Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1228/POtqJ0oKTtsrS5BXUBYVZTFyZec.roa
File: POtqJ0oKTtsrS5BXUBYVZTFyZec.roa (raw, json)
Hash identifier: KwfrIu+e8tXxpjaV7sqVgbxk/X/sxyazVqL3LxZuIrU=
Subject key identifier: 3C:EB:6A:27:4A:0A:4E:DB:2B:4B:90:57:50:16:15:65:31:72:65:E7
Certificate issuer: /CN=ADD2726DD6FF9F5A459AE5B0A9EE8E7DDFC7F07C
Certificate serial: 24
Authority key identifier: AD:D2:72:6D:D6:FF:9F:5A:45:9A:E5:B0:A9:EE:8E:7D:DF:C7:F0:7C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/POtqJ0oKTtsrS5BXUBYVZTFyZec.roa
Signing time: Mon 19 May 2025 09:18:52 +0000
ROA not before: Mon 19 May 2025 09:18:52 +0000
ROA not after: Sat 16 May 2026 10:06:17 +0000
asID: 137697
IP address blocks: 43.254.192.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADD2726DD6FF9F5A459AE5B0A9EE8E7DDFC7F07C
Validity
Not Before: May 19 09:18:52 2025 GMT
Not After : May 16 10:06:17 2026 GMT
Subject: CN=3CEB6A274A0A4EDB2B4B905750161565317265E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:29:3f:cd:ae:23:a0:7c:a0:cf:97:b3:7e:97:
b9:db:62:e2:95:4c:a7:a4:2f:d7:50:55:2a:c4:b5:
fc:fd:50:8b:7b:e4:7c:80:50:0a:bb:02:25:68:24:
e8:15:65:8c:ab:28:7e:28:45:d4:e7:25:ec:d1:28:
d4:9b:3b:99:db:08:d9:f7:61:5f:8c:5d:bd:e1:a4:
45:ce:7c:c9:1d:80:ec:85:80:b4:24:3b:ff:14:07:
29:95:2a:24:e5:29:e7:ef:8d:73:5f:c9:e0:76:e4:
2b:40:1f:4b:a1:f6:93:ed:b9:90:4f:df:5c:ed:1e:
75:21:6e:87:45:93:5c:49:b2:78:a5:d4:94:18:c6:
6f:8b:fd:0e:ea:b3:f5:43:24:42:4f:2c:55:bb:2a:
86:bd:44:f9:e8:5b:8b:52:7f:20:6e:78:5e:5d:93:
b8:d6:14:a8:5d:cc:2a:d0:08:3a:45:09:bd:30:5c:
b6:d6:60:5d:23:62:c7:67:da:6f:61:b9:a9:64:f4:
80:13:66:d6:a8:da:4e:3d:a9:a7:13:6f:a6:dd:0d:
a8:36:22:33:51:ae:3f:d4:81:b5:7d:3d:39:a6:93:
e6:99:cb:f1:c7:f0:e6:a8:50:01:51:d8:7c:cc:59:
6b:25:8d:ea:7b:ef:ec:7f:c8:0a:15:ca:09:cd:05:
e7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:EB:6A:27:4A:0A:4E:DB:2B:4B:90:57:50:16:15:65:31:72:65:E7
X509v3 Authority Key Identifier:
keyid:AD:D2:72:6D:D6:FF:9F:5A:45:9A:E5:B0:A9:EE:8E:7D:DF:C7:F0:7C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/POtqJ0oKTtsrS5BXUBYVZTFyZec.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.254.192.0/22
Signature Algorithm: sha256WithRSAEncryption
96:45:45:59:2e:25:94:a3:46:7f:d0:96:a8:a9:5f:ef:64:66:
0c:d5:26:e0:a3:b2:36:bb:a9:bf:2d:fe:ba:09:47:02:cc:77:
