af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E
Validity
Not Before: Jan 17 01:28:34 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=6B9F968F9239544ACBA26D305AB860BFF9AD91EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:19:f9:cd:63:80:f1:2e:cb:98:72:e5:ee:f9:
62:12:6d:2f:cd:7d:7f:71:e0:1c:50:b0:f7:59:30:
f6:ce:ec:28:74:82:21:2d:29:58:2e:23:2b:04:74:
db:04:de:ce:67:06:0a:28:05:0d:2e:1c:81:87:98:
26:b4:5e:ec:f9:a1:2c:0b:47:c1:04:3b:50:4f:74:
f1:bf:c5:d1:c8:94:b5:c9:a7:0c:0e:8b:c9:1c:8c:
4c:52:71:3a:14:2a:5c:11:9a:de:16:64:7f:de:17:
cc:d3:7f:a5:d6:1e:e0:33:c6:4e:ba:ac:9b:be:70:
f5:5b:69:d5:ad:91:5c:03:ee:80:ba:e8:0b:c6:8a:
cb:e1:0c:4a:3e:42:13:e8:5a:f5:19:70:28:34:ad:
96:e4:85:bb:4b:80:09:ee:87:d0:4f:53:b5:5c:d2:
f2:a0:48:8d:58:27:08:b5:3c:2a:4b:6e:b3:af:d5:
4d:6f:da:83:e8:94:41:b4:1a:be:46:75:a1:18:29:
dc:a0:7e:48:fc:4d:8e:f7:c6:a8:24:a8:92:5f:81:
7d:11:bb:cd:17:fe:4a:d6:c9:70:a8:23:15:e0:b0:
f5:cb:58:ea:75:d6:b1:60:e1:3d:11:4e:5b:3c:5d:
d5:e8:04:80:de:1b:17:ad:5f:d0:c9:ea:99:6a:f0:
67:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:9F:96:8F:92:39:54:4A:CB:A2:6D:30:5A:B8:60:BF:F9:AD:91:EA
X509v3 Authority Key Identifier:
keyid:0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/a5-Wj5I5VErLom0wWrhgv_mtkeo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.89.232.0/21
Signature Algorithm: sha256WithRSAEncryption
b9:82:17:4c:8e:4d:9e:01:51:0f:5d:1b:f2:ce:fa:8a:28:5f:
ec:86:5d:4c:04:fd:17:13:50:15:16:84:be:14:c8:e1:ac:c6:
f0:db:c3:7e:92:a2:e1:79:94:8d:ca:f6:34:a2:10:a5:35:06:
42:af:cc:c5:9e:ed:83:95:e1:3f:32:92:8a:86:37:6f:17:3e:
89:2b:9f:8b:bc:2f:47:4f:54:68:9d:0e:52:a1:c5:6f:74:73:
98:10:ee:02:c3:7e:36:9f:55:9d:70:3a:04:33:2a:e5:cf:c5:
f4:f4:e9:8b:96:86:53:0f:31:d7:6e:65:2d:60:30:98:47:1b:
be:40:15:8b:a1:70:4f:ff:e7:f0:40:3a:f9:0f:0d:ef:15:5c:
2f:a2:e6:8d:4e:68:ca:c5:04:0d:1b:ae:97:60:61:c0:43:6e:
80:03:ea:06:3b:b7:8a:3b:30:2e:b4:ed:aa:74:20:2f:37:8d:
83:5a:1f:4e:b4:b0:69:ba:86:7e:2b:5a:28:2d:6a:4e:0e:fb:
f3:e5:ac:d8:0b:92:e4:f4:d1:c2:71:b9:6f:26:a3:09:e0:91:
65:07:84:dd:34:5a:66:fe:20:d4:00:4f:9f:84:b9:05:eb:d2:
5a:80:26:4e:bc:d6:97:b0:17:95:0e:ff:02:83:0b:a7:e5:10:
be:b6:50:79
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICIa8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMENB
NEYxODNDNjU5RUQ1N0ZCNDZENTlBRDU0ODNENkZFOUIzNEY0RTAeFw0yNTAxMTcw
MTI4MzRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDZCOUY5NjhGOTIzOTU0
NEFDQkEyNkQzMDVBQjg2MEJGRjlBRDkxRUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOGfnNY4DxLsuYcuXu+WISbS/NfX9x4BxQsPdZMPbO7Ch0giEt
KVguIysEdNsE3s5nBgooBQ0uHIGHmCa0Xuz5oSwLR8EEO1BPdPG/xdHIlLXJpwwO
i8kcjExScToUKlwRmt4WZH/eF8zTf6XWHuAzxk66rJu+cPVbadWtkVwD7oC66AvG
isvhDEo+QhPoWvUZcCg0rZbkhbtLgAnuh9BPU7Vc0vKgSI1YJwi1PCpLbrOv1U1v
2oPolEG0Gr5GdaEYKdygfkj8TY73xqgkqJJfgX0Ru80X/krWyXCoIxXgsPXLWOp1
1rFg4T0RTls8XdXoBIDeGxetX9DJ6plq8Ge3AgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUa5+Wj5I5VErLom0wWrhgv/mtkeowHwYDVR0jBBgwFoAUDKTxg8ZZ7Vf7RtWa
1Ug9b+mzT04wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTUz
NC9ES1R4ZzhaWjdWZjdSdFdhMVVnOWItbXpUMDQuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0RLVHhnOFpaN1ZmN1J0V2ExVWc5Yi1telQwNC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1MzQvYTUtV2o1STVWRXJM
b20wd1dyaGd2X210a2VvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA8pZ6DANBgkqhkiG9w0BAQsFAAOCAQEAuYIXTI5NngFRD10b8s76iihf7IZd
TAT9FxNQFRaEvhTI4azG8NvDfpKi4XmUjcr2NKIQpTUGQq/MxZ7tg5XhPzKSioY3
bxc+iSufi7wvR09UaJ0OUqHFb3RzmBDuAsN+Np9VnXA6BDMq5c/F9PTpi5aGUw8x
125lLWAwmEcbvkAVi6FwT//n8EA6+Q8N7xVcL6LmjU5oysUEDRuul2BhwENugAPq
Bju3ijswLrTtqnQgLzeNg1ofTrSwabqGfitaKC1qTg778+Ws2AuS5PTRwnG5byaj
CeCRZQeE3TRaZv4g1ABPn4S5BevSWoAmTrzWl7AXlQ7/AoMLp+UQvrZQeQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 00:18:45 2025 by rpki-client