Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/fF1BSb6pfrsj4SK5AaeiM6FmOlU.roa
File: fF1BSb6pfrsj4SK5AaeiM6FmOlU.roa (raw, json)
Hash identifier: lqhccZY0mB/cAfif740LKgEEO7BpYlUEPf0jpFib3AM=
Subject key identifier: 7C:5D:41:49:BE:A9:7E:BB:23:E1:22:B9:01:A7:A2:33:A1:66:3A:55
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 11D6
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/fF1BSb6pfrsj4SK5AaeiM6FmOlU.roa
Signing time: Fri 14 Mar 2025 09:32:41 +0000
ROA not before: Fri 14 Mar 2025 09:32:41 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 55990
IP address blocks: 113.47.242.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4566 (0x11d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Mar 14 09:32:41 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=7C5D4149BEA97EBB23E122B901A7A233A1663A55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:72:8f:d6:5a:67:a2:49:eb:36:11:10:a4:79:
b5:7e:8a:16:38:6f:7b:56:11:d5:70:bc:02:7c:bd:
98:33:ef:8d:0a:a2:8f:61:db:ba:b0:93:a8:86:46:
24:7d:83:a9:da:be:7a:ca:ea:b5:10:17:38:60:9d:
fd:db:1d:1e:72:4f:d3:4e:b9:ec:a9:f1:93:ee:8b:
cd:1d:c4:21:82:0d:f9:e4:03:6f:a4:ac:b4:e9:05:
6d:bb:d0:c8:76:3c:e5:57:48:df:8b:fb:21:96:ed:
83:f0:e5:7b:8b:ca:17:c9:07:ed:01:bd:52:b1:35:
bf:4b:73:54:53:b1:cc:f6:98:94:50:56:de:c6:9e:
30:fe:fc:a1:26:a7:1c:83:df:2c:8b:65:1d:f8:53:
f8:9d:49:c7:57:f8:ac:bb:8e:63:5c:f8:2b:1a:e4:
0f:7c:16:c1:5e:52:93:6d:39:0b:49:8d:41:1a:1b:
e0:f0:1f:aa:f2:5e:51:b4:71:83:fc:d3:40:83:34:
5f:b7:f3:cb:1e:ae:f2:c7:a1:9e:a9:96:b3:49:16:
17:f2:91:4b:ae:22:f1:85:bd:eb:6b:3e:ab:6a:7b:
f6:ac:4a:ea:2a:d6:b3:5d:f1:d3:bd:24:79:aa:8b:
75:fb:84:73:8d:b1:51:81:69:ce:8a:3e:e7:e6:2e:
6d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5D:41:49:BE:A9:7E:BB:23:E1:22:B9:01:A7:A2:33:A1:66:3A:55
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/fF1BSb6pfrsj4SK5AaeiM6FmOlU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.47.242.0/23
Signature Algorithm: sha256WithRSAEncryption
81:c3:f2:3a:4c:c4:ca:da:d8:f8:94:79:bc:ee:44:0c:78:dd:
d1:1a:77:68:07:a5:bb:c7:60:1f:aa:58:8e:ab:1a:cf:03:ed:
a9:df:d3:a1:d1:83:77:1d:c3:83:94:d4:83:b7:a0:19:68:6f:
10:eb:fe:99:51:34:76:20:9c:71:2c:a2:d0:11:10:a4:0b:67:
dd:df:5c:28:5a:9c:85:b3:52:eb:7f:7d:9c:da:ec:b0:e1:6d:
e5:f7:c8:65:10:36:82:ce:13:50:24:af:09:a8:94:1e:18:be:
ba:ae:14:85:79:36:20:73:c6:00:05:6f:7d:31:98:eb:86:e8:
e5:c2:37:05:6b:30:36:2e:70:d9:57:24:40:e9:f3:4a:3a:8c:
08:07:2e:e6:8e:60:a4:02:11:1f:53:11:fc:35:86:78:1d:e3:
00:60:db:eb:ad:b2:b8:e5:c8:32:54:f4:8f:5e:61:99:58:ff:
d9:54:c7:fe:25:41:22:40:80:cd:2c:0c:23:3f:88:3c:86:81:
51:69:f9:8a:3c:5f:53:d9:d1:7f:c7:b1:74:42:73:cc:22:90:
3c:91:58:87:e3:fa:b8:bb:e6:de:d8:5f:1e:dd:fe:51:62:61:
04:e3:b7:59:fc:30:1d:72:2f:68:b4:2a:20:6a:9d:a7:a8:1f:
f8:31:be:cc
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICEdYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD
RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTAzMTQw
OTMyNDFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDdDNUQ0MTQ5QkVBOTdF
QkIyM0UxMjJCOTAxQTdBMjMzQTE2NjNBNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNco/WWmeiSes2ERCkebV+ihY4b3tWEdVwvAJ8vZgz740Koo9h
27qwk6iGRiR9g6navnrK6rUQFzhgnf3bHR5yT9NOueyp8ZPui80dxCGCDfnkA2+k
rLTpBW270Mh2POVXSN+L+yGW7YPw5XuLyhfJB+0BvVKxNb9Lc1RTscz2mJRQVt7G
njD+/KEmpxyD3yyLZR34U/idScdX+Ky7jmNc+Csa5A98FsFeUpNtOQtJjUEaG+Dw
H6ryXlG0cYP800CDNF+388servLHoZ6plrNJFhfykUuuIvGFvetrPqtqe/asSuoq
1rNd8dO9JHmqi3X7hHONsVGBac6KPufmLm1XAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUfF1BSb6pfrsj4SK5AaeiM6FmOlUwHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb
RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx
NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvZkYxQlNiNnBmcnNq
NFNLNUFhZWlNNkZtT2xVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAXEv8jANBgkqhkiG9w0BAQsFAAOCAQEAgcPyOkzEytrY+JR5vO5EDHjd0Rp3
aAelu8dgH6pYjqsazwPtqd/TodGDdx3Dg5TUg7egGWhvEOv+mVE0diCccSyi0BEQ
pAtn3d9cKFqchbNS6399nNrssOFt5ffIZRA2gs4TUCSvCaiUHhi+uq4UhXk2IHPG
AAVvfTGY64bo5cI3BWswNi5w2VckQOnzSjqMCAcu5o5gpAIRH1MR/DWGeB3jAGDb
662yuOXIMlT0j15hmVj/2VTH/iVBIkCAzSwMIz+IPIaBUWn5ijxfU9nRf8exdEJz
zCKQPJFYh+P6uLvm3thfHt3+UWJhBOO3WfwwHXIvaLQqIGqdp6gf+DG+zA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:34:38 2025 by rpki-client