Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3078/LBwQ983uDABKiVnLKbPpMnq0EQg.roa
File: LBwQ983uDABKiVnLKbPpMnq0EQg.roa (raw, json)
Hash identifier: q7Fu/qq9St0MFjHq1jhnV/IXNi5kFRjUEwXWDzRRfuU=
Subject key identifier: 2C:1C:10:F7:CD:EE:0C:00:4A:89:59:CB:29:B3:E9:32:7A:B4:11:08
Certificate issuer: /CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785
Certificate serial: 43
Authority key identifier: F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/LBwQ983uDABKiVnLKbPpMnq0EQg.roa
Signing time: Sat 17 May 2025 03:42:32 +0000
ROA not before: Sat 17 May 2025 03:42:32 +0000
ROA not after: Sun 10 May 2026 04:51:55 +0000
asID: 151270
IP address blocks: 110.40.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785
Validity
Not Before: May 17 03:42:32 2025 GMT
Not After : May 10 04:51:55 2026 GMT
Subject: CN=2C1C10F7CDEE0C004A8959CB29B3E9327AB41108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:78:88:77:62:04:0e:66:fb:8a:71:7b:bc:fb:
91:0a:80:66:9f:c8:90:2a:9a:29:9c:2e:79:e1:9b:
27:46:d0:b7:42:69:4d:e3:95:e1:2f:9c:16:2a:9e:
57:18:98:c0:97:3b:0e:d3:77:fe:56:c3:7f:95:40:
83:80:af:ae:3c:64:1c:b4:a5:61:4d:da:a8:fd:db:
a8:f3:9a:cc:8c:01:95:19:5f:6a:c7:50:7b:e9:e4:
07:4e:13:ae:5d:48:b7:90:29:85:92:9d:52:b0:1a:
b6:0e:d5:7a:80:81:17:19:3f:07:c9:a1:73:47:ef:
f3:76:95:65:9e:de:12:41:bc:1c:17:28:c6:82:bf:
15:2c:13:fe:d2:28:0d:26:b8:64:84:62:4b:5b:a0:
8e:6b:4c:47:7a:df:3a:16:d4:e0:88:6c:71:f0:59:
e1:cf:5a:28:c0:05:7f:b3:a1:ce:13:75:cf:da:06:
b4:f7:5a:4d:f1:24:6b:c2:99:99:a4:68:12:04:b2:
01:59:83:5c:fe:45:c4:b1:87:26:24:d0:6f:dc:5b:
5b:e6:8c:6c:8c:de:07:2b:fa:fe:7b:b4:b1:45:ff:
81:8c:6d:68:9e:51:c5:e4:f6:c0:3a:f5:d5:21:8b:
e4:df:9d:03:fc:8d:54:06:34:59:e3:24:61:9d:56:
4e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:1C:10:F7:CD:EE:0C:00:4A:89:59:CB:29:B3:E9:32:7A:B4:11:08
X509v3 Authority Key Identifier:
keyid:F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/LBwQ983uDABKiVnLKbPpMnq0EQg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
110.40.66.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:fb:ec:df:15:e2:a1:42:c2:bd:d3:fa:59:61:56:50:f0:af:
9b:61:3d:45:6d:a8:7d:53:e6:c5:93:0a:31:23:01:be:b6:1f:
4f:5e:de:a8:70:e6:de:43:2c:79:73:27:80:7b:9b:0f:b2:b9:
0b:94:61:3e:2a:e9:2d:1f:ae:ea:68:68:6a:74:7d:96:44:8d:
f7:2f:89:40:d8:d8:32:88:c3:7e:2a:88:e1:3e:4d:86:9c:6c:
60:d2:d0:f7:bc:c7:76:7c:ab:36:44:35:2e:95:1d:86:dc:8f:
1b:4d:67:40:dc:70:d7:2d:02:15:4c:1d:3d:4a:30:74:fe:02:
bc:46:5f:de:d1:27:5d:9b:fd:90:b6:73:8f:16:ac:1a:2c:65:
5e:43:8d:8e:cd:9a:e5:6c:1b:7d:5c:4f:b7:ae:6d:12:ef:85:
6f:36:f6:3f:e6:69:fa:e4:dc:4f:b1:5a:84:d5:ca:5c:43:fe:
f7:3a:0c:ff:c1:53:79:03:2e:9e:2f:11:1b:22:83:cd:a8:24:
03:35:fb:b8:d3:dc:7b:98:b9:9f:17:d6:d3:be:20:9e:8f:73:
e1:d0:ab:5e:7e:93:65:7c:1c:32:c1:1e:67:cf:b6:aa:d8:a2:
7e:87:22:88:fe:26:ba:0d:12:9c:0c:67:f7:36:b1:b4:51:c4:
f0:86:e8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:03:48 2025 by rpki-client