Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/qsFrc-QDKVEV48996C7WHIoQOzU.roa
File: qsFrc-QDKVEV48996C7WHIoQOzU.roa (raw, json)
Hash identifier: 4g9YLRrFPau5MwCvVcl3cKPxCy4T0JWu+CcKzbOW09Y=
Subject key identifier: AA:C1:6B:73:E4:03:29:51:15:E3:CF:7D:E8:2E:D6:1C:8A:10:3B:35
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 1114
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/qsFrc-QDKVEV48996C7WHIoQOzU.roa
Signing time: Tue 18 Mar 2025 10:09:59 +0000
ROA not before: Tue 18 Mar 2025 10:09:59 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 62387
IP address blocks: 101.232.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4372 (0x1114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Mar 18 10:09:59 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=AAC16B73E403295115E3CF7DE82ED61C8A103B35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b3:25:d1:fc:34:8a:12:38:c0:c4:d5:56:f9:
49:6c:ca:4b:bb:4c:3d:e7:51:15:3d:13:ef:9c:00:
3c:34:c3:f8:f6:b0:25:03:74:bb:33:85:14:6f:f5:
24:a3:fc:d6:5e:c2:11:00:6b:47:52:40:b5:4a:08:
79:b4:2e:96:10:16:b9:b9:d7:c0:fc:c3:91:50:85:
8b:6a:af:d8:5b:26:34:02:4c:38:84:29:5b:55:f8:
eb:59:d5:32:15:5c:38:12:a5:38:a1:1b:d8:5d:8e:
a7:81:0d:28:1e:cb:3a:d1:2b:54:8c:ed:82:c5:2b:
46:39:7a:a2:46:c4:f7:f3:d7:61:b4:28:d6:10:62:
e8:0d:3d:b5:03:75:44:bf:32:04:3b:20:e3:f3:dd:
c3:ae:35:80:e4:e6:4d:ea:6a:f6:81:bb:31:af:38:
b0:c1:33:18:94:c2:bd:6f:c5:45:a0:2a:5e:ef:db:
ca:c0:9d:cc:37:03:5d:35:34:ab:0d:23:05:e7:37:
6c:b0:6c:aa:fb:e5:e5:15:f8:7b:c1:ec:9f:1b:4f:
0f:cd:b9:ea:56:6f:af:dd:ac:a0:97:bf:ca:34:a4:
50:32:ba:5b:82:6a:fc:51:9a:82:16:4a:f6:fb:c7:
7a:5e:fb:ad:17:b8:04:98:d9:f1:2d:a5:e1:a7:c7:
14:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C1:6B:73:E4:03:29:51:15:E3:CF:7D:E8:2E:D6:1C:8A:10:3B:35
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/qsFrc-QDKVEV48996C7WHIoQOzU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.232.48.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:57:cc:06:d4:10:70:41:18:68:5a:95:59:7f:e1:ec:ec:86:
bb:8f:9e:8c:dd:e4:3c:29:40:56:02:9e:5d:a7:4f:d7:78:84:
b1:6d:7a:09:80:d1:6c:e5:d9:5a:08:ca:92:b7:e5:12:51:51:
ab:6a:82:d9:83:98:9e:fe:96:30:8e:9d:bb:e8:de:00:63:45:
82:84:7c:ec:75:7e:d2:8c:d7:73:40:66:5d:81:11:84:7e:36:
f3:aa:68:b4:31:1c:52:cf:02:76:cc:6a:6d:1e:f3:fc:d4:37:
fb:e0:88:fc:61:30:93:41:b9:69:76:ea:f1:da:d6:09:3c:3d:
d4:a8:f2:80:e1:b3:e0:97:fc:3c:52:49:dd:ef:a8:94:f0:a5:
d2:b1:bb:a9:0e:ef:c3:d8:c1:ee:a2:7e:db:62:69:59:ad:2f:
5e:50:94:e9:33:e8:c3:b1:fc:c9:72:8d:f8:c3:4a:dc:13:9e:
6e:fc:52:f7:a8:9b:e2:7f:15:da:3a:9f:5e:61:b8:75:78:64:
a1:fc:10:14:df:ad:da:fd:2c:a7:fa:08:30:d8:df:4e:3c:73:
2c:ec:1b:8d:ec:68:d3:e0:09:3b:a7:0d:c3:fc:cd:30:e2:f5:
ee:f3:83:69:8e:ce:7a:8e:6e:bf:36:a1:db:0a:27:7f:09:2b:
f4:08:a3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:11:08 2025 by rpki-client