Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/YWL88wxKTPVgXrqZ75UTCINKn3Q.roa
File: YWL88wxKTPVgXrqZ75UTCINKn3Q.roa (raw, json)
Hash identifier: +dUueZ6IHuIEQ3uDH8MucMBp012pJdlJbENHoAT0vvk=
Subject key identifier: 61:62:FC:F3:0C:4A:4C:F5:60:5E:BA:99:EF:95:13:08:83:4A:9F:74
Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA
Certificate serial: 081E
Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/YWL88wxKTPVgXrqZ75UTCINKn3Q.roa
Signing time: Fri 23 May 2025 07:36:31 +0000
ROA not before: Fri 23 May 2025 07:36:31 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 56042
IP address blocks: 223.161.204.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2078 (0x81e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA
Validity
Not Before: May 23 07:36:31 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=6162FCF30C4A4CF5605EBA99EF951308834A9F74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e3:46:46:e1:23:6c:33:9f:12:04:80:93:3d:
8a:a7:d2:2b:20:7b:22:e9:23:c4:d4:c4:e6:01:1d:
0d:a5:39:5b:f6:8f:74:c3:d6:16:4b:19:46:e4:a8:
f2:37:c4:cd:90:39:63:f8:1d:ec:79:45:bf:33:1a:
12:ad:50:6b:b6:e2:a3:cc:cb:1c:fa:dc:c0:c1:1b:
f6:d7:13:0b:f2:c9:b3:3f:14:3d:89:08:52:37:16:
3e:2c:f4:4f:86:45:56:e4:35:30:d6:c6:aa:e2:aa:
13:52:e0:02:56:90:fc:a9:45:c4:79:40:b5:9c:7e:
66:32:b9:28:23:ce:6c:75:f0:54:a0:1d:d6:7b:8c:
61:75:ff:13:84:84:72:21:ea:f0:ba:3a:16:44:42:
90:35:10:3d:55:5a:1c:00:24:78:3c:d2:32:9b:cd:
e8:c1:2e:dc:a6:d7:c2:1c:3c:65:97:e1:e1:bb:ce:
e6:95:80:40:83:72:5a:e3:7e:a8:38:69:21:ff:b0:
2c:20:bc:60:a0:0c:98:3a:e0:49:4a:9d:ec:10:1d:
9d:02:c6:ff:f6:60:22:6e:18:c3:89:50:6b:b7:c4:
0c:e2:19:67:3a:66:4a:3c:fb:4b:c8:02:b9:4b:9a:
4e:c0:5f:34:26:ab:93:b9:01:24:52:93:74:21:5b:
44:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:62:FC:F3:0C:4A:4C:F5:60:5E:BA:99:EF:95:13:08:83:4A:9F:74
X509v3 Authority Key Identifier:
keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/YWL88wxKTPVgXrqZ75UTCINKn3Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.161.204.0/23
Signature Algorithm: sha256WithRSAEncryption
48:6f:2f:04:0d:d9:ee:35:ea:1b:fe:f2:10:f7:39:be:59:62:
a3:d6:c6:e1:5d:74:21:d3:29:89:91:61:af:c3:b5:d8:ef:6d:
22:cf:f1:c6:92:8b:8a:2e:7c:43:fd:bd:96:a6:8b:48:54:e8:
01:93:3a:d3:08:83:a4:65:58:30:36:11:0a:e6:41:0c:70:bd:
31:ae:a9:9d:b7:48:f2:8f:6e:30:88:ba:5c:6d:55:bc:56:06:
9f:16:e9:c8:de:9a:9d:36:22:fe:d7:ab:ed:bc:f7:f4:2f:36:
f6:7c:f4:a7:83:82:3c:b9:77:b3:d4:25:21:90:18:88:f2:e7:
ba:be:8f:ca:e2:84:37:ba:b9:33:71:c8:05:fb:92:24:00:df:
91:b4:bf:d2:51:d9:75:dd:79:48:53:bb:9e:37:59:29:24:f8:
ac:99:eb:42:ab:dc:33:ca:7e:db:d8:37:96:43:d9:39:8a:75:
4b:66:38:a6:e8:d0:2b:0d:1b:35:57:e1:4a:76:9e:c7:98:2a:
bc:3a:06:a5:d2:46:ac:ce:81:54:65:c9:76:04:f1:5f:95:ba:
70:a0:16:70:69:ec:be:8e:d7:63:5f:9c:e9:9f:9f:ff:ba:1e:
3f:49:dd:9b:e9:a6:50:87:5a:b4:6f:fc:7b:f5:d4:64:67:10:
91:13:0a:f8
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICCB4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw
MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTA1MjMw
NzM2MzFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDYxNjJGQ0YzMEM0QTRD
RjU2MDVFQkE5OUVGOTUxMzA4ODM0QTlGNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDe40ZG4SNsM58SBICTPYqn0isgeyLpI8TUxOYBHQ2lOVv2j3TD
1hZLGUbkqPI3xM2QOWP4Hex5Rb8zGhKtUGu24qPMyxz63MDBG/bXEwvyybM/FD2J
CFI3Fj4s9E+GRVbkNTDWxqriqhNS4AJWkPypRcR5QLWcfmYyuSgjzmx18FSgHdZ7
jGF1/xOEhHIh6vC6OhZEQpA1ED1VWhwAJHg80jKbzejBLtym18IcPGWX4eG7zuaV
gECDclrjfqg4aSH/sCwgvGCgDJg64ElKnewQHZ0Cxv/2YCJuGMOJUGu3xAziGWc6
Zko8+0vIArlLmk7AXzQmq5O5ASRSk3QhW0RFAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUYWL88wxKTPVgXrqZ75UTCINKn3QwHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U
IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv
TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy9ZV0w4OHd4S1RQVmdYcnFa
NzVVVENJTktuM1Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
36HMMA0GCSqGSIb3DQEBCwUAA4IBAQBIby8EDdnuNeob/vIQ9zm+WWKj1sbhXXQh
0ymJkWGvw7XY720iz/HGkouKLnxD/b2WpotIVOgBkzrTCIOkZVgwNhEK5kEMcL0x
rqmdt0jyj24wiLpcbVW8VgafFunI3pqdNiL+16vtvPf0Lzb2fPSng4I8uXez1CUh
kBiI8ue6vo/K4oQ3urkzccgF+5IkAN+RtL/SUdl13XlIU7ueN1kpJPismetCq9wz
yn7b2DeWQ9k5inVLZjim6NArDRs1V+FKdp7HmCq8Ogal0kaszoFUZcl2BPFflbpw
oBZwaey+jtdjX5zpn5//uh4/Sd2b6aZQh1q0b/x79dRkZxCREwr4
-----END CERTIFICATE-----
Generated at Thu Jun 5 20:32:49 2025 by rpki-client