Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/-0z7_iR_-q3edYOU3KOvzvIOM3Y.roa
File: -0z7_iR_-q3edYOU3KOvzvIOM3Y.roa (raw, json)
Hash identifier: mYLS3W83gyh6o73iGEksF1yMN5m1CIaui2lInR0I9ZY=
Subject key identifier: FB:4C:FB:FE:24:7F:FA:AD:DE:75:83:94:DC:A3:AF:CE:F2:0E:33:76
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 11E5
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/-0z7_iR_-q3edYOU3KOvzvIOM3Y.roa
Signing time: Fri 14 Mar 2025 09:37:09 +0000
ROA not before: Fri 14 Mar 2025 09:37:09 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 55990
IP address blocks: 113.46.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4581 (0x11e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Mar 14 09:37:09 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=FB4CFBFE247FFAADDE758394DCA3AFCEF20E3376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3b:33:64:85:a0:37:c4:48:5b:35:7f:c0:6e:
8e:77:19:d3:33:cb:15:52:b0:1e:56:0a:ce:86:04:
b7:2d:96:82:0d:d6:07:cc:02:8d:6e:1a:b4:6c:49:
a0:f7:c1:07:82:0a:c2:cc:45:26:93:de:f9:64:87:
93:8b:41:72:cc:8a:51:db:42:71:36:99:1e:9a:9f:
6b:3a:c9:4a:e0:e5:dd:f6:e2:7b:ea:f7:99:a3:76:
6b:a5:1a:13:48:36:12:b8:0a:cf:e3:e3:81:ac:fa:
5c:3f:c4:98:f4:2e:db:5a:58:3e:5b:f2:4f:b1:0f:
52:46:39:f3:f2:32:9b:6e:01:a3:46:9d:fd:d1:39:
7d:5d:08:03:88:f7:40:4a:bd:c3:30:78:62:d2:4a:
3e:51:1f:be:3c:d6:ad:68:b2:f4:ee:0a:2c:73:8c:
22:18:01:fa:68:80:b9:f2:f7:d0:30:2b:38:81:e8:
08:8f:55:a3:1e:47:e3:20:db:c4:31:55:ff:6b:75:
b1:d3:af:c9:b3:aa:6c:05:e3:70:49:2c:c7:15:71:
31:88:ee:da:ea:a8:f0:9e:75:d2:a9:10:ee:2e:f5:
04:c0:85:44:26:aa:36:8d:8b:8d:0b:32:c7:c3:e0:
a8:79:1d:b3:2d:33:71:79:9b:c4:d5:74:1a:a9:e8:
4b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4C:FB:FE:24:7F:FA:AD:DE:75:83:94:DC:A3:AF:CE:F2:0E:33:76
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/-0z7_iR_-q3edYOU3KOvzvIOM3Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.46.68.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:00:12:b0:c6:1a:76:23:bf:07:8b:ec:1a:84:7f:2e:61:b2:
52:5e:b8:c3:6c:c3:8a:46:f9:d0:06:38:a8:22:1d:1f:82:8a:
de:ac:43:32:05:9f:be:7b:93:a3:e4:fd:b4:28:6a:61:c4:a5:
8f:5f:d3:e6:1d:49:3d:88:fd:5f:56:64:50:71:6f:f7:1d:3e:
cf:d8:4c:f3:36:42:7d:67:7a:a9:ff:27:52:ae:1e:d7:5e:4c:
b6:9a:78:4a:8e:93:3d:ed:f7:95:c6:ad:72:60:0a:85:83:f7:
eb:5e:92:a3:88:30:34:c9:5c:52:5c:50:a5:5d:ab:87:1a:fc:
89:67:b6:85:d7:db:26:03:b3:ed:80:68:7b:02:96:e4:3a:08:
e9:2d:2c:86:d2:54:59:ef:d7:8b:bf:79:6e:5e:51:3a:eb:b2:
07:b4:0e:1e:1b:76:3a:61:18:0f:02:9f:db:48:3a:5c:5e:b3:
f1:13:2a:8c:61:52:05:ff:d6:17:30:87:59:10:7c:65:1d:62:
a0:01:7c:6d:c5:a0:c8:85:ed:bb:47:ec:77:77:ab:f4:65:dc:
fc:33:d1:69:60:8a:f1:dd:5b:d3:65:3a:f4:e7:bb:62:26:8e:
be:95:7e:ce:2b:47:75:5e:57:4d:16:fc:da:f4:ca:1f:be:75:
27:a6:ae:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:27:16 2025 by rpki-client