Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3078/-RT9_s7XipnAEtc_PGENVNWLhag.roa
File: -RT9_s7XipnAEtc_PGENVNWLhag.roa (raw, json)
Hash identifier: xThuu6PLWTZLgKv+YloFBDddIoNRfNrmrpAXxGUcj0E=
Subject key identifier: F9:14:FD:FE:CE:D7:8A:99:C0:12:D7:3F:3C:61:0D:54:D5:8B:85:A8
Certificate issuer: /CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785
Certificate serial: 3B
Authority key identifier: F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/-RT9_s7XipnAEtc_PGENVNWLhag.roa
Signing time: Sat 17 May 2025 03:40:40 +0000
ROA not before: Sat 17 May 2025 03:40:40 +0000
ROA not after: Sun 10 May 2026 04:51:55 +0000
asID: 151270
IP address blocks: 110.40.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785
Validity
Not Before: May 17 03:40:40 2025 GMT
Not After : May 10 04:51:55 2026 GMT
Subject: CN=F914FDFECED78A99C012D73F3C610D54D58B85A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e3:a7:cc:0f:2d:6f:c1:93:a2:93:82:34:60:
8d:8e:c6:b5:af:08:5b:eb:72:17:f1:cc:99:ac:10:
bb:13:23:4d:2b:33:aa:31:63:50:3b:b4:4b:66:1d:
d2:e8:ed:81:56:58:07:0a:2a:64:4f:c2:d1:20:5c:
57:e5:db:ab:0c:98:c6:a6:28:3e:89:b1:0b:09:16:
f1:90:cb:5c:d8:0b:2c:d6:e1:5e:a3:bb:3a:49:e5:
e9:e3:a1:3b:13:1b:84:41:ab:28:e1:1c:b2:99:6b:
97:f4:af:be:c4:7b:e7:5f:63:03:07:fa:bb:76:56:
ab:3b:5a:75:1d:0a:2a:f3:99:d1:50:4c:5e:50:79:
97:5f:9a:3c:f7:57:8f:e2:db:65:15:f6:e6:d9:c9:
79:0e:90:14:7d:30:cf:93:33:08:8d:9a:a0:51:2d:
1d:0f:3f:38:14:55:4c:62:28:b8:93:89:68:5d:69:
c3:78:e0:57:62:6a:9e:ad:b5:46:94:0c:04:1b:c1:
3b:c7:d3:61:5a:bb:81:6d:b4:b4:90:23:41:ae:47:
94:a5:76:53:52:c9:52:eb:17:00:6f:9b:6c:31:b4:
c4:0e:bc:1a:ac:54:f8:5c:ba:94:6d:36:21:ff:31:
d3:17:41:b9:a0:be:4c:e3:d7:c4:00:16:67:a4:5f:
d9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:14:FD:FE:CE:D7:8A:99:C0:12:D7:3F:3C:61:0D:54:D5:8B:85:A8
X509v3 Authority Key Identifier:
keyid:F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/-RT9_s7XipnAEtc_PGENVNWLhag.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
110.40.36.0/24
Signature Algorithm: sha256WithRSAEncryption
53:d4:dd:33:c6:d9:46:ff:41:97:3f:23:fd:30:c1:14:b5:04:
99:98:96:77:5c:6c:30:b6:ef:39:5e:98:b6:ca:ed:a7:b3:d1:
10:63:48:a2:4d:65:a8:d5:f0:05:86:26:b2:84:95:78:05:07:
55:94:cc:69:79:72:4a:10:b3:d1:fb:b9:07:33:e5:67:b2:02:
15:f0:79:57:cb:c1:87:11:e4:1b:0d:2c:84:63:69:42:24:9c:
74:98:bb:d2:14:de:f3:9f:56:4b:b7:83:eb:0c:af:a4:be:88:
96:9b:3f:8c:bb:68:83:56:d6:a2:91:92:a1:41:5b:0d:be:ef:
9e:88:7e:39:c8:7b:8b:d5:ed:3b:49:87:57:3f:bb:19:e1:b0:
16:78:3c:7e:41:af:63:45:93:ff:82:8a:7b:6e:08:48:b6:33:
ee:fe:75:df:80:ea:33:47:b8:a6:8f:58:8c:de:ec:07:dc:9f:
1a:71:69:63:47:b9:b4:f8:e7:a6:29:b8:bb:cc:6f:5f:7f:69:
06:bb:9c:6b:e0:52:0e:a7:28:1c:91:b9:ff:da:7e:35:11:26:
a5:98:3c:56:03:74:79:7f:1b:77:33:99:30:38:f8:22:74:0d:
b4:b6:4b:95:2f:c2:d3:f5:b1:68:ea:66:df:06:74:09:e8:03:
4c:b0:e3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:23:31 2025 by rpki-client