Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/6VJ3I9gVxrNq254SurBMn_yI6JQ.roa
File: 6VJ3I9gVxrNq254SurBMn_yI6JQ.roa (raw, json)
Hash identifier: jTtbej68JJYLVVqe7IYv305BXe6aBAlCRrv+Mr3w7to=
Subject key identifier: E9:52:77:23:D8:15:C6:B3:6A:DB:9E:12:BA:B0:4C:9F:FC:88:E8:94
Certificate issuer: /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial: 1569
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/6VJ3I9gVxrNq254SurBMn_yI6JQ.roa
Signing time: Fri 17 Jan 2025 01:27:42 +0000
ROA not before: Fri 17 Jan 2025 01:27:42 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 2914
IP address blocks: 180.223.232.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5481 (0x1569)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
Validity
Not Before: Jan 17 01:27:42 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=E9527723D815C6B36ADB9E12BAB04C9FFC88E894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2c:38:01:64:58:68:a5:a5:f1:8e:8f:bf:56:
89:91:ad:9f:ea:1a:97:4e:5c:fb:e5:27:38:b1:3c:
7b:38:b7:7a:3d:15:d7:55:e9:8f:89:b4:19:ff:66:
70:00:6f:aa:68:5e:17:ec:c6:09:4c:8f:43:58:c9:
05:e7:fc:07:eb:77:c1:c4:fa:41:3b:8b:b3:36:c7:
95:0f:1a:84:67:37:5b:6b:9a:89:0c:37:b1:81:48:
3a:a4:b3:84:e4:92:8a:0a:91:19:99:4c:86:ba:63:
23:57:a4:2f:59:ca:ae:30:f9:32:2c:85:fa:df:e1:
43:1a:60:22:9e:1d:c6:67:c4:47:0a:17:e6:ba:7d:
83:63:20:d0:ea:82:ed:e3:99:f0:8f:9b:ea:08:19:
5e:e4:97:53:42:c9:b7:37:b8:43:71:8d:ad:61:66:
68:c8:94:b8:b0:9b:d2:0a:06:52:17:8f:c2:b6:dd:
5f:d9:5e:56:d2:cb:ca:e4:d6:07:98:d6:96:40:6a:
11:6e:f0:69:94:27:9a:3e:54:0b:93:aa:b3:f8:a9:
d0:5b:19:8c:82:f9:f6:d0:c6:8c:3a:b5:08:c5:1f:
1b:20:ba:7b:d3:0e:16:f3:7c:aa:85:46:17:6f:41:
9b:cd:65:42:83:0a:99:f3:00:be:07:be:7a:43:da:
be:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:52:77:23:D8:15:C6:B3:6A:DB:9E:12:BA:B0:4C:9F:FC:88:E8:94
X509v3 Authority Key Identifier:
keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/6VJ3I9gVxrNq254SurBMn_yI6JQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.223.232.0/21
Signature Algorithm: sha256WithRSAEncryption
71:01:bb:9d:56:85:ee:a1:8f:6b:f8:6b:ee:a3:2b:e1:1e:41:
1b:61:ec:2c:4c:59:2b:cd:f3:53:82:06:55:a8:19:9a:e9:49:
b1:4b:0a:51:33:e6:da:f3:76:ba:48:43:1c:27:f2:bd:da:13:
62:b1:78:fd:70:0c:cf:5a:97:bd:90:76:eb:ad:52:01:86:2e:
a2:92:66:a4:3a:1b:6f:0e:45:f8:1a:ec:a8:13:3c:51:06:b2:
0c:94:28:3a:7a:2d:df:2f:93:bc:19:a2:9b:52:82:be:09:b2:
e0:1c:a8:95:87:3e:c1:ac:e9:d0:13:c4:d0:b3:38:44:e0:2a:
7e:bf:8e:8c:c8:7c:ab:14:59:bf:f2:e8:f5:f2:71:a9:9b:05:
1d:d1:03:fa:41:07:79:58:b5:64:6b:50:47:d6:e3:25:9e:23:
0c:f3:6f:f0:1b:ae:9e:2d:4b:0b:c4:6e:f4:26:dc:0b:e9:9f:
26:d3:26:30:f4:38:82:18:17:a5:26:03:85:e8:4b:01:a8:d0:
b4:e5:74:d1:17:1a:8a:b2:1f:46:78:1b:4f:e5:c8:7f:a9:3f:
85:3c:55:3e:88:7b:01:02:ba:2b:95:e5:51:9d:4b:3c:66:5c:
0b:60:94:c9:a9:7c:92:f7:0b:09:a8:fb:87:60:b3:b7:ec:bd:
3c:5b:fc:c0
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICFWkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw
QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yNTAxMTcw
MTI3NDJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEU5NTI3NzIzRDgxNUM2
QjM2QURCOUUxMkJBQjA0QzlGRkM4OEU4OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDgLDgBZFhopaXxjo+/VomRrZ/qGpdOXPvlJzixPHs4t3o9FddV
6Y+JtBn/ZnAAb6poXhfsxglMj0NYyQXn/Afrd8HE+kE7i7M2x5UPGoRnN1trmokM
N7GBSDqks4TkkooKkRmZTIa6YyNXpC9Zyq4w+TIshfrf4UMaYCKeHcZnxEcKF+a6
fYNjINDqgu3jmfCPm+oIGV7kl1NCybc3uENxja1hZmjIlLiwm9IKBlIXj8K23V/Z
XlbSy8rk1geY1pZAahFu8GmUJ5o+VAuTqrP4qdBbGYyC+fbQxow6tQjFHxsgunvT
DhbzfKqFRhdvQZvNZUKDCpnzAL4HvnpD2r6bAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQU6VJ3I9gVxrNq254SurBMn/yI6JQwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD
IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz
MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvNlZKM0k5Z1Z4ck5x
MjU0U3VyQk1uX3lJNkpRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA7Tf6DANBgkqhkiG9w0BAQsFAAOCAQEAcQG7nVaF7qGPa/hr7qMr4R5BG2Hs
LExZK83zU4IGVagZmulJsUsKUTPm2vN2ukhDHCfyvdoTYrF4/XAMz1qXvZB2661S
AYYuopJmpDobbw5F+BrsqBM8UQayDJQoOnot3y+TvBmim1KCvgmy4ByolYc+wazp
0BPE0LM4ROAqfr+OjMh8qxRZv/Lo9fJxqZsFHdED+kEHeVi1ZGtQR9bjJZ4jDPNv
8Buuni1LC8Ru9CbcC+mfJtMmMPQ4ghgXpSYDhehLAajQtOV00RcairIfRngbT+XI
f6k/hTxVPoh7AQK6K5XlUZ1LPGZcC2CUyal8kvcLCaj7h2Czt+y9PFv8wA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:35:34 2025 by rpki-client