Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/yk3GyHwtB7PVjMLc9VdfNU_VF-A.roa
File: yk3GyHwtB7PVjMLc9VdfNU_VF-A.roa (raw, json)
Hash identifier: rqIckEn+o7RYP0kD8h+heC+QXExHnUVNmjz9nzrsV8k=
Subject key identifier: CA:4D:C6:C8:7C:2D:07:B3:D5:8C:C2:DC:F5:57:5F:35:4F:D5:17:E0
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 10D7
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/yk3GyHwtB7PVjMLc9VdfNU_VF-A.roa
Signing time: Sun 09 Mar 2025 16:18:18 +0000
ROA not before: Sun 09 Mar 2025 16:18:18 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 62387
IP address blocks: 101.232.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4311 (0x10d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Mar 9 16:18:18 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=CA4DC6C87C2D07B3D58CC2DCF5575F354FD517E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:99:2c:9b:48:52:9d:19:84:2b:3e:db:79:7d:
4f:ac:74:36:3d:e5:5b:ed:2e:c7:18:fc:f6:c2:bb:
d0:d4:ad:27:db:d5:e4:e5:a7:c4:ec:74:c7:dc:71:
f6:3c:33:01:c7:b2:5c:2a:00:7f:b1:db:80:19:1d:
ff:92:49:8d:6d:04:78:8d:c1:62:30:59:21:0a:8f:
86:7c:36:8e:2d:4a:7a:ed:0e:90:3c:14:5b:a5:20:
d1:7d:e4:1d:03:a5:df:e4:5c:05:5c:c9:ea:af:85:
aa:0e:b9:74:74:9d:59:81:2a:ef:14:40:9e:51:02:
1c:43:f2:91:f3:8e:94:78:fb:cc:b0:2f:72:20:37:
ac:ce:23:1d:8e:d1:ae:2f:f5:0e:72:36:89:f7:64:
2a:46:e0:62:c2:14:9e:eb:24:b0:d9:e0:d1:a7:bc:
46:47:9d:36:29:00:8f:76:12:be:35:d6:0c:c3:9e:
ca:a9:71:a5:d0:b4:b2:69:49:03:4b:b6:60:57:e4:
1b:79:61:32:2f:77:34:9f:59:65:38:2b:93:40:2c:
8a:91:67:3c:7e:39:2e:0b:bc:38:c4:e6:63:34:1b:
f6:ef:ce:de:56:c4:af:0b:47:eb:32:91:db:a9:f4:
61:11:26:71:b8:79:da:50:b6:2a:cc:ab:80:81:17:
20:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4D:C6:C8:7C:2D:07:B3:D5:8C:C2:DC:F5:57:5F:35:4F:D5:17:E0
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/yk3GyHwtB7PVjMLc9VdfNU_VF-A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.232.8.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:be:04:ab:4b:2c:60:b1:9e:29:e8:f8:77:62:a6:84:9d:eb:
20:54:01:89:de:f1:bc:2e:1f:29:9c:85:a5:e7:14:3d:1a:29:
23:de:12:5b:84:6e:6b:19:43:78:44:2a:76:82:71:7a:af:11:
23:24:26:d4:d9:16:4a:05:21:e6:c1:46:b1:50:a9:2a:c5:bb:
cd:39:71:ea:90:7a:4b:fb:23:d6:43:16:11:08:04:ae:b9:a4:
e7:e7:0c:c7:db:ab:6f:0b:77:40:12:cc:de:ae:29:c0:9f:06:
c7:c6:82:fb:bb:ee:ec:62:4f:5e:63:7c:34:a1:97:57:2f:f4:
08:3c:e8:bd:af:5d:ce:77:0a:70:04:8e:94:03:db:6f:e2:d5:
04:8e:a0:97:e2:80:97:84:50:18:79:54:97:e7:a6:e5:85:54:
26:b0:0e:ca:65:05:b1:83:5c:49:7f:81:be:ff:2e:e4:d9:78:
1a:1d:32:54:83:93:63:40:ac:4d:67:01:13:bd:79:1a:b1:bc:
1b:5e:ad:ad:90:02:18:3f:87:0b:77:69:e5:d7:7a:39:56:37:
0f:c4:26:56:47:0b:5e:38:3d:7a:6b:9c:8c:e6:bb:38:99:b6:
cd:d1:69:cb:47:a2:69:5c:68:8b:40:c5:a7:69:d4:09:5e:d8:
78:38:9e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:02:13 2025 by rpki-client