Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3078/Ced57QBZLneKH9Kze-kEGKUHnrg.roa
File: Ced57QBZLneKH9Kze-kEGKUHnrg.roa (raw, json)
Hash identifier: P40Nj2HSIYRo1aLg77y+jVkzV7URrD4SSkj+FYna/VY=
Subject key identifier: 09:E7:79:ED:00:59:2E:77:8A:1F:D2:B3:7B:E9:04:18:A5:07:9E:B8
Certificate issuer: /CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785
Certificate serial: 42
Authority key identifier: F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/Ced57QBZLneKH9Kze-kEGKUHnrg.roa
Signing time: Sat 17 May 2025 03:42:32 +0000
ROA not before: Sat 17 May 2025 03:42:32 +0000
ROA not after: Sun 10 May 2026 04:51:55 +0000
asID: 151270
IP address blocks: 110.40.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66 (0x42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785
Validity
Not Before: May 17 03:42:32 2025 GMT
Not After : May 10 04:51:55 2026 GMT
Subject: CN=09E779ED00592E778A1FD2B37BE90418A5079EB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:74:ff:7e:ca:00:c5:9c:ce:4b:bb:e4:1e:35:
e5:5d:cf:f7:39:9f:67:cd:6a:6c:d9:49:74:c1:cd:
20:61:2e:ef:be:19:d4:9a:34:fa:a6:dc:21:64:3f:
34:3d:55:60:d6:10:1c:ec:5e:e6:5b:1c:31:a0:93:
f4:2c:d7:8e:81:c5:53:9d:9d:22:08:03:e2:92:3e:
75:dd:d6:ad:43:0e:ff:03:06:84:a3:c4:13:4f:3c:
c2:26:b7:d1:aa:1c:9e:6c:3c:36:22:1e:7e:cd:c7:
d4:ed:36:63:11:8d:3b:9b:e3:3b:05:4e:0f:7f:34:
ac:f0:aa:ea:5d:f1:85:6a:0f:74:89:92:cb:16:ff:
57:ac:f4:ba:47:90:c7:01:39:01:ee:19:07:2d:63:
b6:e5:83:79:92:8d:3e:ec:70:77:48:be:f6:21:ab:
bd:75:e1:fe:e6:47:53:5c:7a:54:78:96:b4:3e:66:
ef:fa:bd:7a:fa:2f:67:d5:95:ae:39:a8:20:27:ca:
a5:90:ce:5c:e0:73:f1:78:ad:12:58:f8:c0:ac:ae:
a7:2c:dd:92:c6:cf:7e:7d:47:de:55:9f:54:11:bd:
47:38:f8:59:51:a8:e1:97:d0:7f:94:d8:b7:03:9c:
25:5d:1b:c5:fd:9d:81:b2:7c:5d:55:f2:b2:81:75:
4d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E7:79:ED:00:59:2E:77:8A:1F:D2:B3:7B:E9:04:18:A5:07:9E:B8
X509v3 Authority Key Identifier:
keyid:F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/Ced57QBZLneKH9Kze-kEGKUHnrg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
110.40.62.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:a2:f9:59:7b:a1:fe:a0:7f:f4:81:2d:00:e1:56:de:7a:39:
6f:60:68:27:c1:9f:92:ba:ae:24:c5:02:b8:b9:68:95:3b:1d:
87:77:b0:ad:b1:94:dd:70:ba:6d:bb:f5:b9:32:5c:f6:f5:d4:
d4:73:a8:61:b1:75:da:d8:ea:c3:e1:e9:82:f8:d8:b0:65:45:
6c:1b:a5:f8:d5:26:3e:73:ed:61:af:9a:68:37:7a:f7:27:8a:
f4:d3:fd:68:19:8f:b8:05:9b:4e:92:1f:d7:2e:4c:19:85:05:
89:11:13:ba:b2:99:19:e6:cf:77:e0:63:95:f5:79:54:e3:37:
21:df:58:06:64:f5:5b:2d:85:c9:42:7e:fa:ff:14:6a:44:b0:
da:68:1b:a7:49:18:18:08:60:9b:e1:70:ae:0b:b6:52:79:df:
95:50:76:1c:ee:fd:40:79:c5:a4:25:56:5b:25:36:f9:61:25:
43:eb:4e:45:43:c9:8b:4f:39:14:f4:ef:cb:de:d4:b0:a5:f8:
c7:6e:71:af:83:af:59:fa:a7:c2:96:a1:4f:c4:ba:0d:27:58:
89:32:92:90:80:ed:66:23:d6:89:18:39:17:20:dd:38:12:ea:
85:a7:bd:f9:90:2a:71:0e:c9:e1:da:c4:67:12:c0:14:7e:1f:
90:cc:cf:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:21:03 2025 by rpki-client