Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/620/2GjMcAPIwQ9A3nYHTe17im5dKpk.roa
File: 2GjMcAPIwQ9A3nYHTe17im5dKpk.roa (raw, json)
Hash identifier: 8clIZ8TDnNT+D8EcevoDYRlpTbp3pyPMOB/ztKGT3EA=
Subject key identifier: D8:68:CC:70:03:C8:C1:0F:40:DE:76:07:4D:ED:7B:8A:6E:5D:2A:99
Certificate issuer: /CN=309C2A943B28DC0858C39B9208A1609C0973E49A
Certificate serial: 0240
Authority key identifier: 30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/2GjMcAPIwQ9A3nYHTe17im5dKpk.roa
Signing time: Thu 24 Apr 2025 08:50:27 +0000
ROA not before: Thu 24 Apr 2025 08:50:27 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 142132
IP address blocks: 202.46.41.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 576 (0x240)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=309C2A943B28DC0858C39B9208A1609C0973E49A
Validity
Not Before: Apr 24 08:50:27 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=D868CC7003C8C10F40DE76074DED7B8A6E5D2A99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:af:29:0c:ba:28:74:0a:9d:4b:4c:4d:80:b9:
4f:0f:bf:56:87:41:2a:44:0c:d7:2b:78:38:d0:2e:
79:a8:bd:bc:79:46:79:3e:9a:c3:9d:df:98:32:8f:
5f:c0:ba:e4:24:12:e7:62:d6:3a:66:ac:46:c1:96:
d7:64:73:f8:3a:92:5b:1b:2a:c7:d1:3f:2c:b0:4a:
d0:ae:d5:ac:0f:1c:c5:44:15:aa:9d:ba:2b:87:4f:
4e:d8:46:ea:4a:0e:fe:65:95:66:1a:e7:8b:dc:21:
4c:15:96:37:ff:61:d4:17:0f:7d:20:01:10:f2:9f:
a8:60:1a:72:af:b9:94:fb:ea:dd:b0:e6:68:d4:71:
f8:d5:b9:fd:94:a9:be:83:44:8f:60:d9:84:c7:9d:
9e:b7:04:ac:9b:1f:ab:97:76:64:87:11:0d:ce:e3:
d1:53:64:b1:03:cb:f0:ee:fd:2c:fc:da:4a:a1:c9:
44:a4:47:a6:a2:27:75:02:77:7e:fc:87:9e:ff:61:
e9:a9:b3:4c:30:bf:af:8d:1b:93:1b:ed:97:b6:6f:
52:c6:a2:f5:9b:6d:50:a2:35:f1:9f:86:b9:7c:7d:
b7:a4:d4:95:d6:c0:76:7d:07:a5:bf:35:65:70:39:
bf:64:a9:86:31:64:5d:2a:f9:e4:80:6f:16:4c:65:
26:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:68:CC:70:03:C8:C1:0F:40:DE:76:07:4D:ED:7B:8A:6E:5D:2A:99
X509v3 Authority Key Identifier:
keyid:30:9C:2A:94:3B:28:DC:08:58:C3:9B:92:08:A1:60:9C:09:73:E4:9A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/MJwqlDso3AhYw5uSCKFgnAlz5Jo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MJwqlDso3AhYw5uSCKFgnAlz5Jo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/620/2GjMcAPIwQ9A3nYHTe17im5dKpk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.46.41.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:ce:f4:13:5d:73:be:89:43:09:69:40:61:21:ea:63:97:2c:
48:7a:6a:71:92:60:d6:a9:4b:bf:54:3e:64:e9:bf:29:2d:95:
b2:5f:7b:04:b9:3c:38:db:a3:4d:46:54:3a:46:06:3c:97:80:
e9:2b:54:e2:e5:37:e5:64:68:ab:b3:97:74:5c:ff:ee:6e:3a:
a6:a3:f2:bf:ca:24:a4:78:45:2d:cf:f9:f7:f5:06:b4:03:29:
42:b8:aa:6e:ac:73:e7:fa:22:68:d0:0f:12:b0:ee:38:ee:65:
de:68:b8:8e:e5:52:8d:e4:94:bc:de:b7:0c:c9:49:4e:5a:78:
cf:3b:55:f0:d5:c4:72:2e:d8:64:3b:0e:b9:68:00:ad:7d:0b:
3b:6f:dc:f4:1d:91:20:b5:05:a4:a0:47:04:33:b3:43:ab:61:
82:63:24:d9:8a:6d:9e:94:31:62:56:f9:ed:1e:38:1f:54:e6:
70:b8:0d:33:4f:4e:79:ae:3f:a2:7a:9d:a4:f4:fa:60:81:c4:
11:8b:31:a1:fe:25:b9:44:99:67:a8:b3:95:d5:c4:37:50:ba:
72:48:66:76:4b:9c:7b:3c:99:00:c2:ac:29:1a:1b:40:e3:43:
2a:92:a4:04:d2:ab:fb:d9:e5:64:88:15:61:1e:77:31:2d:52:
bb:19:90:82
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICAkAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzA5
QzJBOTQzQjI4REMwODU4QzM5QjkyMDhBMTYwOUMwOTczRTQ5QTAeFw0yNTA0MjQw
ODUwMjdaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKEQ4NjhDQzcwMDNDOEMx
MEY0MERFNzYwNzRERUQ3QjhBNkU1RDJBOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBrykMuih0Cp1LTE2AuU8Pv1aHQSpEDNcreDjQLnmovbx5Rnk+
msOd35gyj1/AuuQkEudi1jpmrEbBltdkc/g6klsbKsfRPyywStCu1awPHMVEFaqd
uiuHT07YRupKDv5llWYa54vcIUwVljf/YdQXD30gARDyn6hgGnKvuZT76t2w5mjU
cfjVuf2Uqb6DRI9g2YTHnZ63BKybH6uXdmSHEQ3O49FTZLEDy/Du/Sz82kqhyUSk
R6aiJ3UCd378h57/Yemps0wwv6+NG5Mb7Ze2b1LGovWbbVCiNfGfhrl8fbek1JXW
wHZ9B6W/NWVwOb9kqYYxZF0q+eSAbxZMZSalAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU2GjMcAPIwQ9A3nYHTe17im5dKpkwHwYDVR0jBBgwFoAUMJwqlDso3AhYw5uS
CKFgnAlz5JowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIw
L01Kd3FsRHNvM0FoWXc1dVNDS0ZnbkFsejVKby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvTUp3cWxEc28zQWhZdzV1U0NLRmduQWx6NUpvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjIwLzJHak1jQVBJd1E5QTNu
WUhUZTE3aW01ZEtway5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADKLikwDQYJKoZIhvcNAQELBQADggEBANHO9BNdc76JQwlpQGEh6mOXLEh6anGS
YNapS79UPmTpvyktlbJfewS5PDjbo01GVDpGBjyXgOkrVOLlN+VkaKuzl3Rc/+5u
Oqaj8r/KJKR4RS3P+ff1BrQDKUK4qm6sc+f6ImjQDxKw7jjuZd5ouI7lUo3klLze
twzJSU5aeM87VfDVxHIu2GQ7DrloAK19Cztv3PQdkSC1BaSgRwQzs0OrYYJjJNmK
bZ6UMWJW+e0eOB9U5nC4DTNPTnmuP6J6naT0+mCBxBGLMaH+JblEmWeos5XVxDdQ
unJIZnZLnHs8mQDCrCkaG0DjQyqSpATSq/vZ5WSIFWEedzEtUrsZkII=
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:49 2025 by rpki-client on console.sobornost.net