Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/sDy83wuzoEg3UZ_ac6H10sNrahA.roa
File: sDy83wuzoEg3UZ_ac6H10sNrahA.roa (raw, json)
Hash identifier: 3pkExZCIECR0WvfiyPu22HfiVyeO4Mqi9ZiuT+Ic9pg=
Subject key identifier: B0:3C:BC:DF:0B:B3:A0:48:37:51:9F:DA:73:A1:F5:D2:C3:6B:6A:10
Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Certificate serial: 45
Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/sDy83wuzoEg3UZ_ac6H10sNrahA.roa
Signing time: Tue 27 May 2025 08:25:32 +0000
ROA not before: Tue 27 May 2025 08:25:32 +0000
ROA not after: Wed 27 May 2026 07:38:41 +0000
asID: 9808
IP address blocks: 240a:42ce::/31 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69 (0x45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Validity
Not Before: May 27 08:25:32 2025 GMT
Not After : May 27 07:38:41 2026 GMT
Subject: CN=B03CBCDF0BB3A04837519FDA73A1F5D2C36B6A10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ff:e0:80:f3:81:6c:81:41:a5:2a:fa:2e:a1:
83:27:8b:40:a3:d5:f3:15:fb:b8:a9:b7:48:80:0e:
d1:da:4d:99:c1:c1:87:f0:a3:67:35:b7:a4:4e:79:
83:9b:c4:ab:4b:1b:a6:d2:ac:86:b0:b9:24:84:31:
ff:d3:f5:5e:83:f6:30:89:15:1a:50:aa:9c:2a:7a:
42:ff:fc:36:0c:0c:f8:ca:f9:af:10:cf:cc:8f:65:
67:12:8a:f8:44:d6:07:66:24:46:30:22:b7:16:27:
ee:b2:b6:d6:a5:86:25:71:f5:b0:7a:67:6a:75:38:
45:de:39:0d:6c:23:5e:5c:24:06:85:f9:03:04:94:
55:f2:e3:d1:29:7a:14:c1:50:aa:69:d2:6d:12:16:
ef:42:fa:0e:6f:74:42:08:1d:0d:9f:25:13:f3:9c:
a2:43:47:e7:a6:f1:c7:a3:89:2a:cb:7c:23:cb:4b:
17:35:59:4e:6f:94:ae:f0:ca:4f:e5:b6:9f:62:46:
61:af:08:89:ea:66:48:ce:65:c2:32:05:51:5a:fd:
80:67:d4:86:82:d8:d3:57:f4:90:0b:84:7a:6a:72:
00:35:55:48:18:58:4d:8d:d0:27:f3:26:39:fe:2b:
08:c6:95:dd:23:9a:09:db:1e:d2:b8:05:86:bd:fd:
29:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3C:BC:DF:0B:B3:A0:48:37:51:9F:DA:73:A1:F5:D2:C3:6B:6A:10
X509v3 Authority Key Identifier:
keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/sDy83wuzoEg3UZ_ac6H10sNrahA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:42ce::/31
Signature Algorithm: sha256WithRSAEncryption
0c:8b:db:4d:67:4d:03:54:3c:20:92:9e:0f:27:34:43:5c:9a:
0f:ab:20:5d:f0:aa:27:5e:71:09:da:d1:d8:4e:b5:77:48:2b:
a0:26:9d:c3:f5:ad:fc:fd:0c:22:1d:d6:f1:f2:7b:60:b3:ed:
0a:2b:f7:ea:49:39:b8:99:ac:0f:95:1f:65:bf:a6:42:a3:5a:
08:eb:fd:24:22:a1:fc:b3:c4:92:2b:7b:05:10:fe:fa:35:0a:
a2:5b:8c:50:ad:f9:25:d1:e8:0d:60:ee:bf:53:54:d2:cc:e0:
10:9a:b9:b7:33:4d:9a:06:37:4b:e2:e3:00:13:cb:a2:14:89:
3b:8d:b6:71:ea:f2:1d:63:28:95:73:02:46:7d:b8:08:68:00:
ea:2c:28:56:a0:bf:19:2d:94:ce:3d:ff:17:59:4c:78:89:5f:
e7:e9:7f:c7:f6:00:36:ee:95:79:52:60:98:a4:c7:ae:37:e3:
4d:db:22:de:ab:66:a7:16:da:65:42:27:60:cb:cf:be:07:a1:
75:fb:41:0d:7c:c8:4d:b9:4a:dc:f4:8d:dd:63:2d:e6:64:b8:
b4:c8:c1:50:fd:d0:f8:8e:b4:14:1d:c7:b5:59:d5:77:fc:13:
54:75:5a:90:bc:8f:6e:8d:54:d0:19:03:dd:b6:be:1f:f4:cb:
82:8c:75:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:15:55 2025 by rpki-client