Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/bTTelBX8-cCkuKmCdwhaIkvJQlk.roa
File: bTTelBX8-cCkuKmCdwhaIkvJQlk.roa (raw, json)
Hash identifier: 6gccRvfg4hORMTXVCTw7W3oUMnWCr3RxUubfaRazmH4=
Subject key identifier: 6D:34:DE:94:15:FC:F9:C0:A4:B8:A9:82:77:08:5A:22:4B:C9:42:59
Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA
Certificate serial: 0801
Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/bTTelBX8-cCkuKmCdwhaIkvJQlk.roa
Signing time: Fri 23 May 2025 07:07:20 +0000
ROA not before: Fri 23 May 2025 07:07:20 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 56047
IP address blocks: 223.160.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2049 (0x801)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA
Validity
Not Before: May 23 07:07:20 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=6D34DE9415FCF9C0A4B8A98277085A224BC94259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d9:a8:fb:7c:b2:7d:72:f0:77:f4:4a:2f:1b:
4e:0e:19:26:e5:3b:84:38:98:e1:5a:a1:f9:ea:d3:
92:ba:21:51:1d:4d:12:b3:10:32:5f:61:e9:59:d8:
cf:8d:e6:17:f7:0c:37:4b:46:2d:f0:86:a2:2b:84:
18:74:b3:f0:8d:1a:a6:33:41:8d:64:5c:2a:2c:3f:
4d:09:cb:24:47:3c:9d:c4:bb:6d:6b:40:22:0d:3c:
e2:9b:ab:c8:47:d5:de:99:b7:71:27:a3:45:cc:ee:
11:a9:21:90:72:4c:85:f1:c4:45:27:07:d1:08:c5:
7e:ee:b3:b4:4f:51:df:8f:9b:b2:15:4b:f1:a6:47:
7b:ff:5e:33:ad:b7:c0:bd:4e:7a:62:7f:72:b1:c8:
8c:de:de:65:84:37:93:35:84:16:a0:bc:2b:72:13:
eb:11:3d:95:4a:67:46:34:d9:83:f6:be:2f:8b:d9:
fa:7f:fa:30:f3:89:89:81:c9:10:67:6f:9b:70:36:
36:78:64:65:84:93:4e:29:4e:ee:65:ee:28:ce:c9:
dc:f8:72:10:51:92:7f:2d:df:57:3d:e4:59:76:a3:
94:80:17:05:c7:06:27:97:7b:c2:c1:de:20:8a:d3:
0f:d4:06:32:e8:30:c4:aa:87:c3:09:58:c5:45:b9:
18:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:34:DE:94:15:FC:F9:C0:A4:B8:A9:82:77:08:5A:22:4B:C9:42:59
X509v3 Authority Key Identifier:
keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/bTTelBX8-cCkuKmCdwhaIkvJQlk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.160.112.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:11:03:ad:be:0a:ee:4d:a8:9d:26:a1:9a:d6:3e:ac:74:01:
bf:3b:63:4c:09:3c:0f:ad:a2:d3:32:f1:c2:fa:f4:12:c5:5e:
e7:97:74:2f:4d:b7:89:d3:9c:21:f4:96:54:1c:f0:80:e5:f1:
40:c6:8e:74:41:3b:d3:40:bf:53:14:09:4a:12:38:64:e8:d0:
d8:71:f6:fd:8b:24:48:c6:c5:6d:93:f4:db:0f:6f:2b:44:7f:
c9:38:ac:9e:7d:c1:20:8d:b8:5b:ef:c2:da:e2:60:fa:bd:87:
04:e3:a9:55:3d:cd:07:5e:19:ac:10:68:01:53:51:bc:eb:53:
fe:04:94:ec:c6:ea:ce:39:2b:3f:86:92:a0:98:56:5f:58:84:
31:48:9f:5c:c2:c5:b8:ae:c9:dc:0d:14:51:09:86:2e:97:c0:
f3:12:03:17:b4:7b:a6:3f:6f:8b:68:e9:93:34:0b:ce:89:a1:
0c:c8:f4:14:17:0e:09:f3:93:ca:0c:51:06:7f:fa:db:dc:5f:
0a:50:7d:f3:be:46:93:27:6c:9f:30:ff:35:bf:a6:c9:04:eb:
34:15:14:ba:95:40:9d:62:39:eb:fb:d6:c2:55:4e:01:08:7c:
b5:70:47:04:b8:9a:73:77:d7:67:37:37:5c:77:1e:19:41:8a:
64:94:a8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:02:16 2025 by rpki-client