Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/WgK6jIMoLigCeQ0qqvYq5JHft_0.roa
File: WgK6jIMoLigCeQ0qqvYq5JHft_0.roa (raw, json)
Hash identifier: hMzf3QsUaInMyV/rUkR7PYcwCmoif2XKZ5qyPb3DH1I=
Subject key identifier: 5A:02:BA:8C:83:28:2E:28:02:79:0D:2A:AA:F6:2A:E4:91:DF:B7:FD
Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA
Certificate serial: 0811
Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/WgK6jIMoLigCeQ0qqvYq5JHft_0.roa
Signing time: Fri 23 May 2025 07:17:23 +0000
ROA not before: Fri 23 May 2025 07:17:23 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 134810
IP address blocks: 223.160.146.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2065 (0x811)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA
Validity
Not Before: May 23 07:17:23 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=5A02BA8C83282E2802790D2AAAF62AE491DFB7FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b8:81:58:71:20:d7:dd:a4:21:ff:d6:6c:0a:
19:b8:e5:f0:2e:3a:f7:88:23:92:a9:67:de:4c:14:
20:ed:e9:f4:dc:df:35:f2:db:10:41:55:d6:49:f4:
53:84:9a:21:cb:79:ed:a5:d2:6f:40:bf:52:7b:a1:
36:87:70:7b:74:6d:cb:98:60:f3:a7:f1:af:e9:38:
16:86:c1:01:45:81:bd:dc:2e:f0:13:0a:7b:a6:3d:
a2:7a:fc:8b:3c:94:e2:af:1c:1f:50:79:48:0b:e8:
ed:1f:99:93:bb:17:d4:2b:ba:06:94:cc:64:6d:66:
89:64:f7:c4:e6:bb:bb:c5:95:a5:f7:53:5f:a9:b0:
b8:69:82:40:e1:c7:aa:39:b7:5f:29:c6:33:45:bb:
f4:cb:14:00:f9:ba:9f:9b:38:f3:66:11:31:89:65:
29:e9:97:5f:00:6c:aa:35:5f:db:32:63:4a:57:b8:
92:0b:9e:91:22:24:9a:c4:c1:00:26:1b:08:1c:5c:
51:d8:47:f1:8f:fe:d8:e9:7d:06:84:2e:9b:a4:7f:
99:f8:49:4c:a4:cb:3d:38:b8:78:62:8c:1d:a7:b9:
63:b0:5c:ab:4d:5d:a7:14:f4:dd:ed:31:6d:3f:f3:
5e:df:2b:c8:f0:b8:43:99:58:56:f9:de:de:58:06:
18:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:02:BA:8C:83:28:2E:28:02:79:0D:2A:AA:F6:2A:E4:91:DF:B7:FD
X509v3 Authority Key Identifier:
keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/WgK6jIMoLigCeQ0qqvYq5JHft_0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.160.146.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:a1:46:0f:42:62:e2:67:0d:63:65:ab:0b:77:51:de:e1:02:
25:c2:78:da:56:4c:fc:c6:ba:d4:a7:54:f1:ac:8c:fc:8a:eb:
c6:4c:cb:8c:8b:0f:79:e8:58:f0:3e:bf:ce:bc:d0:cf:ee:e9:
0e:fc:6e:86:91:a8:32:3a:b2:2d:73:6d:64:db:9b:c8:83:c0:
e5:df:f8:3f:50:a7:13:90:f3:7e:b3:b3:74:87:73:6a:2e:97:
3f:03:aa:b6:5e:1e:a4:e9:4c:da:3a:3c:73:ae:60:5d:66:04:
aa:1b:50:2c:2d:0a:2c:60:02:03:05:90:11:6c:86:f4:18:85:
ab:d4:0d:36:db:08:d6:f1:f7:a3:6c:74:d6:5b:d0:f1:63:54:
93:c3:74:2f:36:e8:fe:76:85:4c:2d:01:14:c9:be:22:27:83:
cb:5b:cd:7d:96:79:a7:d9:d4:c2:60:06:a9:b2:85:0d:a9:18:
f1:31:78:9f:db:8d:38:12:13:58:40:c3:42:92:98:9e:10:d1:
72:9f:c1:9b:23:d3:af:f1:cf:0b:1c:72:2a:b4:b7:29:78:14:
19:d7:92:82:94:3b:6f:39:e6:07:6b:f6:41:f2:72:a4:ab:a7:
ba:8a:1f:1a:ab:c8:7d:14:32:d1:78:5b:28:9d:25:bf:73:43:
97:72:3a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:59:32 2025 by rpki-client