Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/64/53WDhDUk0P7JcNoey2WXAIu3VAg.roa
File: 53WDhDUk0P7JcNoey2WXAIu3VAg.roa (raw, json)
Hash identifier: iOmb24loXZqCFP8DSE+C3NqDD3n3CuCWWhW3g3TUjRA=
Subject key identifier: E7:75:83:84:35:24:D0:FE:C9:70:DA:1E:CB:65:97:00:8B:B7:54:08
Certificate issuer: /CN=5EB8C57D72F7946DD7B2420599288ECA153CB709
Certificate serial: 07
Authority key identifier: 5E:B8:C5:7D:72:F7:94:6D:D7:B2:42:05:99:28:8E:CA:15:3C:B7:09
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XrjFfXL3lG3XskIFmSiOyhU8twk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/53WDhDUk0P7JcNoey2WXAIu3VAg.roa
Signing time: Mon 26 May 2025 00:46:37 +0000
ROA not before: Mon 26 May 2025 00:46:37 +0000
ROA not after: Tue 26 May 2026 00:40:26 +0000
asID: 9803
IP address blocks: 211.100.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5EB8C57D72F7946DD7B2420599288ECA153CB709
Validity
Not Before: May 26 00:46:37 2025 GMT
Not After : May 26 00:40:26 2026 GMT
Subject: CN=E77583843524D0FEC970DA1ECB6597008BB75408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a2:96:06:d8:f6:f4:cc:e1:3f:d3:b2:c1:4c:
ff:e4:b4:50:8d:a4:88:36:67:bb:9a:eb:f1:44:53:
84:46:58:56:5a:83:e7:0e:dc:9f:15:e7:2e:68:c5:
96:27:94:3a:86:de:23:a4:bf:ac:90:c2:d5:8a:ea:
c4:a1:44:29:fc:2d:16:85:25:fc:1e:86:a0:e9:bf:
a7:46:85:c6:e9:51:89:72:af:c9:86:cd:c9:79:dc:
db:9d:00:a8:52:0a:c9:e4:1c:ec:8f:3a:6e:8d:92:
01:a6:a2:20:ff:59:c2:57:8e:0e:cd:5e:11:32:55:
87:4b:4f:3e:f8:e0:b6:f5:02:17:ab:c7:f3:81:3f:
d2:ce:be:71:d5:ce:22:4a:06:17:06:31:2b:2a:2e:
11:a6:0d:2a:4f:b1:f7:21:b0:e1:30:7b:92:e6:2d:
ca:10:3f:8f:93:50:bc:39:f7:71:6e:82:cd:1b:02:
a4:fa:9d:b8:67:82:bb:d5:47:59:64:a1:cd:7c:f0:
4b:b3:d9:11:31:33:7b:13:50:8e:0f:0f:9e:e1:53:
af:3f:9a:9f:56:16:d7:a1:c8:96:ac:48:c5:0d:59:
03:53:8b:08:a4:6b:ac:57:d9:f8:b0:0f:ea:b9:f9:
7f:f2:4e:dc:d0:64:c0:b2:6a:0e:96:35:a9:a5:cd:
4f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:75:83:84:35:24:D0:FE:C9:70:DA:1E:CB:65:97:00:8B:B7:54:08
X509v3 Authority Key Identifier:
keyid:5E:B8:C5:7D:72:F7:94:6D:D7:B2:42:05:99:28:8E:CA:15:3C:B7:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/XrjFfXL3lG3XskIFmSiOyhU8twk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XrjFfXL3lG3XskIFmSiOyhU8twk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/53WDhDUk0P7JcNoey2WXAIu3VAg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.100.71.0/24
Signature Algorithm: sha256WithRSAEncryption
95:24:3a:de:59:2a:be:dc:94:77:3e:51:9d:2e:3b:31:ae:cc:
d0:c0:39:bc:92:28:ef:52:0d:fa:3d:7d:8c:95:ec:95:ad:9c:
