Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/0OxXWPbQIrCoNZY4f1SN1B-Z3vw.roa
File: 0OxXWPbQIrCoNZY4f1SN1B-Z3vw.roa (raw, json)
Hash identifier: w4Zw+1+/h2bxwe2IxC3t1hpwmz+0dzYGkrOhuk7JaDk=
Subject key identifier: D0:EC:57:58:F6:D0:22:B0:A8:35:96:38:7F:54:8D:D4:1F:99:DE:FC
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 1344
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/0OxXWPbQIrCoNZY4f1SN1B-Z3vw.roa
Signing time: Thu 22 May 2025 09:04:44 +0000
ROA not before: Thu 22 May 2025 09:04:44 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 55990
IP address blocks: 101.245.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4932 (0x1344)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: May 22 09:04:44 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=D0EC5758F6D022B0A83596387F548DD41F99DEFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3f:fa:98:62:3c:9e:e1:8e:46:77:a8:40:a7:
49:9c:8f:a4:68:3a:d8:49:73:ca:84:fc:18:52:62:
e8:10:25:2f:ea:92:5b:4a:41:65:0b:a9:6d:23:0e:
1f:14:76:07:65:24:b4:a1:99:62:c7:69:ff:00:38:
de:ae:a4:56:27:ba:de:ac:de:df:eb:67:f2:6a:0a:
ff:27:03:04:1f:01:94:ff:ea:f5:33:55:78:7a:41:
c2:9a:7b:97:13:1c:09:9e:7f:dc:31:78:50:be:96:
c4:76:1d:e1:64:8e:8b:29:3b:c7:26:7b:1c:d0:2a:
8a:8b:56:b6:34:84:42:82:8c:e4:ff:38:dd:e4:24:
d9:13:3d:c6:e5:40:d0:4e:89:6c:47:82:f5:0c:03:
d0:9f:6d:83:20:94:9c:f5:53:a9:5f:f5:92:b2:00:
ff:38:1a:30:71:cb:a0:e5:83:86:71:97:9f:01:1c:
69:e8:42:e8:8d:bd:d0:e1:94:13:fc:f9:c4:24:a4:
4c:c7:c8:bf:c8:02:73:b7:b6:df:a4:0b:45:37:81:
23:79:4f:bf:10:a3:e5:2e:31:7d:53:2e:ae:46:16:
07:98:61:4e:74:a1:16:1d:fa:7d:7d:03:23:30:71:
ca:00:77:a1:df:c4:b8:06:14:1d:6b:48:dc:d9:a1:
d3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:EC:57:58:F6:D0:22:B0:A8:35:96:38:7F:54:8D:D4:1F:99:DE:FC
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/0OxXWPbQIrCoNZY4f1SN1B-Z3vw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.245.44.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:a8:81:37:f3:3d:b6:b7:64:4b:fe:59:92:98:df:12:a9:a1:
90:aa:d7:eb:5e:e1:13:05:c7:5c:27:fa:cf:ba:12:d9:af:80:
b5:de:d0:74:69:e5:7a:75:c7:f7:a1:d8:f8:5d:ac:98:ce:4a:
ed:20:1b:1a:9a:af:74:d7:e7:e2:14:8d:42:5d:1a:fa:74:47:
60:d6:74:a0:62:3b:eb:17:42:10:16:30:31:2c:45:66:36:b8:
a8:84:49:70:9f:5c:91:f0:c8:9c:a7:63:09:64:12:9a:a9:20:
1c:4e:23:cf:fc:23:ff:33:dd:ea:f1:13:0d:cd:81:11:fe:23:
a1:9b:ff:86:bd:9f:a9:f8:3b:1c:ab:a2:56:4a:54:ba:1a:04:
12:85:eb:21:91:4f:0c:6b:cf:ab:59:31:9a:69:ab:d2:63:5d:
9a:b1:0d:b1:16:e7:25:6c:21:c0:bf:fc:ad:05:97:ab:d4:df:
e8:ef:3b:2c:82:11:3a:3a:d9:44:c1:ac:dc:e1:25:6e:7a:18:
d7:71:f1:ac:f3:23:0b:34:33:c7:4b:ac:e0:cc:74:0c:45:5a:
5e:e5:ca:37:7a:4e:1b:45:8a:cc:ac:99:91:e3:5a:f2:7a:0d:
fa:fe:ac:c5:ce:4a:fa:45:79:f0:c3:22:fc:70:e4:c6:30:73:
8d:55:e8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:02:25 2025 by rpki-client