Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/LShRcLy9tnMlHkSDU_gie6ZsXKs.roa
File: LShRcLy9tnMlHkSDU_gie6ZsXKs.roa (raw, json)
Hash identifier: OqfM4dzcvmPU+McpbaxX66bnwaMR8MQjlqVlog/R4f0=
Subject key identifier: 2D:28:51:70:BC:BD:B6:73:25:1E:44:83:53:F8:22:7B:A6:6C:5C:AB
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 1598
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/LShRcLy9tnMlHkSDU_gie6ZsXKs.roa
Signing time: Sat 13 Sep 2025 03:06:37 +0000
ROA not before: Sat 13 Sep 2025 03:06:37 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 136907
IP address blocks: 110.41.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5528 (0x1598)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Sep 13 03:06:37 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=2D285170BCBDB673251E448353F8227BA66C5CAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2c:34:bf:03:a0:bb:f1:e0:3d:05:38:13:29:
2f:be:ed:72:15:be:d5:9b:4e:e6:23:a8:5a:bf:d5:
1a:52:9b:91:ba:61:97:0d:35:fc:b7:b5:c1:d7:b5:
74:a1:f2:30:b4:ff:9e:f2:63:c1:1a:86:95:43:ad:
1c:75:84:0a:8b:bf:93:ea:f4:4b:34:ba:e5:18:82:
61:71:e5:6f:4f:29:ac:5b:00:09:a3:d8:af:f1:c4:
86:74:33:e7:2a:44:4e:0d:7c:0a:d7:5e:9a:3b:ae:
4a:9b:28:6c:d6:6c:db:56:8b:b6:e1:c6:cd:9a:aa:
8b:3a:c5:48:b6:51:27:5d:21:59:29:86:ab:32:e4:
79:ae:de:8d:7e:f2:b3:94:19:43:01:43:f2:ea:db:
1f:91:ff:c3:aa:32:f8:c3:11:43:a8:b7:4f:ee:a1:
bf:14:42:da:07:a9:a4:09:81:40:82:b9:cc:cc:d3:
6a:87:a8:77:09:7d:64:4b:a3:7f:8e:06:38:9d:34:
0d:cc:3b:00:d4:bc:df:13:1c:aa:d1:32:45:ef:ca:
8c:7c:4e:1c:44:46:be:05:15:e9:73:1d:3b:a1:a3:
1b:a0:7c:de:0c:27:5e:fb:fb:db:45:bc:87:f3:d9:
84:13:9e:ef:db:e3:97:4c:e8:6d:87:bf:4e:3e:2e:
f4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:28:51:70:BC:BD:B6:73:25:1E:44:83:53:F8:22:7B:A6:6C:5C:AB
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/LShRcLy9tnMlHkSDU_gie6ZsXKs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
110.41.208.0/24
Signature Algorithm: sha256WithRSAEncryption
91:6e:4c:88:2f:44:1e:6b:76:89:8e:2f:ad:e9:db:29:50:2f:
46:c5:ef:46:43:4e:a5:be:b8:30:77:29:03:26:10:30:06:86:
66:ac:ba:98:4f:1d:ab:87:d7:20:87:51:7d:c3:58:db:bc:f7:
9d:5b:66:4f:18:1c:26:2e:82:ef:52:87:6b:90:bd:c0:4f:14:
43:03:9a:fb:e9:f2:5e:a0:ee:58:16:7b:78:9c:55:d1:49:11:
81:80:66:2d:76:7d:5b:46:62:e0:96:a9:d7:93:5e:28:f3:b9:
fe:8c:08:77:a0:88:ef:15:6b:c3:8d:38:b3:f2:8c:69:5a:2d:
9c:01:1f:39:c8:43:cf:bd:de:1b:24:e5:86:9c:3b:e7:83:1d:
b3:40:3b:f2:60:d4:8d:77:8e:ad:50:05:e4:f8:31:89:a9:aa:
29:21:5b:e7:9d:bf:d8:57:52:e9:a7:99:c8:fd:10:47:37:91:
d4:e2:84:16:81:ec:85:e7:58:8f:48:1b:5d:70:63:7b:77:86:
4e:9b:0b:4b:ae:41:1e:f5:95:0a:7c:fb:21:f6:c7:5a:0e:71:
8e:72:42:ec:25:0a:98:61:f1:53:c6:7e:86:bb:4d:67:63:c2:
9f:e4:ff:1b:c5:39:c7:c6:83:c4:2d:74:ec:9b:00:7a:a9:45:
30:09:e5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 01:48:52 2025 by rpki-client