68:ab:50:a9:1b:a1:c1:eb:7a:9e:cc:a9:9b:e8:45:6e:61:5b:
1a:8d:45:67:b8:10:a2:4a:91:d0:81:55:67:b9:ad:02:fc:0e:
2f:ce:68:ea:53:5e:49:ab:bc:53:56:98:59:b1:b9:de:9c:a1:
94:e2:7b:80:be:f0:9b:23:9d:8f:64:8e:ad:ab:70:08:dd:be:
db:fa:a4:2e:1f:8c:99:93:46:be:a4:61:08:d7:5a:68:25:56:
9a:0b:64:f0:0c:22:4f:64:b3:4a:40:48:a1:09:85:2c:b3:5a:
3e:1b:b9:a0:b0:fc:f8:7c:2a:2a:d5:7d:22:b3:a8:19:f0:21:
20:10:0c:92:fe:f2:81:39:e4:09:89:a8:4d:cd:46:2b:09:21:
87:e0:56:89:93:7c:45:fd:13:54:42:a0:8d:df:b4:7e:e6:0c:
b3:7f:bd:c2:94:a1:d8:a7:22:47:58:aa:d9:4d:b3:f0:c1:b4:
5a:c9:ac:3c:85:8d:c6:d4:b6:49:72:31:bf:3e:00:2f:28:57:
c9:b4:26:71:eb:35:b3:d3:ef:f7:25:7a:79:9a:e6:a9:0a:08:
34:3c:d7:0a
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgIBJDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBREQy
NzI2REQ2RkY5RjVBNDU5QUU1QjBBOUVFOEU3RERGQzdGMDdDMB4XDTI1MDUxOTA5
MTg1MloXDTI2MDUxNjEwMDYxN1owMzExMC8GA1UEAxMoM0NFQjZBMjc0QTBBNEVE
QjJCNEI5MDU3NTAxNjE1NjUzMTcyNjVFNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALgpP82uI6B8oM+Xs36Xudti4pVMp6Qv11BVKsS1/P1Qi3vkfIBQ
CrsCJWgk6BVljKsofihF1Ocl7NEo1Js7mdsI2fdhX4xdveGkRc58yR2A7IWAtCQ7
/xQHKZUqJOUp5++Nc1/J4HbkK0AfS6H2k+25kE/fXO0edSFuh0WTXEmyeKXUlBjG
b4v9Duqz9UMkQk8sVbsqhr1E+ehbi1J/IG54Xl2TuNYUqF3MKtAIOkUJvTBcttZg
XSNix2fab2G5qWT0gBNm1qjaTj2ppxNvpt0NqDYiM1GuP9SBtX09OaaT5pnL8cfw
5qhQAVHYfMxZayWN6nvv7H/IChXKCc0F570CAwEAAaOCAfMwggHvMB0GA1UdDgQW
BBQ862onSgpO2ytLkFdQFhVlMXJl5zAfBgNVHSMEGDAWgBSt0nJt1v+fWkWa5bCp
7o5938fwfDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xMjI4
L3JkSnliZGJfbjFwRm11V3dxZTZPZmRfSDhIdy5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvcmRKeWJkYl9uMXBGbXVXd3FlNk9mZF9IOEh3LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIyOC9QT3RxSjBvS1R0c3JT
NUJYVUJZVlpURnlaZWMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQCK/7AMA0GCSqGSIb3DQEBCwUAA4IBAQCWRUVZLiWUo0Z/0JaoqV/vZGYM1Sbg
o7I2u6m/Lf66CUcCzHdoq1CpG6HB63qezKmb6EVuYVsajUVnuBCiSpHQgVVnua0C
/A4vzmjqU15Jq7xTVphZsbnenKGU4nuAvvCbI52PZI6tq3AI3b7b+qQuH4yZk0a+
pGEI11poJVaaC2TwDCJPZLNKQEihCYUss1o+G7mgsPz4fCoq1X0is6gZ8CEgEAyS
/vKBOeQJiahNzUYrCSGH4FaJk3xF/RNUQqCN37R+5gyzf73ClKHYpyJHWKrZTbPw
wbRayaw8hY3G1LZJcjG/PgAvKFfJtCZx6zWz0+/3JXp5muapCgg0PNcK
-----END CERTIFICATE-----
Generated at Sun Jul 20 18:59:34 2025 by rpki-client