Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3282/ktC06fQEJBggpxTwAbAGbfs3tZ4.roa
File: ktC06fQEJBggpxTwAbAGbfs3tZ4.roa (raw, json)
Hash identifier: /A2cXGiibB0dOfd+IxGVrnJl6kb+X3BRssgmUlh0HVE=
Subject key identifier: 92:D0:B4:E9:F4:04:24:18:20:A7:14:F0:01:B0:06:6D:FB:37:B5:9E
Certificate issuer: /CN=4CF09146DE604C0E442D56C68FC86CC50400AD21
Certificate serial: 0755
Authority key identifier: 4C:F0:91:46:DE:60:4C:0E:44:2D:56:C6:8F:C8:6C:C5:04:00:AD:21
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TPCRRt5gTA5ELVbGj8hsxQQArSE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3282/ktC06fQEJBggpxTwAbAGbfs3tZ4.roa
Signing time: Wed 28 May 2025 13:14:26 +0000
ROA not before: Wed 28 May 2025 13:14:26 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 20473
IP address blocks: 160.19.82.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1877 (0x755)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4CF09146DE604C0E442D56C68FC86CC50400AD21
Validity
Not Before: May 28 13:14:26 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=92D0B4E9F404241820A714F001B0066DFB37B59E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:39:58:a4:96:e5:ae:8a:e7:e5:78:b5:9e:9c:
94:19:18:a8:5e:a7:69:8a:1d:82:6a:cd:93:be:b0:
7f:5f:87:8a:8f:e8:b9:df:1e:fd:b3:fc:14:11:9b:
c9:fe:91:f7:c4:17:cc:18:9f:82:90:00:a7:3a:6f:
28:9f:64:f7:bd:0f:b5:a6:b2:1a:29:4e:d1:6d:27:
ae:9b:80:44:e5:b9:cf:6f:95:4a:49:a6:c1:c7:5a:
cd:8b:90:2d:d9:c7:07:7d:9b:8b:0b:ce:e2:f4:87:
58:f8:2b:33:65:15:70:38:19:ce:0a:71:b2:79:3f:
46:16:15:e8:78:1e:9f:a9:d6:e2:46:c8:6a:e3:d5:
84:b2:c4:59:82:08:c3:74:74:af:b8:74:ab:cf:1e:
42:2f:d5:78:59:e7:77:22:6a:29:96:eb:14:15:9d:
1b:f1:d0:e6:d4:1e:39:9e:15:84:b2:58:46:99:3b:
4c:59:5e:da:ab:15:d5:05:42:bf:9a:62:cc:f4:6f:
78:ec:18:82:f0:bc:19:49:d1:d4:d4:d2:ae:6e:65:
23:67:f8:8d:ef:38:df:9a:b6:f2:3f:81:a1:5e:19:
90:21:37:32:bc:ef:40:6f:09:bb:0d:5b:96:8d:db:
1b:37:87:61:40:3b:87:a5:20:4a:6a:36:02:a7:ef:
e6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D0:B4:E9:F4:04:24:18:20:A7:14:F0:01:B0:06:6D:FB:37:B5:9E
X509v3 Authority Key Identifier:
keyid:4C:F0:91:46:DE:60:4C:0E:44:2D:56:C6:8F:C8:6C:C5:04:00:AD:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3282/TPCRRt5gTA5ELVbGj8hsxQQArSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TPCRRt5gTA5ELVbGj8hsxQQArSE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3282/ktC06fQEJBggpxTwAbAGbfs3tZ4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
160.19.82.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:e5:f3:ba:45:85:fc:05:a9:e9:93:cc:bf:73:ee:fb:2d:bb:
43:aa:40:0d:91:3f:d6:d9:72:05:86:9e:4f:c4:08:33:5a:dc:
3e:a9:10:b9:45:57:7d:92:9c:e0:86:a4:fa:12:f6:f4:f4:df:
c0:ee:41:92:a7:1a:07:30:99:0d:33:57:65:da:21:c8:61:60:
1c:ee:4a:d3:ed:10:38:0a:39:19:47:f2:83:bb:a3:3e:c0:c9:
73:24:08:f4:7c:5b:45:9c:02:db:e5:cd:d1:eb:23:f0:b7:6b:
58:ba:f6:9e:73:61:24:61:70:07:f4:32:34:bc:4f:f3:16:bd:
09:34:6e:b7:de:0c:ee:e7:70:ed:1b:18:86:74:39:42:d7:83:
aa:49:13:bc:bf:14:3e:1c:a7:ba:1a:e9:29:e8:96:0c:ae:7c:
72:ad:0d:cd:67:8d:73:68:e5:81:44:46:a5:67:65:96:f9:97:
18:85:46:92:cb:e0:05:22:0d:72:a6:da:6c:0d:17:64:3f:23:
d6:f5:66:c2:37:40:40:3b:b0:67:2b:ed:ca:58:d4:cd:26:ab:
d5:71:f9:2e:bd:81:07:5f:c1:c0:18:3a:b4:bc:f0:0c:03:54:
14:74:f4:01:24:ec:c7:26:3d:69:6d:31:c3:27:37:99:5f:3d:
a1:06:60:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:26:22 2025 by rpki-client