Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/RFZfcdGyAJnkCv9hv_PwS7Xjm-k.roa
File: RFZfcdGyAJnkCv9hv_PwS7Xjm-k.roa (raw, json)
Hash identifier: xjOHi+3xqiTTKkwGwLPu9Lk10LTayaxlE++xrPe4W4Q=
Subject key identifier: 44:56:5F:71:D1:B2:00:99:E4:0A:FF:61:BF:F3:F0:4B:B5:E3:9B:E9
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 0A61
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/RFZfcdGyAJnkCv9hv_PwS7Xjm-k.roa
Signing time: Thu 06 Mar 2025 01:31:07 +0000
ROA not before: Thu 06 Mar 2025 01:31:07 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 4134
IP address blocks: 58.66.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2657 (0xa61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Mar 6 01:31:07 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=44565F71D1B20099E40AFF61BFF3F04BB5E39BE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4f:e3:a9:5c:a7:47:79:97:98:93:1b:cb:ee:
c3:4a:1b:13:5e:7d:e8:db:3f:92:ad:bd:0f:d5:26:
6e:34:5a:a7:06:ab:80:1f:71:d1:07:65:18:eb:e7:
a5:2f:ad:97:93:bd:e4:2f:a4:74:ab:0a:ff:eb:71:
fa:8f:01:2a:87:15:42:e8:dc:2b:e8:bc:89:11:38:
f4:22:97:8e:e3:85:5e:b8:84:16:d6:72:40:de:e2:
fb:17:3e:2b:72:48:f5:20:70:ec:99:07:97:fc:e9:
4a:a2:f2:3c:28:c3:56:af:ec:58:1b:ea:4d:5a:35:
df:f3:9e:41:9f:d7:be:c6:c7:d7:7a:82:60:3f:5e:
e6:7d:41:47:8a:02:84:cb:bd:f6:b6:13:6b:58:02:
f5:48:87:7a:49:b5:8c:74:95:9f:a7:3c:e7:25:17:
9d:38:db:e3:ab:51:98:d0:fc:4d:e9:be:db:d5:0d:
8d:9e:52:f7:77:61:90:45:38:39:22:1d:3d:cb:61:
3c:6d:78:15:63:5a:5c:bd:c4:6f:00:b1:30:80:ba:
74:2c:38:9c:14:78:4e:10:d5:02:7a:a7:1e:d9:86:
e4:30:f3:1f:8b:99:fd:e5:bb:7d:be:5c:2e:7c:d8:
80:ec:a3:6e:bb:42:da:21:0b:b8:93:2d:e0:6d:10:
f3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:56:5F:71:D1:B2:00:99:E4:0A:FF:61:BF:F3:F0:4B:B5:E3:9B:E9
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/RFZfcdGyAJnkCv9hv_PwS7Xjm-k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
58.66.128.0/18
Signature Algorithm: sha256WithRSAEncryption
10:f3:90:f0:32:50:6f:1b:0b:46:e7:86:57:90:f5:13:7c:1f:
de:37:dc:05:c6:20:3e:3d:5f:96:b4:6a:cb:f1:f7:af:ab:5c:
d8:55:9a:d3:27:71:07:b0:bd:aa:c7:6e:b6:1a:ca:ab:ed:c7:
6d:1f:22:5f:78:0c:22:c2:0c:9d:d6:fc:13:2f:83:f0:3a:b3:
6e:d8:61:e5:37:03:50:88:ba:e0:d7:93:2c:98:59:56:e0:70:
ab:c6:3b:80:9c:f7:59:e0:0f:93:6e:55:4f:61:7e:60:65:ba:
1c:1e:2b:88:9c:30:99:ee:55:96:c5:5b:04:53:23:46:1c:75:
40:ce:c8:cb:7b:74:b4:88:0e:58:56:f9:04:ff:de:19:93:c4:
39:22:dd:79:f0:49:03:9d:1d:15:6d:c2:db:d3:32:80:c6:44:
b8:b8:09:fa:86:0b:c7:db:56:e6:60:44:58:61:76:09:87:27:
35:c9:f3:d7:57:09:96:3f:28:da:99:d6:22:ee:ed:ec:82:04:
ab:e8:22:7b:bf:8f:f7:a6:43:1e:c3:08:8b:12:97:4c:1d:a8:
42:14:a0:17:f4:c8:ac:6a:84:37:67:f6:f4:ad:6b:90:a5:6b:
44:a3:fc:06:e8:fa:ad:0a:51:72:21:62:c0:c1:67:72:a3:ec:
46:d9:84:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:15:34 2025 by rpki-client