Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/GttDUqDoF7EMgadNF-ynja2qV5w.roa
File: GttDUqDoF7EMgadNF-ynja2qV5w.roa (raw, json)
Hash identifier: 2Z+eo6tV7BHqymBJgmfJ4yk9gB/7Lpx8LU28CyoyaKQ=
Subject key identifier: 1A:DB:43:52:A0:E8:17:B1:0C:81:A7:4D:17:EC:A7:8D:AD:AA:57:9C
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 1349
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/GttDUqDoF7EMgadNF-ynja2qV5w.roa
Signing time: Thu 22 May 2025 09:04:46 +0000
ROA not before: Thu 22 May 2025 09:04:46 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 55990
IP address blocks: 101.245.40.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4937 (0x1349)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: May 22 09:04:46 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=1ADB4352A0E817B10C81A74D17ECA78DADAA579C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:15:73:b0:e1:46:7c:41:3c:96:20:f2:62:ad:
e6:d5:2c:92:1c:53:f3:44:9c:93:21:2a:3a:36:78:
bc:d7:34:b1:d0:5a:77:b3:c2:48:21:92:65:b3:e3:
b1:cd:7c:6f:a8:92:ca:e8:6d:a4:10:38:dd:a6:13:
3c:1d:6f:75:ca:4a:71:92:03:cc:19:a7:26:0e:5a:
a0:c1:90:4f:4a:7f:27:44:18:a0:1a:6a:23:ae:fa:
8b:2b:0c:ec:27:3b:8c:89:49:b8:48:84:e5:98:4c:
a3:ea:13:f6:3e:59:68:02:eb:e2:db:fa:de:81:0f:
7a:67:51:50:e0:13:7f:49:73:0d:04:fa:10:51:36:
8f:e8:f0:12:ef:36:79:4b:64:37:38:42:6d:d4:5c:
de:06:3c:20:dc:51:f0:5a:60:6f:3d:f0:c4:46:91:
fd:c7:20:92:12:32:90:dd:42:53:f3:52:1b:da:4c:
61:47:98:75:8d:7f:70:7a:fa:bd:bc:37:08:df:87:
91:b2:6c:c3:e3:f9:d5:67:45:dd:06:65:49:20:14:
b2:d7:06:fe:80:1f:99:2b:7c:2a:4d:0c:43:9e:5c:
ef:7d:4d:62:14:08:74:d4:87:04:6c:c1:3b:af:b0:
d9:2e:b1:97:29:49:4c:a9:7b:9e:16:42:d3:d9:06:
c0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DB:43:52:A0:E8:17:B1:0C:81:A7:4D:17:EC:A7:8D:AD:AA:57:9C
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/GttDUqDoF7EMgadNF-ynja2qV5w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.245.40.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:ce:0c:73:26:bb:80:75:a7:3a:59:eb:8b:20:66:dc:1b:5e:
ab:6b:f2:af:c1:1f:fe:69:43:ac:73:4d:34:55:4a:3a:6b:da:
e2:d8:31:60:94:5e:0a:0c:bb:fd:63:e6:f9:32:0c:ee:8e:7f:
50:bd:d8:a8:a2:6d:a6:45:fd:ba:c9:88:7b:47:de:02:2c:e9:
07:60:a5:c7:08:87:3d:22:5a:fe:ab:78:9a:a4:96:a8:9a:21:
60:db:3a:74:b0:d9:cb:36:3f:56:10:c1:fd:87:25:11:5d:d8:
47:5d:03:94:f6:de:0e:4e:41:a2:71:69:a5:53:fc:e1:de:96:
d7:55:02:4b:dc:a9:52:09:f6:60:f8:27:95:15:90:4c:9c:bd:
e8:3f:58:88:9f:bf:35:8e:20:db:94:f5:e2:81:9a:32:23:30:
29:5f:b5:80:c1:6e:5e:d5:4d:8c:79:9b:eb:1b:1b:9d:c4:b6:
f7:95:59:03:56:e1:a3:1f:2c:89:bb:65:02:fe:69:7c:4d:87:
9e:8e:51:28:4c:87:e5:d8:04:b9:09:db:09:85:e8:ef:c7:40:
87:86:d0:40:6f:56:22:ab:60:e2:4a:52:82:40:ce:b8:4a:37:
20:a2:44:e9:c8:12:24:6a:c7:83:d1:e9:ed:a9:00:25:67:ac:
32:c5:04:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:54:30 2025 by rpki-client