f4:e6:d0:55:c6:27:23:8e:22:9e:0b:0a:c7:25:ac:07:19:72:
88:1c:a7:06:67:1a:0f:4f:c7:07:68:0b:c8:6c:de:b6:96:52:
f9:f5:2d:f0:ce:c4:41:79:0f:a1:3a:c3:7c:f3:b9:28:fa:b9:
15:bb:f2:37:d8:5f:40:f1:e2:ab:84:a2:76:5d:d3:77:7b:63:
60:db:2f:0e:ad:cd:d2:2c:91:cd:64:73:94:c4:79:99:7c:30:
3e:92:86:09:31:6f:db:72:a3:50:69:ea:fd:b8:c9:a0:fd:c2:
2b:b8:c9:9b:f5:ab:d4:4c:6a:e3:31:e8:a3:26:76:24:16:e1:
f6:77:37:7f:ea:6c:36:07:44:0f:e8:58:a7:40:18:6e:80:b8:
63:e5:19:9c:8b:a3:74:e4:3e:26:9f:4e:89:46:93:a5:22:37:
7f:55:3a:ff:41:8a:6d:7f:c1:14:13:7e:c5:31:84:06:5c:41:
ff:f8:f6:73:2f:02:0b:f6:42:e9:07:d0:33:2c:cb:cf:91:aa:
bd:18:e9:26:9d:ce:a0:86:17:f5:85:07:71:a5:d4:22:20:ec:
e0:6e:bb:08
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgIBBzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1RUI4
QzU3RDcyRjc5NDZERDdCMjQyMDU5OTI4OEVDQTE1M0NCNzA5MB4XDTI1MDUyNjAw
NDYzN1oXDTI2MDUyNjAwNDAyNlowMzExMC8GA1UEAxMoRTc3NTgzODQzNTI0RDBG
RUM5NzBEQTFFQ0I2NTk3MDA4QkI3NTQwODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJeilgbY9vTM4T/TssFM/+S0UI2kiDZnu5rr8URThEZYVlqD5w7c
nxXnLmjFlieUOobeI6S/rJDC1YrqxKFEKfwtFoUl/B6GoOm/p0aFxulRiXKvyYbN
yXnc250AqFIKyeQc7I86bo2SAaaiIP9ZwleODs1eETJVh0tPPvjgtvUCF6vH84E/
0s6+cdXOIkoGFwYxKyouEaYNKk+x9yGw4TB7kuYtyhA/j5NQvDn3cW6CzRsCpPqd
uGeCu9VHWWShzXzwS7PZETEzexNQjg8PnuFTrz+an1YW16HIlqxIxQ1ZA1OLCKRr
rFfZ+LAP6rn5f/JO3NBkwLJqDpY1qaXNT50CAwEAAaOCAe8wggHrMB0GA1UdDgQW
BBTndYOENSTQ/slw2h7LZZcAi7dUCDAfBgNVHSMEGDAWgBReuMV9cveUbdeyQgWZ
KI7KFTy3CTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGA1UdHwRUMFIwUKBO
oEyGSnJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC82NC9Y
cmpGZlhMM2xHM1hza0lGbVNpT3loVTh0d2suY3JsMGMGCCsGAQUFBwEBBFcwVTBT
BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw
MDAwL1hyakZmWEwzbEczWHNrSUZtU2lPeWhVOHR3ay5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGbBggrBgEFBQcBCwSBjjCBizBWBggrBgEFBQcwC4ZKcnN5bmM6Ly9ycGtp
LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzY0LzUzV0RoRFVrMFA3SmNOb2V5
MldYQUl1M1ZBZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5j
bi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT
ZEcwDQYJKoZIhvcNAQELBQADggEBAJUkOt5ZKr7clHc+UZ0uOzGuzNDAObySKO9S
Dfo9fYyV7JWtnPTm0FXGJyOOIp4LCsclrAcZcogcpwZnGg9PxwdoC8hs3raWUvn1
LfDOxEF5D6E6w3zzuSj6uRW78jfYX0Dx4quEonZd03d7Y2DbLw6tzdIskc1kc5TE
eZl8MD6Shgkxb9tyo1Bp6v24yaD9wiu4yZv1q9RMauMx6KMmdiQW4fZ3N3/qbDYH
RA/oWKdAGG6AuGPlGZyLo3TkPiafTolGk6UiN39VOv9Bim1/wRQTfsUxhAZcQf/4
9nMvAgv2QukH0DMsy8+Rqr0Y6SadzqCGF/WFB3Gl1CIg7OBuuwg=
-----END CERTIFICATE-----
Generated at Thu Jun 5 19:59:51 2025 by rpki-client