Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/IMrWgZzHTWwPA-lGs1IX1Inma6A.roa
File: IMrWgZzHTWwPA-lGs1IX1Inma6A.roa (raw, json)
Hash identifier: Bz/na8zXPeP6bDv2EFLgJWbembsIeSoN0SErR0raTVU=
Subject key identifier: 20:CA:D6:81:9C:C7:4D:6C:0F:03:E9:46:B3:52:17:D4:89:E6:6B:A0
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 10B1
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/IMrWgZzHTWwPA-lGs1IX1Inma6A.roa
Signing time: Fri 17 Jan 2025 01:28:55 +0000
ROA not before: Fri 17 Jan 2025 01:28:55 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 136907
IP address blocks: 110.41.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4273 (0x10b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Jan 17 01:28:55 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=20CAD6819CC74D6C0F03E946B35217D489E66BA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:46:ed:fb:ee:3f:4b:8e:27:c0:3e:e7:13:44:
db:04:cd:2d:4a:63:bc:36:a8:e5:40:b2:af:19:b3:
3f:2c:a7:4f:a0:2f:26:80:a8:d3:cf:09:7f:79:d5:
6d:11:e5:fb:3e:58:8d:7d:a8:93:cb:e1:da:f0:81:
10:82:fa:8e:e7:e9:ba:3e:68:71:83:1a:46:ed:b8:
db:9c:bf:43:d2:6d:24:ca:9f:95:d5:e7:ff:43:e3:
ba:97:fe:23:44:73:e1:fe:90:e5:83:89:29:ee:54:
40:5a:f4:82:a5:25:8a:13:8b:f3:8c:65:d8:2a:01:
8e:22:1e:6d:36:b7:d2:a9:f1:21:9c:68:78:1a:71:
70:cd:5e:1a:7d:88:fe:90:0f:dc:c3:ec:5b:35:b6:
27:64:76:01:9e:12:12:13:6e:39:fc:7d:fa:a6:38:
04:60:1f:8b:5e:11:70:fe:08:9f:52:f0:9c:58:0f:
e0:28:2c:1c:49:bf:f1:1e:6a:a9:88:d3:74:b3:0b:
df:6b:96:95:f8:2d:54:e9:ab:ee:1a:5e:3c:9c:35:
19:7f:29:82:d5:3f:09:b5:1c:61:76:bb:43:2a:82:
a8:6b:5c:86:32:7f:47:60:f0:63:7a:c9:99:f3:91:
5b:67:1f:91:ed:30:24:08:e9:98:03:d7:9c:03:a3:
e1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CA:D6:81:9C:C7:4D:6C:0F:03:E9:46:B3:52:17:D4:89:E6:6B:A0
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/IMrWgZzHTWwPA-lGs1IX1Inma6A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
110.41.208.0/24
Signature Algorithm: sha256WithRSAEncryption
39:2d:77:bc:fb:71:0f:e6:a5:19:da:dc:51:67:b3:54:f1:1f:
6e:9c:b8:7b:34:dc:7c:15:72:44:ab:97:21:91:04:ae:6a:b4:
1a:4a:26:76:6e:5f:51:0b:89:17:71:32:c1:2d:85:c4:2c:4e:
9b:ff:54:fe:80:86:69:ab:29:f7:47:0c:52:3f:e6:81:fd:36:
fe:2a:db:e1:ef:73:e2:3e:3c:76:82:52:50:70:a2:0e:39:be:
be:9b:8b:f5:f5:e5:03:15:69:08:fd:13:ec:c4:78:cc:76:8f:
ea:5c:de:92:5f:4f:4a:0a:24:9c:7f:f2:cb:77:a6:3c:c1:eb:
d0:24:f5:01:c3:3e:2d:f0:56:b7:16:f7:f1:d6:48:ed:5b:aa:
99:15:fa:56:45:de:82:16:5a:92:34:61:ba:f7:a6:48:cb:81:
56:af:0c:a0:c5:7f:44:8e:97:8b:23:fa:fc:90:69:ed:9c:2c:
99:4e:96:ab:86:e7:62:a5:00:b4:6a:cb:02:4d:e3:b5:a0:2d:
40:10:8f:b8:5e:3a:71:76:54:df:32:ac:1e:8a:8a:bb:6c:33:
cd:1d:ff:8c:ba:15:b4:fc:1b:a6:e2:5c:d6:cf:6e:bd:f4:21:
2b:e8:0f:0b:83:3a:15:4a:9d:74:be:57:c9:da:8c:c9:e8:68:
36:e4:5e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:35 2025 by rpki-client