Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/SOelvG7hlU9n-qMiJ1SYZRPLlXQ.roa
File: SOelvG7hlU9n-qMiJ1SYZRPLlXQ.roa (raw, json)
Hash identifier: YVnPbXBpFdspbuliBEOmlJ0W8MzB7joecZe4MIX8M8E=
Subject key identifier: 48:E7:A5:BC:6E:E1:95:4F:67:FA:A3:22:27:54:98:65:13:CB:95:74
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 11E8
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/SOelvG7hlU9n-qMiJ1SYZRPLlXQ.roa
Signing time: Fri 14 Mar 2025 09:37:10 +0000
ROA not before: Fri 14 Mar 2025 09:37:10 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 55990
IP address blocks: 113.46.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4584 (0x11e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Mar 14 09:37:10 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=48E7A5BC6EE1954F67FAA3222754986513CB9574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:de:2a:ee:27:83:d7:62:d9:1b:53:c4:95:e6:
e3:40:5e:8f:fe:8e:0d:00:70:39:24:75:1d:dc:92:
db:1f:7f:c4:82:e7:0f:a5:2c:5b:a1:a1:b7:aa:60:
4b:76:88:45:46:eb:c6:66:f0:5a:79:8f:50:b6:3e:
b5:a0:b2:7a:30:91:61:97:68:f1:53:4c:6c:f9:dd:
cc:d2:8d:39:b1:91:99:b2:fa:44:7b:77:6a:92:8f:
5c:3e:bd:48:74:9a:50:2d:89:a6:3e:61:b5:fa:ba:
07:b3:2d:70:db:e2:78:91:2d:ba:35:99:44:5f:83:
43:21:3c:a6:7b:e2:6b:7e:44:a0:56:25:83:18:a3:
8e:28:c3:c8:a2:f7:ac:b9:2f:6c:30:14:d6:22:65:
f9:9d:1c:a3:c8:32:5a:a6:96:9c:53:68:4d:a9:0a:
76:cc:b3:93:ab:4e:0f:6a:cc:dc:31:37:d6:74:c9:
c9:5c:74:c0:fa:78:44:11:ff:e2:2f:2a:a6:c0:c3:
76:8e:8c:04:90:82:ec:b5:0b:07:8e:3d:ad:df:42:
9a:00:2f:53:09:e8:61:23:75:40:bf:7c:57:25:dc:
91:c0:3e:9c:75:30:1b:7d:82:11:99:2f:a4:40:04:
f5:b2:23:60:ef:32:5a:2b:17:98:81:bc:d8:96:01:
bc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E7:A5:BC:6E:E1:95:4F:67:FA:A3:22:27:54:98:65:13:CB:95:74
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/SOelvG7hlU9n-qMiJ1SYZRPLlXQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.46.32.0/19
Signature Algorithm: sha256WithRSAEncryption
3c:62:fd:54:3d:2c:41:49:c3:78:a2:1a:9e:be:95:21:9c:52:
d0:64:aa:bf:15:1f:a9:41:c5:a3:eb:37:d1:46:b0:54:f5:fc:
54:d8:e3:50:24:d1:02:14:d9:84:57:2f:1b:e3:8e:b4:7b:cc:
1b:05:77:cd:77:fd:21:0c:76:20:0d:7e:a6:0d:c3:80:a6:ac:
46:6e:72:56:34:3f:f8:d0:70:4e:10:42:74:64:5d:02:5b:67:
c6:a8:d9:03:02:6c:a7:03:fb:96:b5:43:2e:b9:2f:3b:dc:3b:
84:b8:3b:3c:60:ba:38:d6:85:35:b6:ca:0d:d0:fc:ff:c6:fe:
e2:ab:7d:ae:41:92:67:79:a5:4f:d8:9f:7c:5d:3d:26:9e:2e:
aa:02:c7:3e:49:c0:ec:b2:93:ed:b7:e2:e8:6e:1a:c1:96:f2:
6c:f5:d0:21:4b:59:be:49:58:57:81:f7:0c:f2:01:c0:e5:39:
64:16:97:7f:da:81:53:8e:3e:af:b3:03:a9:11:f5:e3:eb:35:
70:f8:da:c0:49:c3:34:76:eb:dd:e8:73:6f:5c:07:08:3f:e9:
cc:a9:6c:ae:f6:33:fc:56:a2:13:1a:1a:89:29:cb:8f:32:c8:
3b:7e:58:6d:95:0a:69:74:41:82:8c:1c:90:aa:c3:11:95:c3:
72:8d:ef:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:32:41 2025 by rpki-client