Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/ACBktcCIK2mFi-98s5sXBEyq7IM.roa
File: ACBktcCIK2mFi-98s5sXBEyq7IM.roa (raw, json)
Hash identifier: o6DvUOok/C3vgBvu1/Ayc0/sKGvjpBhKwmi70wnOr04=
Subject key identifier: 00:20:64:B5:C0:88:2B:69:85:8B:EF:7C:B3:9B:17:04:4C:AA:EC:83
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 1350
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/ACBktcCIK2mFi-98s5sXBEyq7IM.roa
Signing time: Thu 22 May 2025 09:04:49 +0000
ROA not before: Thu 22 May 2025 09:04:49 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 55990
IP address blocks: 101.245.2.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4944 (0x1350)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: May 22 09:04:49 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=002064B5C0882B69858BEF7CB39B17044CAAEC83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:08:2e:51:9b:a9:42:29:0a:3d:63:28:f4:3b:
da:bb:98:71:f7:f7:3b:ae:7c:84:04:f5:7e:cc:67:
64:82:7f:45:4d:33:db:35:de:d5:b8:cd:20:83:aa:
53:01:5d:e5:f0:52:ee:6c:04:d8:b6:d0:21:23:cc:
39:2d:28:99:41:87:71:48:13:d3:69:38:e5:b7:42:
77:e6:27:68:be:74:ee:c3:47:fb:b1:97:9b:f6:57:
e2:dc:86:d7:ec:40:ad:88:d0:82:14:d5:cc:c0:79:
c1:79:fb:3d:35:b4:ff:eb:de:84:83:d8:ca:d1:c6:
a8:9c:45:65:d4:36:06:65:3f:f3:ae:18:bc:46:6a:
ae:6d:8f:70:d6:9d:50:35:57:81:99:5e:90:24:cf:
24:a4:75:2e:1a:89:a6:68:48:61:46:da:8f:1d:46:
63:44:89:4e:4d:f6:a7:96:58:b8:fb:cf:e2:14:71:
c3:7a:80:57:78:a6:fb:ff:3a:d8:e9:3a:aa:b6:f6:
8f:28:93:81:7e:17:ea:79:7f:c8:b4:a0:73:c5:4f:
6c:63:64:56:ca:a8:75:2a:a5:81:e4:2d:64:bc:68:
47:c8:dd:aa:4d:ec:a6:e7:1d:f9:43:8f:ce:74:a9:
cf:5b:93:70:c0:39:f7:ed:32:30:4b:5e:9c:81:8f:
82:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:20:64:B5:C0:88:2B:69:85:8B:EF:7C:B3:9B:17:04:4C:AA:EC:83
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/ACBktcCIK2mFi-98s5sXBEyq7IM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.245.2.0/23
Signature Algorithm: sha256WithRSAEncryption
87:61:e6:b1:06:f9:20:81:f3:27:35:46:25:43:97:62:79:fe:
5a:2a:da:5e:a5:bb:52:d5:07:98:ce:e2:1e:b2:70:5d:93:9b:
42:9a:99:74:4e:26:9d:fb:06:f5:0b:be:ca:1d:1e:de:f8:41:
e2:9e:72:98:02:74:24:ba:fe:27:9e:97:98:92:7a:cb:5a:75:
fd:b2:68:d2:d9:ad:c0:e1:60:06:30:1e:42:59:a0:b8:1e:93:
54:eb:8a:ad:b1:ca:21:03:77:1e:2b:49:7a:8c:34:3e:72:2d:
73:b9:18:00:0f:1e:8c:f4:a8:cd:95:42:df:62:0a:b5:fb:36:
aa:f2:02:82:f2:23:24:85:e4:96:bb:95:e1:2f:8a:fd:a0:0b:
24:2f:10:b5:7b:b4:1b:77:4f:e9:cd:ae:89:ad:a5:67:55:8f:
a4:48:44:89:8d:a0:5a:6e:48:e5:17:39:1e:92:df:88:8b:f8:
c4:d1:ff:be:07:ed:f2:10:78:24:1f:e5:ed:9a:c3:b3:f9:a2:
aa:e4:5e:3f:84:94:ba:08:0a:dc:57:75:53:04:3e:46:4b:c1:
c5:6b:19:6b:b4:9a:2f:e6:7d:75:be:c7:8d:6a:ad:7d:f4:d4:
fe:d7:d3:07:8e:c8:87:a3:2f:75:b6:85:1f:8a:f8:59:a7:22:
a2:d6:fc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:17:55 2025 by rpki-client