Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/YMG8FMcf58p5E-MgE2YagPtL8i4.roa
File: YMG8FMcf58p5E-MgE2YagPtL8i4.roa (raw, json)
Hash identifier: A+vnDbISNONVCYDKKfy2MsLgNiCajHx4bRqCkfq54eY=
Subject key identifier: 60:C1:BC:14:C7:1F:E7:CA:79:13:E3:20:13:66:1A:80:FB:4B:F2:2E
Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial: 305E
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/YMG8FMcf58p5E-MgE2YagPtL8i4.roa
Signing time: Sun 30 Mar 2025 19:58:18 +0000
ROA not before: Sun 30 Mar 2025 19:58:18 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 134762
IP address blocks: 43.226.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12382 (0x305e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Validity
Not Before: Mar 30 19:58:18 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=60C1BC14C71FE7CA7913E32013661A80FB4BF22E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:23:12:8a:c7:70:79:b1:e4:17:e9:0d:78:32:
bc:00:14:e1:ca:aa:97:10:13:72:10:5f:99:c6:34:
f5:5e:3f:1b:aa:89:82:59:0c:0a:84:b6:0d:3f:1c:
88:55:b6:28:e4:cc:c4:e3:95:d6:9f:07:64:69:68:
3d:0f:ba:b5:06:96:f2:b2:d1:14:63:97:62:fb:0d:
03:37:c2:22:5c:17:9a:5c:6e:38:dc:b8:57:02:ce:
1b:be:1e:11:00:7a:c9:2b:b3:b2:09:89:fd:38:87:
ab:20:e5:a7:e7:ad:d4:61:8f:63:a0:03:98:42:6d:
97:91:76:c1:c3:0f:03:a1:b6:6b:32:46:2a:15:36:
4b:c2:b0:73:9a:78:72:14:61:24:a4:3a:27:ec:12:
0d:6c:c4:b2:4b:47:96:19:95:3c:f0:51:d6:65:b2:
44:67:64:a9:eb:91:37:41:e3:bf:ab:80:db:40:9d:
11:a5:b6:16:70:91:25:24:36:30:5f:cd:18:04:b7:
7c:94:65:0c:9f:72:bc:ba:cc:f5:c3:4e:3d:a1:55:
27:02:23:96:a3:b1:8f:c7:d6:91:6b:16:f4:41:bc:
9b:a3:dd:0d:8c:24:07:f8:4c:1c:ee:b7:76:57:40:
8f:a5:93:5c:66:46:b9:43:73:c5:e9:11:36:ad:c9:
cf:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C1:BC:14:C7:1F:E7:CA:79:13:E3:20:13:66:1A:80:FB:4B:F2:2E
X509v3 Authority Key Identifier:
keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/YMG8FMcf58p5E-MgE2YagPtL8i4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.53.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:6b:f9:05:c6:f5:46:66:ae:38:d9:b0:7d:8e:c7:91:87:62:
09:58:c4:1c:8c:96:f0:e2:bd:78:8c:42:72:46:c7:42:da:8a:
05:ed:81:9f:78:9b:59:c8:99:0a:5e:07:3b:93:88:e5:3f:fa:
5f:5b:94:c9:5a:15:05:9c:84:36:c4:5e:fe:2b:23:ab:d4:53:
b0:51:e7:19:ee:c6:71:9c:c7:3e:cc:a2:49:9a:7f:15:40:1e:
e2:07:cf:3d:be:6b:80:57:2a:b6:1f:74:0e:53:8f:a5:f0:ba:
1b:2a:2e:a3:c7:b2:b0:1a:d4:64:49:8a:d3:5d:a1:a9:c1:4c:
65:e3:d6:53:51:e8:2d:58:6a:fb:d0:1e:75:3e:5e:6c:a4:20:
bf:ab:88:6c:e7:75:86:ac:cb:e7:e0:ed:40:b4:4f:c5:83:e1:
3f:93:2c:23:08:4a:ad:86:bf:3f:cf:b0:6f:48:c0:df:bb:45:
16:ba:f5:2a:fe:97:f6:37:25:f3:ee:ca:15:d1:7d:00:e2:62:
3e:bb:e1:e7:a4:7c:f5:fe:22:4c:d2:1f:31:73:18:fd:74:e9:
78:64:37:f0:bd:4f:0a:1a:c0:90:fc:94:56:e9:ce:6f:52:1b:
ac:27:13:2f:a1:a3:27:ba:4f:c7:98:6a:8c:85:49:84:2c:a8:
fd:a6:be:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:32:34 2025 by rpki-client