Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/6CwlLESfMyGA2wrF-7TBHGrL9os.roa
File: 6CwlLESfMyGA2wrF-7TBHGrL9os.roa (raw, json)
Hash identifier: pjeRQP5YN+mH6XEOvpSRy2KKiiYW6nDsubc+Jlsb5bo=
Subject key identifier: E8:2C:25:2C:44:9F:33:21:80:DB:0A:C5:FB:B4:C1:1C:6A:CB:F6:8B
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 1346
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/6CwlLESfMyGA2wrF-7TBHGrL9os.roa
Signing time: Thu 22 May 2025 09:04:44 +0000
ROA not before: Thu 22 May 2025 09:04:44 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 55990
IP address blocks: 115.32.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4934 (0x1346)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: May 22 09:04:44 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=E82C252C449F332180DB0AC5FBB4C11C6ACBF68B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:44:10:9d:98:a7:74:fb:f7:ee:f7:bc:fc:59:
00:4e:3e:98:86:11:1f:f8:38:9e:95:1a:48:9c:8c:
9e:81:d9:a3:80:fa:58:a3:5f:b5:df:db:bb:46:f0:
a9:82:04:14:47:d9:2b:1a:d1:f0:4d:4b:4d:09:f0:
8a:8e:9d:b6:dd:76:b0:d1:71:9d:4a:02:8d:6c:ce:
c3:d5:08:a7:4d:2d:52:de:61:34:5e:aa:6a:71:87:
02:ca:7a:20:d5:39:7f:b3:c2:35:68:be:7b:5d:b0:
bd:7c:33:e9:c1:88:24:19:30:de:43:21:d8:a7:b8:
48:ef:44:2e:85:2d:0d:74:b9:37:c4:02:10:94:97:
00:7e:da:7b:73:d3:f9:b8:89:cb:ab:66:df:92:c9:
e8:92:9e:a6:88:12:ca:cf:47:f0:a0:d3:64:b5:5b:
8f:a3:bb:ac:d9:a8:16:c3:cc:40:35:20:b0:7b:dc:
53:5e:2b:d1:34:89:f9:33:cb:25:e1:4c:f9:71:c3:
5d:81:22:98:d4:95:19:33:38:9b:b5:51:c5:62:6b:
5f:c7:60:9b:0f:e8:ce:36:5d:8f:54:c7:d8:1c:05:
81:db:78:6e:28:7a:dd:28:cb:a7:78:45:dd:42:2e:
89:24:ae:ba:c0:a1:4c:6a:97:02:05:9e:97:54:49:
20:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2C:25:2C:44:9F:33:21:80:DB:0A:C5:FB:B4:C1:1C:6A:CB:F6:8B
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/6CwlLESfMyGA2wrF-7TBHGrL9os.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.32.0.0/20
Signature Algorithm: sha256WithRSAEncryption
a7:9f:21:78:2c:2a:07:0c:ac:eb:b3:30:e2:67:46:22:57:65:
e9:74:1b:5e:b5:24:ff:0a:9b:8f:b2:63:b7:f4:18:54:0d:be:
01:6e:47:e3:2d:28:ca:35:0e:bc:27:48:e8:d3:de:9b:23:f5:
13:b2:0a:d3:81:37:96:4f:ca:0c:bc:ee:90:86:63:a6:f7:b5:
d5:02:bd:a6:19:fd:8f:d4:c2:ac:e5:3c:37:8f:e7:c1:dd:6f:
e9:98:7b:a1:f8:c3:0f:db:1f:2e:42:ed:66:ee:0b:7f:15:0a:
d1:c7:19:f8:68:17:46:78:e3:50:18:fe:d4:7c:49:59:9e:a0:
7e:30:0e:7f:d6:6d:bd:97:71:ab:84:d5:d1:4b:21:d4:f4:68:
8e:e4:d3:69:f9:04:a8:c7:5b:5e:f8:44:76:10:f1:fb:36:f8:
a7:c0:4a:6a:98:2a:a9:dd:17:0b:a3:17:b9:6a:d7:64:cf:4d:
09:6d:a0:f2:0b:14:27:13:bb:9a:a5:90:6d:f5:77:ba:3f:b2:
da:29:3e:0d:7a:d0:90:6f:34:01:5c:fe:86:e6:ee:79:45:2e:
1f:99:5a:27:41:66:e8:e9:a9:e3:31:76:e9:21:ac:c1:6d:21:
ad:d0:73:61:8e:72:88:8d:af:ab:64:37:c8:32:0c:86:c6:3c:
7a:22:03:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:05:30 2025 by rpki-client