Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/anp-YyII1qP02KSzjExf8JMBP14.roa
File: anp-YyII1qP02KSzjExf8JMBP14.roa (raw, json)
Hash identifier: LDrEAUpxfrXplmlZHdPW73KOeztvkoPpvrHPja1rErk=
Subject key identifier: 6A:7A:7E:63:22:08:D6:A3:F4:D8:A4:B3:8C:4C:5F:F0:93:01:3F:5E
Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial: 3065
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/anp-YyII1qP02KSzjExf8JMBP14.roa
Signing time: Sun 30 Mar 2025 19:58:21 +0000
ROA not before: Sun 30 Mar 2025 19:58:21 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 134762
IP address blocks: 43.227.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12389 (0x3065)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Validity
Not Before: Mar 30 19:58:21 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=6A7A7E632208D6A3F4D8A4B38C4C5FF093013F5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d7:69:d3:c8:9e:2a:e4:cc:70:47:e2:01:5e:
82:5f:c1:64:66:cc:23:d1:02:92:56:2c:77:23:bd:
5d:cf:c9:94:bf:8c:a7:c2:ea:f5:28:a3:af:fe:66:
af:fa:fd:a1:76:18:54:e8:fc:ef:4c:fa:8f:f6:f7:
a1:61:4f:b5:80:ca:5e:44:21:21:c1:3c:be:58:b4:
66:e8:c1:51:d4:cb:43:cd:2b:c7:00:08:70:92:b3:
7b:4f:f5:0e:30:6c:57:81:b8:69:9e:e9:4c:7f:cf:
79:b2:57:4c:69:e9:fc:99:b6:35:13:50:8d:41:ae:
ea:23:31:85:d6:c7:39:08:41:20:69:fe:61:43:5f:
f6:fa:5c:f3:4b:9d:45:91:d0:e0:5d:40:ff:67:24:
3b:cf:94:4a:47:e3:ed:fb:22:0a:1f:15:8e:96:da:
3f:44:dc:ba:de:f9:58:04:87:3b:31:3a:49:29:b0:
ef:13:9f:d8:5e:ca:40:68:c6:45:14:f6:2c:29:0a:
d2:18:7a:8e:4b:bc:0f:47:d9:56:6c:6d:7c:91:07:
a3:3f:8b:8d:b1:f3:cb:6a:0d:0f:5e:e5:55:5d:77:
47:cf:6d:e6:d7:02:9c:ba:fd:83:52:70:34:01:08:
94:84:af:33:d5:3c:99:ac:8a:28:f6:cf:b2:a0:28:
40:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7A:7E:63:22:08:D6:A3:F4:D8:A4:B3:8C:4C:5F:F0:93:01:3F:5E
X509v3 Authority Key Identifier:
keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/anp-YyII1qP02KSzjExf8JMBP14.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.227.68.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:35:14:d4:e5:72:e3:8e:0b:a8:eb:9b:06:c9:41:c1:ea:b7:
00:7a:10:cd:15:3c:3f:ce:5f:e6:95:8d:c9:17:15:d2:92:75:
10:ba:fb:e3:41:14:91:20:77:2f:f2:8a:35:b1:d1:0d:f0:52:
31:13:b8:f0:45:ec:36:eb:44:09:7b:7a:2c:9b:c0:d8:81:03:
ef:c0:14:05:ef:06:c8:fc:97:7f:03:33:28:5b:8c:f9:37:e8:
36:e4:76:d4:d4:fa:36:16:54:2d:4a:85:99:1b:4d:d6:0f:1e:
8f:29:34:70:63:56:3b:bc:f8:32:2a:53:d4:34:70:2f:43:cd:
48:7e:f9:2c:8a:eb:b8:c3:84:86:59:22:e5:d4:d7:df:2c:b3:
c0:fa:4f:4f:9a:5a:63:3a:b5:4a:e5:0a:ca:aa:9a:35:7e:ca:
49:8f:9c:2c:36:ce:cc:77:f8:76:bc:d2:4b:43:44:14:ca:88:
34:b6:85:7a:32:f5:ad:54:38:db:3c:13:46:f5:6c:61:12:70:
58:55:ac:2b:84:52:a2:24:14:8d:55:6c:f0:0d:bc:d0:d6:c5:
0b:52:e0:78:e2:1e:29:de:26:05:fd:12:fe:f4:6d:cf:37:dd:
20:ed:cb:08:47:b2:68:d6:14:0d:56:22:1e:9a:69:09:ec:a0:
66:b6:45:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:16 2025 by rpki-client