Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/1sOdfTHAZwX6gT2g4_Y3k2Hj0YY.roa
File: 1sOdfTHAZwX6gT2g4_Y3k2Hj0YY.roa (raw, json)
Hash identifier: hN3VcX9uigZAqDDcQld3k19aWhY9rdnpg2Y8upyodIg=
Subject key identifier: D6:C3:9D:7D:31:C0:67:05:FA:81:3D:A0:E3:F6:37:93:61:E3:D1:86
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 11D3
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/1sOdfTHAZwX6gT2g4_Y3k2Hj0YY.roa
Signing time: Fri 14 Mar 2025 09:32:40 +0000
ROA not before: Fri 14 Mar 2025 09:32:40 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 55990
IP address blocks: 113.47.246.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4563 (0x11d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Mar 14 09:32:40 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=D6C39D7D31C06705FA813DA0E3F6379361E3D186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cc:ca:5a:15:e8:6a:59:1c:86:ed:72:15:46:
20:ee:79:1e:a8:45:86:be:e7:7b:ac:af:2a:31:9d:
7a:b5:30:91:95:79:89:f9:78:c5:a5:d4:79:58:18:
42:a6:cb:51:f1:85:96:b9:9b:bb:00:b2:2c:37:4c:
11:04:49:a4:13:ed:5e:9a:45:b0:12:d6:1c:19:ee:
4c:ea:13:da:bb:d3:cc:5d:17:01:3d:4c:e2:8a:b7:
45:0b:f2:25:0d:b6:c1:f5:bb:c5:c9:34:8d:d6:93:
e5:ff:3d:fa:0f:f8:61:47:d4:d9:5b:f8:6e:7a:4e:
45:65:9e:db:75:a7:a7:08:42:87:21:84:d3:99:be:
33:95:30:8f:e7:dd:d6:89:ca:0a:4a:1a:75:89:67:
ef:96:9b:51:20:28:df:48:38:6a:07:df:f3:22:0d:
97:d9:c4:36:8e:69:42:5c:c9:63:08:48:21:53:3d:
3e:71:d1:81:c6:4a:3f:51:e3:22:cd:66:a8:cf:ff:
71:49:1c:35:21:3e:7f:dc:c9:96:ce:49:32:d7:97:
e5:46:8d:e6:de:be:e3:39:7f:aa:08:4a:0a:4d:15:
c7:2a:81:c1:e7:32:25:31:b7:79:47:2d:1d:a3:a9:
be:42:ec:64:2d:68:aa:ef:bd:79:8d:54:f4:44:12:
b6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C3:9D:7D:31:C0:67:05:FA:81:3D:A0:E3:F6:37:93:61:E3:D1:86
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/1sOdfTHAZwX6gT2g4_Y3k2Hj0YY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.47.246.0/23
Signature Algorithm: sha256WithRSAEncryption
af:80:39:b6:8e:57:02:52:c4:72:61:6d:00:c9:67:e6:a5:e8:
57:26:e1:55:cc:4e:44:a9:0a:cd:8b:f8:43:a3:fa:79:b2:d1:
11:ce:bf:09:5e:50:2d:6f:14:df:68:78:fe:9f:94:4a:44:2c:
b5:31:a9:ec:12:34:fa:ed:35:0b:13:83:73:bc:98:15:5f:ef:
e5:ef:40:bc:19:24:bf:6d:62:41:3f:99:b3:5f:60:04:c3:84:
0e:c9:bb:27:eb:af:82:64:ac:0f:43:a4:2c:60:78:11:4e:4e:
e5:59:36:8b:96:ab:a2:a1:82:d1:c3:37:c0:49:65:35:50:b2:
d5:ad:30:f8:38:54:10:13:33:e2:60:a1:9a:20:97:ee:1b:f8:
1f:a0:f0:6f:04:c0:e5:d6:0d:a0:4c:9a:9e:7a:17:0f:e5:e1:
7e:52:b3:f2:da:72:ba:de:e0:03:c8:b3:49:a2:f0:d3:a5:d3:
55:dd:09:14:fe:a0:d5:80:38:55:10:b9:3f:8e:fe:34:3a:52:
f3:5b:e0:de:1a:b9:f5:0d:05:53:bf:ec:cd:9a:1b:69:58:8e:
09:2b:12:0b:ad:b2:6e:c2:81:80:85:83:92:bf:54:bb:56:44:
93:b8:45:14:64:8f:ba:63:29:d8:3b:67:f8:50:ec:68:05:f8:
44:e9:5e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:39:46 2025 by rpki-client