Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/mdm3JWaXWFCLYq1nQK2JE2gyw54.roa
File: mdm3JWaXWFCLYq1nQK2JE2gyw54.roa (raw, json)
Hash identifier: BlFpfQYp1qwbE7Al8ocdDbwTf56ufQowpVeVIWQKpbg=
Subject key identifier: 99:D9:B7:25:66:97:58:50:8B:62:AD:67:40:AD:89:13:68:32:C3:9E
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 0F99
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/mdm3JWaXWFCLYq1nQK2JE2gyw54.roa
Signing time: Tue 26 Nov 2024 06:40:37 +0000
ROA not before: Tue 26 Nov 2024 06:40:37 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 55990
IP address blocks: 113.46.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3993 (0xf99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Nov 26 06:40:37 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=99D9B725669758508B62AD6740AD89136832C39E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:27:76:39:46:2d:88:e1:a6:b2:61:1b:e4:14:
70:9f:24:33:ef:e2:86:13:c4:5d:2e:a2:9b:7e:23:
60:dd:08:f9:1f:40:58:56:a2:1d:82:5d:5e:76:52:
86:a2:6e:df:f3:7f:0f:02:28:68:d1:e1:e8:21:0f:
01:d8:b9:e9:fd:46:27:aa:82:00:28:c4:29:cc:b2:
b2:60:9b:58:e4:50:a8:fd:d4:3c:67:2c:3b:c2:3b:
61:2b:68:63:69:8d:ab:53:5d:2f:ad:ae:4d:4e:67:
7c:92:d2:75:f4:95:11:83:f1:3d:9f:4d:4c:ee:85:
d7:3c:2a:03:a2:87:24:e2:e0:3f:f0:dd:ec:30:7f:
9f:cd:38:18:13:cf:ad:54:99:fc:27:54:60:24:11:
3c:7f:a3:91:6a:6d:58:ba:b7:69:59:13:88:b9:ba:
21:53:38:2b:e4:12:ba:4b:7a:05:bc:6d:17:a4:e0:
dd:f3:be:c3:2e:20:4f:94:09:6b:1e:a1:0b:6c:d2:
7c:f8:c0:b1:2b:cb:7e:b9:9c:97:06:93:a1:6d:29:
b5:41:cd:c3:ca:cb:de:48:a1:2c:88:1a:ee:42:c7:
99:d4:4c:e2:32:d0:b2:31:c0:5d:d0:a6:8a:d3:a2:
e9:3c:1e:c5:31:b9:06:db:5a:b5:ce:97:fd:6f:e4:
fd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D9:B7:25:66:97:58:50:8B:62:AD:67:40:AD:89:13:68:32:C3:9E
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/mdm3JWaXWFCLYq1nQK2JE2gyw54.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.46.224.0/20
Signature Algorithm: sha256WithRSAEncryption
48:e3:60:99:25:ab:91:3b:d9:3a:b3:1f:01:04:d8:c2:0f:d9:
aa:96:40:88:bf:7f:92:71:90:31:45:38:a8:b8:d2:07:56:10:
68:fa:84:ab:49:6b:e7:d3:d6:04:58:24:e5:44:c3:44:06:b2:
81:60:9c:01:2a:4b:8b:0a:84:b0:e7:2d:44:74:5a:64:35:bf:
c7:89:03:53:44:a9:42:24:51:96:04:5e:b9:d8:1d:97:df:73:
4a:77:ec:90:58:76:dd:ea:77:1c:ca:4f:f7:78:75:ee:2b:04:
48:8e:49:d6:54:b5:f2:3a:cb:55:a4:b3:f2:8f:96:c0:49:c3:
ac:88:7d:6c:e2:b4:94:8d:ae:75:44:3e:f8:e4:e6:8f:84:b4:
89:6b:33:32:13:f3:c5:3e:ab:c3:10:56:9c:ad:cc:75:3d:90:
75:a8:4b:9a:55:ca:a5:74:d5:24:3f:11:cf:f9:56:36:0d:b5:
00:49:96:2d:c3:9e:22:9a:7c:5a:62:4e:b0:54:f7:5b:8a:cb:
d2:3e:74:ac:8f:d0:69:f7:d9:a3:10:a7:60:12:36:21:76:a4:
c5:82:c9:fc:8f:46:cc:d4:eb:95:98:d4:16:6d:5c:65:fd:d6:
f3:a3:59:b9:bd:fa:ed:77:cc:9b:81:da:4b:93:9f:1e:aa:80:
83:e9:3e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:32:17 2025 by rpki-client