Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1228/Qdei9_N6gYFeB9P4BYAzXx06Gx8.roa
File: Qdei9_N6gYFeB9P4BYAzXx06Gx8.roa (raw, json)
Hash identifier: w7IhF+zoU5FHkNjdrIOyGr7CZ60sPx9IS3Iww0TUKxs=
Subject key identifier: 41:D7:A2:F7:F3:7A:81:81:5E:07:D3:F8:05:80:33:5F:1D:3A:1B:1F
Certificate issuer: /CN=ADD2726DD6FF9F5A459AE5B0A9EE8E7DDFC7F07C
Certificate serial: 25
Authority key identifier: AD:D2:72:6D:D6:FF:9F:5A:45:9A:E5:B0:A9:EE:8E:7D:DF:C7:F0:7C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/Qdei9_N6gYFeB9P4BYAzXx06Gx8.roa
Signing time: Mon 19 May 2025 09:18:52 +0000
ROA not before: Mon 19 May 2025 09:18:52 +0000
ROA not after: Sat 16 May 2026 10:06:17 +0000
asID: 4134
IP address blocks: 43.254.192.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADD2726DD6FF9F5A459AE5B0A9EE8E7DDFC7F07C
Validity
Not Before: May 19 09:18:52 2025 GMT
Not After : May 16 10:06:17 2026 GMT
Subject: CN=41D7A2F7F37A81815E07D3F80580335F1D3A1B1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:81:55:28:da:f4:87:85:28:7f:74:1c:1b:48:
f7:50:0e:9d:22:f5:27:85:16:81:30:ba:f0:0e:18:
fe:8d:be:50:c6:83:d0:85:cc:03:82:6f:d6:ed:dc:
4b:d3:24:b5:32:89:dc:3d:cb:e9:87:2a:5e:ff:29:
eb:a6:81:3a:66:ac:f1:3f:3a:07:88:f5:ec:5d:61:
77:e6:30:3d:d9:61:d9:e8:ef:93:d9:5a:22:89:69:
02:06:40:a8:f5:3e:3d:c6:e7:7b:e1:21:56:76:a4:
9c:c3:40:18:0e:c0:a0:dd:8c:bc:a7:f8:d3:db:a7:
5e:71:16:6f:be:df:aa:3f:23:2c:6d:57:36:7c:6f:
35:26:b2:7c:08:9a:fd:f0:86:67:16:84:9e:73:4d:
58:7f:93:72:95:a3:01:09:6b:6f:38:60:a8:39:4a:
44:17:88:ed:1f:37:8f:70:5d:08:90:7a:13:e1:ab:
2e:1f:fa:8a:75:cb:55:ea:e0:b4:98:be:b2:16:07:
3a:89:36:15:f5:99:71:20:22:3b:dc:94:b4:31:ff:
39:12:a1:b6:c4:14:3f:51:1c:ed:bd:8f:3c:fe:45:
b5:2f:fe:b6:cb:95:d7:f5:fa:09:97:bd:4b:32:a9:
a1:7c:34:37:17:a0:67:9d:ea:f7:65:6e:c4:3f:0f:
14:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D7:A2:F7:F3:7A:81:81:5E:07:D3:F8:05:80:33:5F:1D:3A:1B:1F
X509v3 Authority Key Identifier:
keyid:AD:D2:72:6D:D6:FF:9F:5A:45:9A:E5:B0:A9:EE:8E:7D:DF:C7:F0:7C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/Qdei9_N6gYFeB9P4BYAzXx06Gx8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.254.192.0/22
Signature Algorithm: sha256WithRSAEncryption
26:e3:65:75:81:15:7d:73:3b:c0:ee:ce:58:6a:b7:ee:d0:9a:
b4:7c:8d:d1:f0:5f:b1:b9:f7:e3:a0:36:7a:11:1b:5e:38:c1:
8c:e9:5c:7d:bc:ab:42:74:13:0c:77:57:f0:8e:2a:79:eb:63:
7f:cd:ee:62:c4:ae:58:30:06:07:d4:19:12:54:07:d1:16:f2:
cb:22:cc:e7:f1:2a:64:1c:f5:0a:90:6a:9e:4d:64:68:a0:29:
13:d2:d3:e7:bc:a7:e6:8f:c0:85:fa:53:94:8f:5e:25:58:75:
36:3c:01:1b:35:2c:52:48:f9:31:54:ee:c7:72:d8:0d:69:42:
6e:d7:f8:d6:88:c0:69:29:34:8b:3a:8d:9c:f2:19:f7:12:6c:
84:7f:e9:b7:5c:62:99:58:59:0a:6c:3f:9b:6a:09:f9:03:b6:
23:4c:f1:8b:a6:d1:73:78:31:56:66:64:19:10:be:cf:37:f6:
0a:1d:1f:22:aa:5e:15:4f:6a:2c:d9:98:fb:43:a9:ab:10:3e:
4d:5e:5b:4f:8e:e4:0e:e6:47:4e:05:09:17:c8:ff:6c:9d:1e:
f3:c8:70:bf:b9:aa:d3:04:99:da:15:7a:f0:6a:7e:ba:4d:b6:
55:74:ae:55:61:f0:06:f5:a4:2a:4a:18:d4:8e:6e:d2:97:cb:
fd:1b:b7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:54:20 2025 by rpki-client