Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3078/eCLskOeLuWaHHsqV9qy-n9QqCI8.roa
File: eCLskOeLuWaHHsqV9qy-n9QqCI8.roa (raw, json)
Hash identifier: TMG8j23hhw24lShU7CR3Oxvj7lxTwHYTSqIoZb/WDtk=
Subject key identifier: 78:22:EC:90:E7:8B:B9:66:87:1E:CA:95:F6:AC:BE:9F:D4:2A:08:8F
Certificate issuer: /CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785
Certificate serial: 40
Authority key identifier: F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/eCLskOeLuWaHHsqV9qy-n9QqCI8.roa
Signing time: Sat 17 May 2025 03:42:31 +0000
ROA not before: Sat 17 May 2025 03:42:31 +0000
ROA not after: Sun 10 May 2026 04:51:55 +0000
asID: 151270
IP address blocks: 110.40.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785
Validity
Not Before: May 17 03:42:31 2025 GMT
Not After : May 10 04:51:55 2026 GMT
Subject: CN=7822EC90E78BB966871ECA95F6ACBE9FD42A088F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4e:4b:9e:ad:2b:69:0b:95:9e:88:30:7d:65:
6c:4d:ab:e6:5c:dd:20:ef:d7:d3:2b:de:f4:0c:24:
61:e3:7c:5e:84:1f:eb:18:5a:c0:74:00:77:36:07:
17:dc:33:05:74:da:3f:ce:98:e9:d2:d3:1e:0d:59:
91:f1:6a:80:3c:2d:56:e5:5b:4f:fa:35:fd:7c:ba:
08:91:61:d5:60:03:f6:90:bf:64:59:a0:f8:b9:c8:
70:06:4f:70:0a:3e:ac:6c:74:21:57:d7:05:a0:15:
b1:38:b5:d8:6b:cb:4e:d3:a4:e9:18:83:30:86:80:
0d:a0:2e:01:f3:0d:31:02:9f:82:5b:e3:2f:73:8a:
5f:9b:54:e2:a1:62:c8:80:9b:33:4b:2a:f8:0f:62:
74:a5:0e:6b:00:a4:75:2e:e6:d1:92:68:4e:9c:8d:
86:12:d2:11:fb:54:c1:b1:cb:55:9e:81:dd:2f:f8:
93:37:d9:75:7e:22:37:ba:48:ad:cb:a9:2a:49:dc:
ff:fb:71:23:b2:f7:e2:4d:08:a4:98:d7:5b:36:7c:
4b:f4:3c:5c:9d:96:a9:0d:73:e3:e3:8d:9b:db:65:
34:9c:5d:c7:41:a4:4d:9f:39:3d:10:f7:00:21:69:
fe:dc:40:e1:8d:9f:b0:7d:00:d8:ee:97:fb:72:ed:
71:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:22:EC:90:E7:8B:B9:66:87:1E:CA:95:F6:AC:BE:9F:D4:2A:08:8F
X509v3 Authority Key Identifier:
keyid:F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/eCLskOeLuWaHHsqV9qy-n9QqCI8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
110.40.65.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:8a:62:43:20:6a:05:22:72:7b:a0:1a:72:28:c9:2b:5a:07:
a9:2f:3f:69:1b:78:89:05:40:8a:c4:f0:de:0a:8b:c6:85:20:
51:4e:69:d3:b6:6e:ed:ba:bd:84:99:fa:92:57:97:63:a3:ca:
d5:7f:9e:63:ff:7a:e1:50:6c:85:51:98:e2:ba:e4:19:7a:a3:
c8:42:85:00:80:96:b4:e7:e0:86:b5:1d:00:3a:1f:35:01:41:
df:b0:92:cc:62:cd:3b:c7:6a:e0:3a:7e:d5:b9:91:55:c5:da:
e6:52:60:7f:13:4a:0e:39:9a:33:c7:3d:71:a3:db:df:05:41:
08:f0:a5:14:aa:d5:04:ad:ff:82:b2:96:43:3a:e3:aa:09:6c:
41:5a:a8:b2:dc:b7:aa:5a:b2:2f:fa:38:96:1a:6f:89:5e:4a:
4b:7b:67:83:77:af:43:8a:ec:18:ec:4c:ab:3c:bd:3d:e0:29:
f5:0c:e3:92:68:48:e1:2a:84:db:50:44:8c:c8:01:a2:76:47:
3b:ed:7c:b3:7d:ac:c7:50:18:6f:b4:47:af:3b:6c:8a:be:d8:
e0:6f:87:c5:f3:fe:67:fc:31:b8:95:25:61:f6:57:9a:d3:ec:
29:bf:8d:e5:c8:0e:fc:85:53:d3:40:63:be:41:cb:27:7b:07:
ce:4a:05:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:31:20 2025 by rpki-client