Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3078/5xDCXiVt6_ynCqk_0AO2H6XguZ8.roa
File: 5xDCXiVt6_ynCqk_0AO2H6XguZ8.roa (raw, json)
Hash identifier: Bw6paMLUGTTV4wIozFR3e8HZ0/940ntVMZSO2KpjdQ8=
Subject key identifier: E7:10:C2:5E:25:6D:EB:FC:A7:0A:A9:3F:D0:03:B6:1F:A5:E0:B9:9F
Certificate issuer: /CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785
Certificate serial: 49
Authority key identifier: F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/5xDCXiVt6_ynCqk_0AO2H6XguZ8.roa
Signing time: Sat 17 May 2025 03:42:34 +0000
ROA not before: Sat 17 May 2025 03:42:34 +0000
ROA not after: Sun 10 May 2026 04:51:55 +0000
asID: 151270
IP address blocks: 110.40.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785
Validity
Not Before: May 17 03:42:34 2025 GMT
Not After : May 10 04:51:55 2026 GMT
Subject: CN=E710C25E256DEBFCA70AA93FD003B61FA5E0B99F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:df:99:39:eb:d3:f2:6d:2d:c4:0b:1b:b3:1d:
de:37:31:be:ad:1d:90:26:24:28:90:5b:93:05:f2:
51:9a:41:07:0e:60:57:83:61:4a:ae:e1:f6:24:4a:
c3:16:b0:20:d6:a7:69:88:b4:50:ee:f5:89:9f:65:
bf:55:d3:67:10:23:35:4d:a2:4c:02:99:68:bf:ca:
5e:fa:fc:9b:1b:6a:2e:79:e1:3f:79:c5:16:76:dd:
87:9e:6e:47:21:42:86:b7:cb:7e:21:9d:39:b2:9c:
cc:59:fe:f9:ec:dc:5f:fe:54:fc:0b:5b:2b:26:11:
ef:ca:67:e6:92:15:fe:a8:0a:1f:7a:73:d4:da:7b:
c6:c5:28:d1:75:b9:91:d8:2f:c3:4e:5f:93:c3:42:
04:72:11:a4:6c:23:e0:e1:da:4c:9c:52:46:9a:4c:
0b:94:45:be:61:2d:69:6c:71:b5:44:cd:01:f7:cc:
27:c7:54:d3:bf:a1:2e:b8:10:15:b5:e5:e0:fc:26:
4e:28:a1:85:d8:fa:9a:3d:58:09:26:dc:cf:46:90:
b6:de:ae:92:cb:f4:44:bb:d2:c7:41:cd:19:17:92:
a2:17:66:6c:9b:55:f4:17:31:ad:8c:b1:5b:fb:90:
76:e6:9b:bf:37:70:b2:b7:57:d7:5a:57:98:0d:c6:
8a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:10:C2:5E:25:6D:EB:FC:A7:0A:A9:3F:D0:03:B6:1F:A5:E0:B9:9F
X509v3 Authority Key Identifier:
keyid:F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/5xDCXiVt6_ynCqk_0AO2H6XguZ8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
110.40.80.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:38:3d:a0:54:b8:e8:73:d7:7a:c3:ba:28:47:de:3b:86:f9:
73:1c:db:e6:6c:4d:e8:26:fa:9d:52:bf:64:2b:49:12:96:75:
60:84:ef:b6:91:7c:c0:77:bc:6f:6b:34:88:9f:53:c4:21:ac:
f4:e9:f3:e7:36:67:22:b8:9b:ba:20:01:c1:d8:c2:e8:f0:64:
e4:a1:47:eb:3d:b1:bb:71:2f:78:c0:e9:85:97:e2:e3:00:16:
a2:7e:c0:81:dc:f8:40:dc:1a:bd:30:45:ae:2e:97:36:e3:51:
67:33:a9:ce:b2:36:3e:2e:36:6f:0a:9e:6b:9a:39:37:34:0f:
95:57:3c:68:0d:cc:0e:8c:ef:8c:81:41:6b:c0:b7:da:ef:79:
bf:9c:4a:69:7b:b7:7c:e8:02:84:fc:7e:5d:c2:f0:77:1d:71:
cb:8d:67:90:12:01:da:48:d6:84:cc:5d:ca:13:78:5a:9e:30:
55:3a:3e:57:a8:1b:01:00:58:93:cc:a5:7f:f2:b1:bf:5b:f3:
5e:9c:63:35:c4:04:38:b3:4b:c0:e7:74:b5:7a:02:dd:67:04:
a4:66:9a:71:bd:10:5a:71:ac:89:6b:d1:af:7e:83:00:23:72:
c5:05:c0:0a:78:b0:eb:da:fb:93:35:85:c8:d4:59:2a:99:79:
a0:b4:5e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:22:44 2025 by rpki-client