Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/Dhn_bw4xhJB691KP5jCNHDjKRbs.roa
File: Dhn_bw4xhJB691KP5jCNHDjKRbs.roa (raw, json)
Hash identifier: l/MtGIE5yzeoJWXqYNU8VMp88JGLtM3CJinlD5DtYWg=
Subject key identifier: 0E:19:FF:6F:0E:31:84:90:7A:F7:52:8F:E6:30:8D:1C:38:CA:45:BB
Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial: 305D
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/Dhn_bw4xhJB691KP5jCNHDjKRbs.roa
Signing time: Sun 30 Mar 2025 19:58:18 +0000
ROA not before: Sun 30 Mar 2025 19:58:18 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 134762
IP address blocks: 43.226.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12381 (0x305d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Validity
Not Before: Mar 30 19:58:18 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=0E19FF6F0E3184907AF7528FE6308D1C38CA45BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9e:ee:a9:f4:45:fa:5f:b7:29:cb:70:44:a8:
35:5b:e8:de:4d:31:c7:20:b9:b0:ed:ff:b3:e2:7a:
0b:e3:75:b6:80:e1:e5:68:cd:d1:8f:a8:30:87:a9:
8b:78:d6:1e:1d:22:95:b7:8d:bc:c5:16:6f:f4:30:
05:df:48:96:43:47:bb:64:26:60:32:c1:7f:5d:ef:
26:f3:84:0f:1a:ab:49:bc:85:36:d4:96:bc:b0:4f:
98:76:eb:48:b3:4f:59:4f:9b:96:16:fe:bc:d4:bc:
60:44:66:c0:a2:1a:e5:d4:f1:c2:2e:49:0f:9b:07:
c2:92:1a:25:e8:d2:d7:b8:79:da:c3:78:dd:e3:3a:
6d:e3:17:ae:6c:fd:23:6a:43:50:f2:95:1e:b6:83:
77:71:e0:d4:e9:d0:f3:7d:4a:aa:21:d4:4d:84:31:
a7:1c:31:a9:20:9e:49:c1:c7:1d:6c:0a:6b:5b:cc:
c1:8b:a2:7d:96:45:00:81:7b:ae:f4:b6:c5:13:02:
e5:89:25:16:0e:29:a0:e8:d5:29:fc:2a:36:bb:93:
a4:ef:10:32:0c:83:6a:69:52:48:f9:a6:7c:e5:06:
2d:26:3e:bb:a8:15:7d:81:8c:9f:31:69:b9:e7:7f:
58:1d:3a:9b:20:9e:36:0f:be:f5:45:37:a9:95:3f:
d4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:19:FF:6F:0E:31:84:90:7A:F7:52:8F:E6:30:8D:1C:38:CA:45:BB
X509v3 Authority Key Identifier:
keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/Dhn_bw4xhJB691KP5jCNHDjKRbs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.54.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:22:df:e7:5e:88:a3:cf:1f:18:31:97:28:0e:84:5e:7e:d4:
ad:bc:6a:df:bb:e4:c8:0a:5e:78:dd:ac:94:12:4d:60:d8:1b:
11:85:63:55:64:3f:39:e3:0a:c3:6e:e0:7a:98:bf:7f:f6:58:
f5:59:cd:9e:f2:c0:d3:f3:3a:ee:a5:09:0e:25:07:0f:6f:20:
89:e7:88:04:91:c3:4a:e1:f8:61:99:b3:79:9b:00:06:f6:e6:
28:bb:24:11:b8:cb:f9:9e:ce:a9:5d:be:6e:9e:d0:83:78:b0:
02:72:01:05:ca:a1:0c:14:86:41:9a:b9:05:e9:d1:12:4f:d4:
70:f0:60:ea:53:9e:d4:1d:93:d1:2b:fb:21:6e:b5:4a:68:1f:
c4:57:0f:fa:7c:61:a1:20:b8:8e:65:3d:e0:bf:19:c5:4c:b2:
ab:6f:8c:a2:9b:bb:32:19:57:34:45:15:0f:5d:e3:b4:dc:85:
95:20:70:87:e4:ca:bb:8c:57:69:6d:85:2a:c0:71:fc:e7:d6:
1e:d8:48:67:0a:81:8f:1a:d0:dd:bd:ed:bd:dc:ea:74:2d:86:
3b:03:89:b7:d0:c8:a1:26:50:a4:40:0a:a2:0d:61:b1:99:24:
0b:fa:6e:e1:6e:5e:4b:cf:ca:ca:fa:6a:41:65:19:2d:c2:b0:
9d:a3:d2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:44:48 2025 by rpki-client