Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/bV3JSpaifNaIG_CFxEx-B_kb2LM.roa
File: bV3JSpaifNaIG_CFxEx-B_kb2LM.roa (raw, json)
Hash identifier: UQ/I/6snl0KEL2LBZsItrGlbSlsmeZWFO8grfY5rtbw=
Subject key identifier: 6D:5D:C9:4A:96:A2:7C:D6:88:1B:F0:85:C4:4C:7E:07:F9:1B:D8:B3
Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA
Certificate serial: 0817
Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/bV3JSpaifNaIG_CFxEx-B_kb2LM.roa
Signing time: Fri 23 May 2025 07:17:24 +0000
ROA not before: Fri 23 May 2025 07:17:24 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 9808
IP address blocks: 223.160.142.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2071 (0x817)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA
Validity
Not Before: May 23 07:17:24 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=6D5DC94A96A27CD6881BF085C44C7E07F91BD8B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:87:34:87:df:e6:3e:49:ef:21:32:6c:b2:b1:
3d:c0:7d:97:1f:be:ef:1a:94:0e:1e:48:f3:e5:0c:
ae:5a:ce:54:87:75:b7:b6:2e:e9:ee:a1:61:95:5e:
58:8e:63:46:6c:4f:f5:1d:5d:5a:7c:90:6a:e5:cf:
09:d5:57:44:d0:2a:2e:71:2f:96:b0:a3:ba:a4:82:
fa:97:fc:2c:09:ef:c9:3c:32:75:77:0a:af:b9:4b:
eb:b9:e7:f2:9d:5f:a3:68:31:d5:f6:a6:78:3a:63:
07:8e:1c:4a:47:76:9b:4e:29:cf:0b:25:c1:ad:be:
67:e6:bd:df:87:0b:1c:8a:83:c0:05:b7:6c:c7:47:
e4:25:b0:b3:38:f0:98:1d:e0:78:54:e3:db:ff:20:
1f:ad:87:09:54:35:f5:b7:2d:6b:32:fa:00:7f:6e:
f2:77:d6:56:b3:05:84:a7:5d:ff:ac:75:39:4e:94:
ba:b6:b1:54:53:e8:cc:5d:b2:05:a9:b6:07:61:d3:
24:61:1f:d2:8b:dd:c8:b3:7e:96:08:20:7e:62:21:
33:27:8f:6b:ab:30:95:b1:89:11:37:d4:71:d9:a1:
4f:0f:74:e3:4e:06:ca:f1:ef:b9:24:a7:d5:98:4c:
8c:7f:06:e3:af:94:5c:bc:a3:e6:db:1d:a3:d1:46:
b3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5D:C9:4A:96:A2:7C:D6:88:1B:F0:85:C4:4C:7E:07:F9:1B:D8:B3
X509v3 Authority Key Identifier:
keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/bV3JSpaifNaIG_CFxEx-B_kb2LM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.160.142.0/23
Signature Algorithm: sha256WithRSAEncryption
11:44:cb:a7:00:0b:17:b6:4b:82:38:1b:19:41:22:02:5f:50:
0a:96:b5:71:af:d7:f5:35:ae:7a:64:96:ac:ad:17:b9:6a:cf:
d4:0b:1e:6b:9a:7a:64:9c:dc:bf:ae:c0:5a:27:5a:0c:c7:0b:
9b:d1:31:e5:63:c4:bc:cf:ec:97:1a:6a:a8:2f:29:d7:1d:80:
eb:4d:2e:54:ee:3d:40:06:3a:32:79:f6:f2:93:15:1e:7c:fd:
6f:33:19:06:83:a2:48:f6:32:a7:17:c9:a6:df:20:97:29:12:
9c:56:8c:5b:ba:a7:99:74:e2:dd:11:6a:fa:e2:e6:44:4b:e9:
c2:0f:5c:35:74:21:e0:b2:fc:c1:7c:d4:fc:97:14:17:4b:c7:
29:d2:55:c5:47:a1:fd:ed:30:d4:c2:6c:50:1f:69:b7:7b:9d:
5c:79:c9:11:08:0a:ed:c7:aa:fd:14:bf:59:b4:90:37:0d:23:
82:ef:54:62:73:39:bc:61:bb:ed:09:ee:5e:90:8d:29:25:8f:
07:45:9f:1d:c6:70:16:f0:de:0f:cf:9c:71:fb:98:68:74:25:
eb:aa:b4:b1:92:74:61:35:27:c1:0b:7f:1c:d4:54:ed:9d:92:
76:26:d8:b4:29:48:a0:13:2c:ce:74:85:6d:b6:72:86:18:c3:
a1:20:82:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:54:40 2025 by rpki-client