Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/rNbhpF6JOM-PAVoZ7VIa6VbBLRY.roa
File: rNbhpF6JOM-PAVoZ7VIa6VbBLRY.roa (raw, json)
Hash identifier: LqZmlAzo2UwwyaV+mc2KW6vnM59p5fyFcgl+c2cZId4=
Subject key identifier: AC:D6:E1:A4:5E:89:38:CF:8F:01:5A:19:ED:52:1A:E9:56:C1:2D:16
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 11E6
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/rNbhpF6JOM-PAVoZ7VIa6VbBLRY.roa
Signing time: Fri 14 Mar 2025 09:37:09 +0000
ROA not before: Fri 14 Mar 2025 09:37:09 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 55990
IP address blocks: 113.46.92.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4582 (0x11e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Mar 14 09:37:09 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=ACD6E1A45E8938CF8F015A19ED521AE956C12D16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:56:84:25:66:ae:38:0b:f6:a2:1f:42:b1:a8:
cc:3a:c9:75:36:8f:86:e9:53:dc:cc:7f:40:2b:61:
93:40:59:d5:34:c8:15:46:84:10:a1:07:f5:64:e7:
d9:c0:58:3d:b4:87:e8:34:de:93:de:a1:5f:82:64:
56:0d:2a:fb:1f:aa:9a:58:05:c4:9b:46:61:62:5a:
e5:7f:d6:62:52:95:ff:78:1a:7c:44:8f:41:40:18:
6a:bc:11:9e:c1:c6:09:da:34:99:a2:0a:65:8b:58:
52:c3:74:e6:ae:97:b2:e7:da:17:24:44:86:02:46:
66:87:5a:c6:24:18:f0:6b:ec:b2:81:1a:2a:28:01:
9f:c0:57:b3:49:7f:67:4f:22:d8:09:a9:66:09:7f:
5f:96:75:be:cc:2d:27:49:c3:f1:61:04:55:36:a0:
e1:1b:f6:e2:51:1b:24:50:62:a5:bd:b5:25:94:ea:
da:5a:3b:94:ac:cf:d7:2c:c8:db:1b:b2:80:6c:6a:
a2:d1:c0:b0:73:70:ae:9e:d2:c0:80:37:34:61:3a:
27:5c:b5:50:2e:2b:07:e3:6d:c0:db:84:4e:a3:17:
81:45:5a:b2:50:36:85:b8:1b:1d:56:27:7a:fd:78:
a2:f5:21:13:d8:76:0c:23:9e:3b:f6:77:7b:6c:4e:
27:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D6:E1:A4:5E:89:38:CF:8F:01:5A:19:ED:52:1A:E9:56:C1:2D:16
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/rNbhpF6JOM-PAVoZ7VIa6VbBLRY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.46.92.0/23
Signature Algorithm: sha256WithRSAEncryption
02:d0:b1:6a:d7:60:e2:27:5b:89:0b:9a:0d:73:76:56:eb:58:
e7:6d:1e:6d:a5:58:c0:7f:00:0b:fd:cf:f6:dc:aa:27:15:c1:
37:6d:ea:fd:f3:2b:42:12:39:60:19:e8:f0:e9:71:fe:5c:a7:
62:3c:e9:fa:77:c0:72:b7:1b:ad:20:b3:2a:ec:d4:d8:3e:c6:
a0:a9:ae:b3:7d:12:e6:be:da:a0:ac:ad:4a:e4:99:8d:5a:0a:
79:57:eb:b4:ee:f1:fc:54:0e:13:b5:99:a1:bd:97:38:ab:34:
71:92:8b:1d:41:23:5a:f2:3c:36:bb:39:88:02:a1:99:f4:93:
6a:25:17:66:21:ff:c6:21:88:39:09:9e:f0:e1:b1:0b:6f:62:
66:5d:6f:4f:77:b8:2d:12:00:79:de:cc:95:f1:5b:6d:73:d1:
b7:c8:ae:f1:80:ed:56:6a:18:f0:30:e7:ed:d4:37:29:02:8a:
f6:c1:f4:22:1d:dc:f1:75:b8:81:8c:98:30:97:1a:45:f2:02:
d9:09:41:52:28:79:e5:b4:e4:72:9b:07:78:f3:f8:c4:6f:72:
50:34:eb:2e:d4:f2:3c:eb:51:58:97:66:80:b8:4b:a3:ca:dc:
b8:18:ea:bc:e3:cf:1b:f8:ac:39:f0:10:c6:56:76:8b:33:7b:
bc:54:ca:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:33:34 2025 by rpki-client