Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/lXX4gh7tknBr7XQgGL8pPeSJgqI.roa
File: lXX4gh7tknBr7XQgGL8pPeSJgqI.roa (raw, json)
Hash identifier: xi7l+22iykmx2LNz4gCL+HpW6VJRRv+xdvSF07vxhis=
Subject key identifier: 95:75:F8:82:1E:ED:92:70:6B:ED:74:20:18:BF:29:3D:E4:89:82:A2
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 11D5
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/lXX4gh7tknBr7XQgGL8pPeSJgqI.roa
Signing time: Fri 14 Mar 2025 09:32:41 +0000
ROA not before: Fri 14 Mar 2025 09:32:41 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 55990
IP address blocks: 113.47.224.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4565 (0x11d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Mar 14 09:32:41 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=9575F8821EED92706BED742018BF293DE48982A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3e:8e:9e:1e:05:7e:63:20:54:97:e8:d0:cc:
91:84:3e:1f:18:d5:3a:fe:a1:f0:12:2a:bc:59:79:
7f:db:d9:a4:5e:2c:7c:04:11:a6:51:48:dd:14:31:
12:ae:d6:1a:dc:5e:82:41:68:7b:9c:9e:cf:57:86:
ae:28:21:78:7c:d5:d3:c7:42:ad:6c:48:70:7d:e3:
8e:42:39:c3:eb:75:d0:12:00:5f:4d:0a:bb:9a:1b:
e9:bb:a4:f0:66:fc:99:a9:28:df:44:43:84:67:7f:
ce:f2:cd:3e:5d:ce:5d:b1:af:0a:1a:e6:3f:36:cb:
3b:87:62:ef:20:be:58:75:83:62:1a:ed:78:a2:24:
8a:3b:c0:71:dd:0d:a9:a3:e4:93:8f:ac:43:5e:ee:
de:33:23:bc:b6:f7:c0:00:e4:da:a0:39:72:ff:b9:
94:be:9c:9d:78:7f:0d:47:7c:99:4a:9f:9b:81:81:
88:84:2f:d0:e4:e8:9a:68:23:cb:d1:e0:9b:26:a9:
50:c0:b2:6e:0c:9e:51:46:0a:25:73:c8:6e:c8:79:
a9:5e:a1:95:4c:fa:3d:b7:13:bf:db:1f:dc:fb:2c:
c4:8c:5a:e0:3f:23:ed:f0:82:8d:74:0d:9d:fb:53:
90:5a:4d:e0:ae:bc:a4:7a:76:fd:54:43:b7:eb:89:
09:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:75:F8:82:1E:ED:92:70:6B:ED:74:20:18:BF:29:3D:E4:89:82:A2
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/lXX4gh7tknBr7XQgGL8pPeSJgqI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.47.224.0/23
Signature Algorithm: sha256WithRSAEncryption
af:c6:cb:3d:48:71:58:7b:b9:60:bb:b4:a7:a9:6c:18:15:08:
36:82:4b:73:32:ec:f4:f2:53:15:4b:68:f7:b7:36:02:4f:41:
f6:d7:da:d7:22:c0:38:a8:47:9f:c4:31:1f:97:5c:83:9a:59:
3f:fe:77:6b:73:bb:f8:27:e4:be:fd:d2:5d:e5:73:26:f0:2f:
ef:88:4d:c0:ab:a8:38:ad:34:da:78:f7:aa:04:9f:80:9a:bd:
34:14:5c:ce:d8:63:38:27:af:4d:a5:7b:3c:4f:1f:30:6f:13:
f2:19:ce:6f:6f:f6:f6:d2:fa:fa:af:92:ab:28:7d:c0:e8:5e:
ce:3d:33:81:4e:5f:a8:48:8a:34:9e:dc:62:70:27:16:49:0d:
de:08:46:dc:ac:a3:7d:87:85:dc:ac:9f:d9:1b:81:a7:c3:3b:
fc:0d:3d:92:b8:f1:10:c9:c3:b5:c5:57:e0:6e:9c:b1:29:1b:
ac:b7:b7:b0:9b:bb:e3:4b:c3:b1:40:a5:81:b5:31:46:37:ac:
30:97:54:04:29:3b:e3:c9:bf:1a:43:f0:39:70:7e:15:5a:2c:
42:c0:b9:9a:7f:f6:b7:11:26:fb:c1:f8:61:c4:76:84:f7:66:
f0:d4:bc:48:5f:f1:11:e2:ca:7c:74:54:fa:8d:26:0d:b0:67:
f2:05:12:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:45:02 2025 by rpki-client