Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3078/u9FZXYXiD2v_anJ0_vUTlaa9iCs.roa
File: u9FZXYXiD2v_anJ0_vUTlaa9iCs.roa (raw, json)
Hash identifier: 6FLggfxE+ACuRt8hMyz7pysi/RideXVwAmYqMFYsztY=
Subject key identifier: BB:D1:59:5D:85:E2:0F:6B:FF:6A:72:74:FE:F5:13:95:A6:BD:88:2B
Certificate issuer: /CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785
Certificate serial: 36
Authority key identifier: F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/u9FZXYXiD2v_anJ0_vUTlaa9iCs.roa
Signing time: Sat 17 May 2025 03:40:38 +0000
ROA not before: Sat 17 May 2025 03:40:38 +0000
ROA not after: Sun 10 May 2026 04:51:55 +0000
asID: 151270
IP address blocks: 110.40.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785
Validity
Not Before: May 17 03:40:38 2025 GMT
Not After : May 10 04:51:55 2026 GMT
Subject: CN=BBD1595D85E20F6BFF6A7274FEF51395A6BD882B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b6:b0:d4:b2:a8:0f:27:28:c4:5c:a8:68:fd:
98:6a:1f:9b:cb:95:36:5f:e5:db:27:04:20:76:be:
a4:68:68:bf:56:b2:4a:06:d9:e1:4f:01:36:e3:14:
75:13:0b:a3:b3:1b:04:47:23:07:d4:f4:d5:15:91:
86:9d:c2:7b:11:7e:f9:3f:d0:3c:79:08:18:ee:18:
7c:d3:ab:06:38:62:d6:61:bc:db:16:df:96:ca:83:
53:a6:54:72:de:8f:ce:1b:cd:38:b5:f1:4e:55:89:
55:7b:76:3c:07:1e:92:0d:27:5d:ce:ea:fd:32:c8:
e9:65:04:96:98:e4:1a:80:d3:8a:4a:df:e1:8b:0c:
a8:cb:27:33:aa:c6:c5:82:ba:b1:bb:78:b3:ec:cf:
a3:88:e4:23:ef:e0:44:0a:c6:66:a0:9b:dc:91:5f:
2e:06:56:60:92:65:95:c6:41:70:48:35:e0:f4:a4:
a5:98:1c:fb:25:57:90:bc:b6:05:09:53:f5:be:a9:
02:94:89:f8:eb:61:68:f0:76:00:b7:d9:6e:13:fd:
a2:ae:f2:1f:9f:e4:92:56:d4:90:bf:de:6f:e1:48:
d3:5a:0d:18:fd:9a:ea:22:d0:2b:fb:de:a6:7d:4b:
1e:07:da:7e:ad:33:1a:bb:bc:2f:7a:88:19:47:e3:
dc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D1:59:5D:85:E2:0F:6B:FF:6A:72:74:FE:F5:13:95:A6:BD:88:2B
X509v3 Authority Key Identifier:
keyid:F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/u9FZXYXiD2v_anJ0_vUTlaa9iCs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
110.40.38.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:12:6d:b9:86:40:da:ee:59:4f:9b:98:3a:1b:31:a8:81:81:
ed:b1:37:6b:93:1e:0e:19:68:8c:83:3f:58:3d:cf:5f:33:ba:
c3:a7:69:8c:a1:77:dd:ad:20:48:b8:dc:48:22:43:ba:11:32:
21:5d:3c:62:9c:55:e7:19:a2:e9:f4:56:d2:cd:ad:bb:ed:a0:
43:dd:1a:07:35:6c:d4:1c:d4:90:ab:cb:74:b6:65:2c:ea:9a:
35:23:5b:c1:b3:cf:72:0e:72:df:49:be:1a:20:a6:1a:43:cb:
7d:dc:3f:7f:26:e9:e5:80:3a:36:b4:3d:9f:ab:55:b2:24:4a:
4f:09:02:82:7e:29:53:14:14:ad:5d:63:02:fa:55:c6:d0:89:
61:93:be:02:00:8b:81:2f:ae:52:a8:73:f7:e2:6a:e5:30:a4:
21:58:21:91:84:8b:99:78:c8:fd:46:5d:8e:15:65:42:bd:13:
ce:46:c1:b1:f1:f4:fd:08:34:d8:f6:8f:cc:c4:52:cd:db:95:
22:83:99:bc:30:89:81:de:e3:51:f1:37:d8:09:d8:e8:44:a6:
b1:02:f5:8e:6a:61:a2:3f:da:5f:98:c4:92:17:07:c6:c1:f2:
a6:5f:5c:44:1d:9b:b6:e4:e0:6b:e2:c5:66:9f:10:15:8d:20:
33:d3:f1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:55:46 2025 by rpki-client