Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/A2O6FGBz0JvKyQoyxRuqi-ahYmY.roa
File: A2O6FGBz0JvKyQoyxRuqi-ahYmY.roa (raw, json)
Hash identifier: U8hGVrzai4D3RZSiiejly4PYFeY0Mk/luvquCtDU6vs=
Subject key identifier: 03:63:BA:14:60:73:D0:9B:CA:C9:0A:32:C5:1B:AA:8B:E6:A1:62:66
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 10AD
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/A2O6FGBz0JvKyQoyxRuqi-ahYmY.roa
Signing time: Fri 17 Jan 2025 01:28:53 +0000
ROA not before: Fri 17 Jan 2025 01:28:53 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 136907
IP address blocks: 110.41.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4269 (0x10ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Jan 17 01:28:53 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=0363BA146073D09BCAC90A32C51BAA8BE6A16266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f6:ff:94:31:5c:45:b4:b2:17:a0:1a:88:f2:
13:1f:44:b4:d6:1b:e7:84:27:a5:e0:4a:85:72:ec:
b2:c7:a7:ce:92:06:fc:85:1b:a0:52:b7:e2:d5:f8:
62:df:9e:cb:03:32:13:81:c4:2b:20:31:8c:73:20:
c6:31:86:8c:b9:79:d6:2b:bd:44:7d:9a:35:f9:7e:
d2:00:19:bb:9a:2a:fe:36:85:53:d1:9f:6a:7a:ec:
4f:5f:7f:f4:cd:7b:46:54:c6:0a:f4:1a:01:84:74:
f1:67:e8:c5:f0:96:40:a9:2f:87:3d:60:45:b8:cb:
01:d2:d3:68:ad:2e:ba:21:dc:cf:ea:1d:07:6b:61:
13:12:be:e9:4a:53:58:77:17:b2:7b:b1:ed:f9:7b:
73:2c:21:2d:87:08:64:16:58:a4:c7:86:8e:35:c4:
34:f3:b8:dc:5a:52:95:a6:5d:76:45:64:d5:72:7f:
c8:22:f8:03:ba:39:ac:3c:15:e7:aa:6b:01:91:9b:
da:d2:44:2c:c9:0e:46:12:6f:84:59:67:dc:b4:a1:
c7:66:df:8b:6e:98:6c:f6:77:d0:c4:30:e3:9f:06:
83:1f:17:08:ee:67:8c:03:62:d9:41:9a:d3:2a:6b:
de:51:b2:80:60:8c:05:98:a0:d5:3c:03:fd:a8:cd:
4f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:63:BA:14:60:73:D0:9B:CA:C9:0A:32:C5:1B:AA:8B:E6:A1:62:66
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/A2O6FGBz0JvKyQoyxRuqi-ahYmY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
110.41.209.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:20:2b:73:20:6a:f6:a0:9d:29:4d:26:d1:57:37:f5:d2:05:
7f:c8:39:51:db:d0:9c:3c:4d:8d:bb:af:f5:95:60:05:77:92:
37:42:9f:90:00:6e:33:b4:df:c2:40:75:e7:ae:27:87:16:07:
27:2d:4e:9d:ea:da:df:b5:8a:7e:b3:5a:c6:4c:af:90:95:d8:
2e:ba:ab:fa:2d:dc:83:d3:aa:0b:2a:e1:07:69:1b:d7:8e:13:
58:3c:20:74:39:4d:69:43:f5:7a:2e:eb:62:42:d7:99:34:84:
26:aa:af:b0:ec:1c:87:3e:1c:4e:95:d7:d2:3f:a4:9d:f8:93:
90:d3:a6:fa:54:4a:aa:18:da:c2:db:59:66:84:9f:d4:4d:d2:
9d:0f:13:7e:f3:89:44:7c:1a:79:b1:f3:ed:eb:3b:48:23:ce:
ca:46:62:97:02:3e:2e:df:64:3d:7a:d9:d7:8c:0e:76:c5:78:
de:1e:96:e9:94:a0:64:fe:af:f7:2b:f2:5e:1d:25:a4:32:90:
73:3c:75:81:ce:0a:df:60:84:e8:13:4e:4a:45:65:c3:91:33:
4c:00:56:98:e0:e7:e8:05:3a:bd:68:85:0e:72:c2:b7:84:56:
62:33:49:10:e5:7d:01:47:7a:1c:70:47:c1:77:50:7a:d3:a8:
59:15:65:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:44:45 2025 by rpki-client