Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/bEs8nhiEoryFgnRq5wr5NH1D-6Q.roa
File: bEs8nhiEoryFgnRq5wr5NH1D-6Q.roa (raw, json)
Hash identifier: yqOxMXuMD3PsV5KGoKgJgFP+TXxBm++tOqMqAfIEy0w=
Subject key identifier: 6C:4B:3C:9E:18:84:A2:BC:85:82:74:6A:E7:0A:F9:34:7D:43:FB:A4
Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA
Certificate serial: 082B
Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/bEs8nhiEoryFgnRq5wr5NH1D-6Q.roa
Signing time: Fri 23 May 2025 07:36:36 +0000
ROA not before: Fri 23 May 2025 07:36:36 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 38019
IP address blocks: 223.161.202.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2091 (0x82b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA
Validity
Not Before: May 23 07:36:36 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=6C4B3C9E1884A2BC8582746AE70AF9347D43FBA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8c:ed:91:2e:a2:1b:2f:80:64:ec:05:03:b4:
9e:17:2e:59:65:02:0e:45:b2:0f:70:0e:fd:f5:97:
4b:bf:a2:c6:72:a4:5e:46:fb:1e:37:82:07:7e:ad:
ef:95:08:c9:b9:42:a8:9d:e7:0e:74:15:9f:a7:c4:
fc:a8:95:02:d7:fd:72:13:39:e2:d4:bb:7f:6d:47:
e3:79:34:8d:1f:95:ab:f4:9c:24:1a:94:d3:6c:83:
bd:3e:dc:a9:11:36:f9:70:57:09:f6:ec:38:c9:67:
d7:d4:02:18:32:44:1a:50:12:5c:98:16:bc:8e:44:
7a:80:df:78:d7:93:8a:09:df:e3:8b:66:f3:68:8c:
2a:8c:14:4e:c1:8a:04:30:6f:49:69:74:7f:b3:ce:
6d:bb:cc:4b:79:97:a0:75:fd:db:1d:f7:2d:35:a3:
02:bc:19:4a:56:02:68:9e:ce:31:69:10:20:5b:d7:
3d:ad:80:83:65:9b:f1:6c:e6:5d:e5:46:06:24:57:
28:2e:95:08:ee:1a:c5:c7:c5:63:79:fd:b5:72:4c:
7b:64:65:c7:49:92:b5:59:27:be:99:61:b4:b3:f4:
7f:5f:fe:ce:bb:9d:11:28:7a:10:4b:16:81:d6:14:
18:96:e1:8b:33:fe:18:12:f9:5d:0d:e8:cd:68:07:
fc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:4B:3C:9E:18:84:A2:BC:85:82:74:6A:E7:0A:F9:34:7D:43:FB:A4
X509v3 Authority Key Identifier:
keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/bEs8nhiEoryFgnRq5wr5NH1D-6Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.161.202.0/23
Signature Algorithm: sha256WithRSAEncryption
21:18:74:16:6e:27:5c:29:26:69:fe:0c:bd:09:da:ad:aa:2b:
db:fd:cb:a8:72:61:be:8e:21:75:7b:8d:ed:74:44:12:e8:f0:
23:e1:af:ee:06:30:be:e1:df:e3:4f:30:98:5b:c6:76:b6:aa:
9d:87:fd:3b:e9:d2:9c:cd:36:eb:8e:ca:21:da:e3:1c:4f:d0:
8a:d0:78:d3:73:4d:8f:9c:44:5d:bf:97:47:d7:6e:86:63:a8:
8e:44:ea:11:7c:c5:47:4e:06:f6:43:bd:59:36:3e:54:c7:a6:
ac:12:a3:3c:62:7a:68:6e:3d:ca:04:3a:a8:0e:ca:9c:6a:90:
7f:e9:9c:08:0c:de:9f:0f:90:31:ff:10:59:2e:74:00:4f:6c:
b9:26:ce:e3:1e:a7:91:f4:fa:4f:6e:b8:c4:2d:0d:3d:53:6b:
e3:e6:67:14:d8:f8:0f:6c:bf:6f:b6:b2:1e:4e:64:3a:cf:4c:
05:da:40:09:14:d6:3c:b3:26:29:8c:7a:f5:a5:92:dc:2a:2f:
31:06:41:74:f1:e0:06:54:9e:8c:73:e3:6a:dc:06:ed:77:18:
36:2d:08:c7:16:3c:ef:eb:33:57:a7:f4:fe:58:1a:c3:55:a5:
29:10:19:ab:1c:00:c7:ad:2a:21:60:d1:6d:f1:07:b6:4e:d5:
5f:2b:a4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:24:29 2025 by rpki-client