Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3078/MR_Jh0H0K-yG8L3NSslgvAQGzHk.roa
File: MR_Jh0H0K-yG8L3NSslgvAQGzHk.roa (raw, json)
Hash identifier: wRMrWvIsPaUSA6+/W/favb7ZoameBVvcj7FBgC1WPi4=
Subject key identifier: 31:1F:C9:87:41:F4:2B:EC:86:F0:BD:CD:4A:C9:60:BC:04:06:CC:79
Certificate issuer: /CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785
Certificate serial: 46
Authority key identifier: F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/MR_Jh0H0K-yG8L3NSslgvAQGzHk.roa
Signing time: Sat 17 May 2025 03:42:33 +0000
ROA not before: Sat 17 May 2025 03:42:33 +0000
ROA not after: Sun 10 May 2026 04:51:55 +0000
asID: 151270
IP address blocks: 110.40.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785
Validity
Not Before: May 17 03:42:33 2025 GMT
Not After : May 10 04:51:55 2026 GMT
Subject: CN=311FC98741F42BEC86F0BDCD4AC960BC0406CC79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:30:b2:73:c4:6b:d1:10:9b:82:c2:cb:2f:95:
da:42:eb:48:0c:e5:90:38:43:bb:0e:bb:40:02:a5:
d6:0b:55:75:64:19:e1:06:52:e4:39:47:00:b9:ae:
2d:b4:04:dd:de:4d:01:0f:be:9d:5f:e3:89:65:d7:
90:56:e5:24:23:0a:f9:35:33:4b:df:d9:f0:a1:4b:
13:73:96:71:41:5c:35:f3:f0:50:05:70:26:49:d9:
62:47:fa:d6:59:2d:71:25:70:fd:bc:45:3d:84:ce:
f1:0b:34:61:ea:47:98:da:c7:e1:ba:43:18:27:98:
c9:34:f7:e6:5f:79:ef:15:d4:da:87:e0:24:e2:ea:
dc:78:3a:af:b9:1c:5d:41:62:17:33:4e:53:54:29:
68:cc:fb:2b:c3:35:78:e9:4c:c0:28:b4:f3:34:4e:
2c:c0:7e:5a:f4:7c:3c:77:47:79:80:2d:40:32:93:
52:b8:6a:17:04:33:ee:c5:40:ce:ef:49:88:60:43:
6e:43:77:91:b8:87:b9:d5:3d:b7:cc:85:31:f3:66:
01:ee:a4:6f:bc:0a:c2:90:14:c9:11:bb:eb:4c:c4:
80:c0:b3:c9:4c:63:fe:4f:61:cf:a5:1f:5b:11:ba:
0c:5c:7e:50:c4:70:a0:81:6e:76:8c:35:b8:5e:c8:
71:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1F:C9:87:41:F4:2B:EC:86:F0:BD:CD:4A:C9:60:BC:04:06:CC:79
X509v3 Authority Key Identifier:
keyid:F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/MR_Jh0H0K-yG8L3NSslgvAQGzHk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
110.40.78.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:b0:b5:f8:b2:b6:bf:18:b6:c8:77:3c:50:f3:12:19:ac:67:
51:bb:f9:46:7f:67:c2:d4:64:9f:a7:94:c9:c5:05:39:22:dc:
2f:65:5d:a8:71:7d:04:25:06:2d:8e:8d:3b:29:f1:59:6c:62:
60:36:86:d9:a3:f4:61:77:ad:66:88:91:5a:ac:e6:53:35:a6:
bc:83:49:91:a2:85:99:b0:3e:ef:d6:bf:96:2c:d8:2b:db:d4:
f3:ea:72:9f:ef:f8:25:2d:22:a9:8f:5f:47:8e:73:83:9a:b2:
33:5a:7e:69:50:93:7e:15:ec:f4:14:ae:f8:ec:f1:fe:e3:83:
87:32:c0:4c:a8:54:9f:4a:da:91:5b:d5:cb:3b:c0:7f:a7:43:
08:49:54:5c:24:b2:01:95:c6:3c:80:97:37:19:ea:4c:b4:ed:
55:ab:6f:d4:cf:de:fa:7e:1e:b7:61:1d:bd:8a:18:f1:a3:51:
24:12:bf:41:61:e2:4f:e3:78:98:45:7b:fe:08:7b:a6:58:77:
c0:69:d4:23:62:9d:ce:f4:c2:30:c6:53:71:dd:b8:a0:7b:14:
e1:83:31:02:19:01:d7:1e:b1:83:be:ec:ff:ab:b3:e3:c2:7d:
21:14:8d:03:6f:1c:cf:36:2f:23:ef:75:00:8f:2c:87:21:b6:
a7:5d:81:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:53:41 2025 by rpki-client