Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/mJq41e3bmb7nDvyiHC5QHjH_Il0.roa
File: mJq41e3bmb7nDvyiHC5QHjH_Il0.roa (raw, json)
Hash identifier: sBZh9kc28M0gPy8qn21bFMGTZjn6VtBzPHnrMnUQEGo=
Subject key identifier: 98:9A:B8:D5:ED:DB:99:BE:E7:0E:FC:A2:1C:2E:50:1E:31:FF:22:5D
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 10AC
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/mJq41e3bmb7nDvyiHC5QHjH_Il0.roa
Signing time: Fri 17 Jan 2025 01:28:52 +0000
ROA not before: Fri 17 Jan 2025 01:28:52 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 136907
IP address blocks: 110.41.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4268 (0x10ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Jan 17 01:28:52 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=989AB8D5EDDB99BEE70EFCA21C2E501E31FF225D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:aa:34:83:23:14:81:0d:49:c9:bb:e8:cd:e1:
cd:67:10:68:57:b1:71:7d:c0:80:c6:91:9c:fb:64:
48:43:a8:32:03:4f:e9:ce:bf:30:de:27:42:8e:3e:
13:09:d1:aa:30:55:09:c0:39:2b:fd:89:21:54:4a:
a6:96:2e:16:1b:80:49:39:c5:83:86:16:17:e5:60:
2e:8f:ca:3e:01:2d:52:7c:6e:f8:e4:1d:5a:66:ba:
a4:70:1b:86:8f:ea:03:9c:91:fc:4b:74:ad:88:b3:
a6:ea:f6:3c:cf:9c:6d:3f:e1:8e:45:9d:3e:d1:66:
30:ef:cd:77:61:9c:a4:63:64:fa:02:26:08:7f:b3:
b1:d2:2f:6f:ca:89:20:1c:1f:e2:fc:15:d7:18:5d:
67:3e:6d:4b:22:c9:2c:9f:eb:1c:8a:84:9d:9c:15:
be:25:ad:90:0d:84:c4:ca:7b:18:08:f0:b6:db:8a:
a9:8e:46:70:b6:2b:9c:aa:44:bc:14:29:ff:32:ea:
e4:c1:a6:b1:77:8d:d3:bb:e7:f2:e8:12:cd:3b:60:
c7:4d:f3:39:25:9e:a6:04:b8:f6:51:7a:14:07:e8:
57:bd:8e:15:7d:eb:48:22:f2:13:ec:4d:b6:79:61:
77:79:7f:bd:85:88:91:93:d4:a0:b1:9e:3a:f8:80:
bb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9A:B8:D5:ED:DB:99:BE:E7:0E:FC:A2:1C:2E:50:1E:31:FF:22:5D
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/mJq41e3bmb7nDvyiHC5QHjH_Il0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
110.41.90.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:f4:b9:a1:89:b5:5e:df:4c:b3:e4:6d:dd:4f:21:23:88:c4:
a2:a7:48:f2:a7:e4:9d:ea:3e:64:63:be:14:84:90:07:5e:c5:
e1:c9:37:ed:9d:b7:c8:c2:de:90:0a:10:7b:a4:c4:31:d7:6e:
64:3a:a3:d3:30:4d:d3:56:79:55:ba:d2:a0:00:18:35:09:2f:
c0:4a:23:e2:d4:a8:28:32:17:09:33:3d:0a:09:35:61:4d:2e:
69:fe:b9:a8:c7:8e:f7:19:49:51:27:bb:18:fc:0f:6f:a2:37:
77:31:72:2f:36:0b:a0:bd:23:ab:b6:89:48:14:c7:56:8b:3e:
bc:15:68:49:37:0a:02:16:0f:86:d4:34:35:13:c8:e8:bf:90:
97:40:31:4b:65:a2:0b:34:00:ee:b3:94:d9:60:b3:45:4c:87:
ba:a2:e8:52:14:07:6e:06:31:32:97:03:18:51:0a:de:e7:85:
96:4d:75:52:29:f6:92:0e:6a:eb:b2:95:90:6b:28:25:d8:b0:
7e:0d:8c:87:42:d8:9e:79:b6:d6:a1:db:8b:0b:bb:b2:2f:a3:
86:5f:5f:dc:ac:d4:16:e1:77:4a:49:18:aa:1b:de:ea:21:78:
b7:bb:f5:93:a9:8d:5c:a8:ac:2b:9a:60:1d:5a:89:f3:e7:46:
37:be:59:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:27:27 2025 by rpki-client