Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2618/mmx-GbSs4J4VUGylqPz_FT6uUIs.roa
File: mmx-GbSs4J4VUGylqPz_FT6uUIs.roa (raw, json)
Hash identifier: 6m8OY4pMm2b/rjB1SdyO3trcbplZ5sBLGqMbwi/clbY=
Subject key identifier: 9A:6C:7E:19:B4:AC:E0:9E:15:50:6C:A5:A8:FC:FF:15:3E:AE:50:8B
Certificate issuer: /CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971
Certificate serial: 4C25
Authority key identifier: 01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/mmx-GbSs4J4VUGylqPz_FT6uUIs.roa
Signing time: Tue 25 Mar 2025 06:07:54 +0000
ROA not before: Tue 25 Mar 2025 06:07:54 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 63603
IP address blocks: 163.53.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19493 (0x4c25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971
Validity
Not Before: Mar 25 06:07:54 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=9A6C7E19B4ACE09E15506CA5A8FCFF153EAE508B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b8:6e:21:a6:4a:45:06:92:63:6c:3e:6a:85:
70:ed:90:cc:26:83:9b:6e:5c:7d:0b:d5:0f:cc:5a:
50:75:0c:8a:a8:b7:62:5d:25:5a:aa:62:6d:a7:2d:
f8:b7:0a:1b:c8:e0:7d:97:b2:ee:e6:76:63:d2:0e:
35:12:0e:0e:fd:4b:9b:93:df:ab:0e:f9:b1:66:7c:
f3:a1:03:02:43:5b:e0:be:85:f3:cf:53:ea:88:e9:
1c:59:64:d5:80:da:f6:96:36:de:e4:0a:0e:69:ef:
1c:7e:4f:c4:ce:78:84:59:a3:fd:d2:b1:99:96:1c:
20:5e:08:cf:b3:b8:3b:88:30:9d:51:1e:d4:d4:7e:
36:b2:af:be:bb:a2:47:4c:ae:8c:0f:da:3d:88:4a:
a2:a0:34:0b:1e:b2:32:68:05:0d:78:76:0b:0c:bd:
16:1a:36:87:dd:02:4d:2d:39:fa:f8:ad:bd:38:d9:
39:9e:42:5f:ec:73:59:b9:92:3d:13:26:72:f9:a6:
2b:73:9b:61:5d:0d:69:f4:a9:9e:80:06:05:6a:40:
a6:8f:76:dd:ed:a6:10:21:b9:36:63:8d:75:f0:bb:
7f:f1:73:22:8a:2a:04:14:a4:f0:28:18:05:55:ce:
a9:5e:1a:ee:ef:ba:b6:a5:74:8a:ba:42:6e:a7:62:
99:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6C:7E:19:B4:AC:E0:9E:15:50:6C:A5:A8:FC:FF:15:3E:AE:50:8B
X509v3 Authority Key Identifier:
keyid:01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/mmx-GbSs4J4VUGylqPz_FT6uUIs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
163.53.46.0/24
Signature Algorithm: sha256WithRSAEncryption
58:c0:7c:64:8d:ae:e7:5f:72:b4:16:ca:34:b4:d7:18:4e:46:
dd:c3:63:b5:4f:37:c0:59:7a:e6:b5:c1:a6:6d:23:53:4a:de:
64:46:5d:04:ad:3a:27:46:2a:5f:30:80:06:90:93:99:08:1b:
fb:a9:e2:fb:92:96:b9:d4:9b:2b:11:db:d8:6b:06:f2:36:82:
45:50:dc:ed:f1:87:46:56:a5:51:ef:5e:21:8d:6b:8d:aa:35:
67:97:33:72:80:4c:40:06:6d:7b:34:04:bd:86:ed:a0:f5:d0:
77:56:04:ee:2c:2b:15:5d:39:ce:80:7c:2d:0c:d0:77:ca:7c:
95:3c:fd:74:14:54:48:97:da:4d:d3:4b:45:a0:b6:01:70:b0:
dd:2d:6e:c5:ed:9c:c9:33:9b:03:1c:43:0f:26:59:18:bb:39:
3d:8a:6d:05:85:0b:e4:bd:b5:f0:06:d3:8c:88:87:65:f6:18:
fa:e3:81:90:39:6e:1b:6d:12:56:65:f5:4c:72:60:e0:c7:33:
e5:f1:08:58:58:a1:35:1f:10:6a:e8:55:3f:91:60:05:a8:3b:
22:73:7c:da:26:2a:78:b8:00:00:c4:70:a9:7c:76:b6:39:5d:
83:1e:a8:14:d9:46:0b:4c:22:58:de:23:aa:d3:e8:89:4e:7a:
cc:3a:d6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:13:15 2025 by rpki-client