Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3078/CEADiColIuDDAqhZExzAtzO-dgU.roa
File: CEADiColIuDDAqhZExzAtzO-dgU.roa (raw, json)
Hash identifier: T3nTxbpi83d5tiZ8xR039PFcE6sZXCwydi+QQeReXnQ=
Subject key identifier: 08:40:03:88:2A:25:22:E0:C3:02:A8:59:13:1C:C0:B7:33:BE:76:05
Certificate issuer: /CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785
Certificate serial: 04
Authority key identifier: F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/CEADiColIuDDAqhZExzAtzO-dgU.roa
Signing time: Sat 10 May 2025 04:54:35 +0000
ROA not before: Sat 10 May 2025 04:54:35 +0000
ROA not after: Sun 10 May 2026 04:51:55 +0000
asID: 151270
IP address blocks: 110.40.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785
Validity
Not Before: May 10 04:54:35 2025 GMT
Not After : May 10 04:51:55 2026 GMT
Subject: CN=084003882A2522E0C302A859131CC0B733BE7605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:27:31:98:b2:09:63:97:ae:8a:3a:4c:40:2c:
2e:57:19:9f:48:f7:84:4a:a4:d4:09:27:66:ed:49:
ba:96:9d:ad:20:eb:de:25:48:ca:33:ec:99:99:af:
16:ca:d3:fb:ee:f4:94:ad:8e:9f:f0:ef:7e:74:30:
f2:a7:8e:43:61:c2:04:f9:ba:a4:76:8d:8f:1e:b8:
58:69:3e:c9:34:69:29:78:44:ac:3f:e6:4a:59:fc:
a3:41:23:5d:25:36:9a:8c:25:89:77:06:29:65:3b:
7b:15:2d:e9:66:8a:78:cc:24:4c:6d:e0:2a:fa:e8:
93:84:9c:d1:01:4f:92:ca:25:42:f4:e5:59:61:d5:
c6:ff:a2:c7:ae:7f:57:6a:ff:a9:87:0c:be:b4:30:
c2:06:9c:2e:39:fa:82:50:eb:f6:d4:e1:1a:3e:d1:
0e:d9:ef:28:29:34:ba:6c:9e:a2:16:86:b9:09:df:
e7:7c:86:a8:c2:be:9f:a6:fb:ba:54:34:4d:46:bf:
e6:34:76:5b:5b:79:c4:6b:5a:36:7d:5a:a6:bb:af:
fc:57:b6:8c:f8:9f:4d:d0:81:db:ab:22:96:66:5a:
91:fd:61:b5:9c:60:5f:37:28:fb:bf:d3:41:97:05:
1c:00:f2:5b:4b:35:90:98:de:95:14:3c:b5:3a:76:
23:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:40:03:88:2A:25:22:E0:C3:02:A8:59:13:1C:C0:B7:33:BE:76:05
X509v3 Authority Key Identifier:
keyid:F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/CEADiColIuDDAqhZExzAtzO-dgU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
110.40.50.0/24
Signature Algorithm: sha256WithRSAEncryption
05:b9:d9:37:02:3c:6a:db:df:b7:21:46:c1:e6:ae:cc:fb:a7:
00:78:9b:b6:3f:ca:6e:2a:b5:a6:4f:d4:62:80:64:81:bc:55:
58:c8:8c:9d:4a:a9:1d:19:cf:e2:df:4a:f2:83:f1:d1:05:52:
7e:6c:6a:8d:9c:4c:ea:e1:07:05:28:eb:1b:11:3f:6c:29:e7:
ca:fb:b7:11:a7:b2:53:31:85:e5:4a:ee:1c:a7:77:88:09:36:
97:21:17:bb:fc:e5:ba:6f:59:de:e9:9f:5a:5a:87:d3:55:6b:
cf:92:2c:d6:98:e0:a2:6b:41:b5:71:8e:9e:5a:99:11:36:e5:
cb:e9:8d:42:e0:ac:29:66:bd:26:0c:77:2f:d5:10:59:ca:6a:
08:5c:0e:15:39:8b:57:ad:34:52:8c:aa:dd:16:8e:a7:f5:02:
60:53:b8:52:26:65:db:84:07:d5:fa:e1:a4:21:39:20:b0:77:
96:29:9d:ea:39:88:a1:68:c7:e5:16:97:39:27:56:9e:0a:67:
42:a0:db:2d:b8:4a:54:40:fc:f1:f1:30:fc:69:0f:83:93:05:
80:a3:fd:17:f5:dc:27:73:7d:dc:d4:46:a4:ad:1c:43:00:da:
18:5d:38:56:c0:ec:c5:05:76:63:8f:e9:c0:1a:9f:41:3e:13:
a4:d5:10:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:03:35 2025 by rpki-client