Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/mKwxQdzVJWimudOfUqqMYKggOG4.roa
File: mKwxQdzVJWimudOfUqqMYKggOG4.roa (raw, json)
Hash identifier: ZB3qCCebPBh8NMMU0suGZjchBdTEHPxPsDEeq04NQO4=
Subject key identifier: 98:AC:31:41:DC:D5:25:68:A6:B9:D3:9F:52:AA:8C:60:A8:20:38:6E
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 0A68
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/mKwxQdzVJWimudOfUqqMYKggOG4.roa
Signing time: Thu 06 Mar 2025 12:40:15 +0000
ROA not before: Thu 06 Mar 2025 12:40:15 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 4134
IP address blocks: 58.66.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2664 (0xa68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Mar 6 12:40:15 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=98AC3141DCD52568A6B9D39F52AA8C60A820386E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:74:93:62:c0:d4:49:f7:93:93:67:c6:45:f6:
2e:ab:80:82:41:b5:f6:1f:af:a3:60:83:17:11:89:
01:d1:3a:bc:d5:5c:f1:8d:65:e3:4c:5b:0c:73:83:
47:3f:47:07:88:28:8c:09:41:29:a6:88:88:40:11:
14:b3:42:8b:c1:db:60:64:70:71:bb:20:86:4a:ff:
44:ae:9e:08:d8:e7:8b:e5:15:7f:f6:c7:f9:8b:36:
59:f4:e5:d1:a5:76:21:8a:d3:b2:b3:c3:21:02:93:
66:da:d4:44:6e:45:cf:62:40:d3:65:fb:6c:6d:2a:
3b:61:ba:f1:4b:da:75:9c:97:3b:71:52:f6:a8:8f:
dc:f3:47:e2:e1:52:67:84:e3:6b:79:e9:d9:35:75:
d2:2e:c1:34:49:33:58:9d:77:77:46:e9:02:e8:29:
19:c7:34:25:d1:c6:15:22:0f:9e:52:c4:57:7d:a1:
a0:f8:ab:7e:8b:28:af:f5:b3:2c:97:da:1d:81:7c:
79:ed:b7:89:c2:d4:b2:6b:82:35:ae:54:7c:bd:f3:
44:f5:26:1d:ce:4a:71:5c:1a:00:98:f9:ee:7b:35:
33:31:3d:02:b4:44:79:7d:84:87:b4:5b:8a:5d:82:
12:7c:02:bf:74:81:74:f2:a9:b9:42:f5:1d:e3:e0:
0e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AC:31:41:DC:D5:25:68:A6:B9:D3:9F:52:AA:8C:60:A8:20:38:6E
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/mKwxQdzVJWimudOfUqqMYKggOG4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
58.66.160.0/19
Signature Algorithm: sha256WithRSAEncryption
a2:86:44:5c:8c:e1:c5:df:8b:2f:ff:ac:4a:ee:f4:bd:ca:37:
b9:4f:f3:ac:af:21:7f:ae:74:93:b2:ef:38:84:6c:ea:4c:8e:
21:3c:d8:37:5e:2f:7f:d0:a9:3b:e8:96:d4:01:43:ed:5a:ff:
2a:30:06:58:78:0b:66:d8:41:bd:f4:09:42:c7:e4:ec:73:6e:
1e:1e:84:9f:dc:e0:96:1f:dd:b6:26:21:10:fd:3c:30:78:81:
bf:a4:8f:55:e6:a3:ba:03:03:35:24:5a:b7:3f:f3:22:42:9b:
18:a7:bc:4c:94:66:be:ca:0d:53:11:d6:3a:11:4a:dd:4d:65:
4a:ec:c7:df:d8:94:aa:57:03:29:cd:89:1e:39:46:aa:23:ba:
d3:1e:b4:b9:42:bb:0b:99:7e:d6:dc:86:43:90:62:46:cb:3c:
a1:5d:f9:f2:4c:1a:53:b7:9b:da:68:1e:9c:5d:86:87:27:7a:
fd:06:8b:6e:9f:c6:32:3c:55:25:e6:28:fb:59:4b:93:53:31:
a6:7a:12:b1:ca:c5:cc:36:90:9d:65:45:34:1c:d3:e5:ab:2c:
34:a1:39:48:f4:77:aa:74:c9:d3:07:71:9f:3f:17:4e:a4:3b:
7a:49:87:03:16:85:1c:8a:49:36:ee:2f:58:09:7b:28:a0:b7:
26:74:e0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:36:29 2025 by rpki-client