Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/0fNsVBeu6p4fVqHDTGkXvPA41LI.roa
File: 0fNsVBeu6p4fVqHDTGkXvPA41LI.roa (raw, json)
Hash identifier: SGJ5erO5W1g2YmIPa3yv0tIm7CQDNF0CAcDrvrZ2slQ=
Subject key identifier: D1:F3:6C:54:17:AE:EA:9E:1F:56:A1:C3:4C:69:17:BC:F0:38:D4:B2
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 1023
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/0fNsVBeu6p4fVqHDTGkXvPA41LI.roa
Signing time: Wed 05 Feb 2025 09:37:35 +0000
ROA not before: Wed 05 Feb 2025 09:37:35 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 62387
IP address blocks: 101.232.56.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4131 (0x1023)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Feb 5 09:37:35 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=D1F36C5417AEEA9E1F56A1C34C6917BCF038D4B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e1:5a:ce:1a:72:19:54:8b:40:30:ee:24:10:
c8:aa:d0:7f:de:c4:b2:e3:ac:0c:f6:bd:96:67:09:
42:1d:a5:0e:1d:23:b4:44:bd:1c:6e:98:12:8c:b8:
30:10:d2:c6:af:1e:67:66:29:21:88:13:94:e2:4c:
12:50:ab:50:cd:fd:ad:a1:11:fb:5d:95:b3:a5:9a:
cf:5a:b1:50:84:31:f8:57:e2:c8:3b:b1:ad:fa:9d:
df:f1:d8:6c:23:f6:85:96:97:f4:be:fe:bd:01:a2:
62:c2:94:76:d9:64:91:96:bc:a0:41:78:f3:9c:e2:
62:a0:6e:f9:4e:c3:fa:a1:22:6c:0b:89:7a:02:ec:
00:fd:f2:d2:92:8c:b8:4c:fd:51:b4:eb:59:4f:65:
56:87:df:c1:10:cc:32:09:9a:61:36:86:10:be:c8:
10:ff:12:a1:7a:e4:06:ee:5b:c6:b3:02:01:9e:6c:
4f:69:c3:4c:33:a8:70:46:d4:d6:73:77:15:fd:96:
3c:c4:09:9d:a7:41:68:2c:63:47:e0:11:77:5e:26:
8c:4e:40:62:86:f2:54:7e:00:06:df:cf:98:bd:35:
19:8e:d4:a8:d5:2e:74:0d:93:a4:b6:9a:2f:18:a8:
12:33:e2:18:60:8e:03:5c:a1:81:b0:42:f5:3d:21:
4a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F3:6C:54:17:AE:EA:9E:1F:56:A1:C3:4C:69:17:BC:F0:38:D4:B2
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/0fNsVBeu6p4fVqHDTGkXvPA41LI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.232.56.0/22
Signature Algorithm: sha256WithRSAEncryption
68:97:bb:1e:7e:d6:ee:9c:f0:23:15:8b:37:71:fd:e0:e3:ef:
11:67:7e:91:3f:2f:b0:b1:c1:de:d4:fe:95:eb:2e:26:ff:92:
84:eb:59:fa:e7:58:d7:8c:69:b3:e2:ea:23:ad:12:8f:ee:4e:
03:73:91:68:6f:a2:5e:89:03:2d:1f:f0:37:44:3d:21:a5:f5:
b0:64:1a:1c:50:89:40:7c:b9:ac:71:25:22:b0:e9:37:da:6d:
d6:bb:4c:d1:6e:b2:68:40:c2:5c:8d:2f:c2:98:7c:69:cc:0f:
97:68:34:53:59:12:8d:72:50:7f:02:32:18:53:e6:fe:9c:31:
9e:d2:67:26:da:3f:34:ab:b4:5b:19:a9:c8:b9:36:e6:46:90:
0a:52:02:00:97:ff:71:de:80:fe:5a:b0:27:f7:ad:53:7a:77:
2a:b2:30:c5:83:2f:79:ba:53:4d:4d:5d:e1:6c:2c:88:82:9e:
fc:76:6a:77:26:bd:36:7b:2d:cb:2e:6c:48:a0:d8:2d:ac:c9:
d6:10:e8:0a:e6:6b:e1:e5:0a:95:1d:30:99:ab:54:df:08:d7:
b8:42:7e:c2:dd:ae:dc:79:b8:b6:be:60:aa:4e:10:83:fc:b4:
cf:ac:4d:ca:d5:71:54:13:fd:86:ed:19:e1:31:8c:d1:58:17:
04:d6:a6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:32 2025 by rpki-client