Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/64/AasOdNmv0zHu4_c9-AzjNCkc0uI.roa
File: AasOdNmv0zHu4_c9-AzjNCkc0uI.roa (raw, json)
Hash identifier: N8YP934qLXcJhJar5NjswQEwIUS7svcuTKLe+uxGRAM=
Subject key identifier: 01:AB:0E:74:D9:AF:D3:31:EE:E3:F7:3D:F8:0C:E3:34:29:1C:D2:E2
Certificate issuer: /CN=5EB8C57D72F7946DD7B2420599288ECA153CB709
Certificate serial: 17
Authority key identifier: 5E:B8:C5:7D:72:F7:94:6D:D7:B2:42:05:99:28:8E:CA:15:3C:B7:09
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XrjFfXL3lG3XskIFmSiOyhU8twk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/AasOdNmv0zHu4_c9-AzjNCkc0uI.roa
Signing time: Mon 26 May 2025 09:51:01 +0000
ROA not before: Mon 26 May 2025 09:51:01 +0000
ROA not after: Tue 26 May 2026 00:40:26 +0000
asID: 9803
IP address blocks: 211.150.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23 (0x17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5EB8C57D72F7946DD7B2420599288ECA153CB709
Validity
Not Before: May 26 09:51:01 2025 GMT
Not After : May 26 00:40:26 2026 GMT
Subject: CN=01AB0E74D9AFD331EEE3F73DF80CE334291CD2E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f0:5d:0c:fa:3e:d6:a3:2a:34:29:81:98:ac:
2e:8b:9f:44:c6:6b:a2:27:13:31:a5:c0:b0:79:24:
4e:bf:2a:8d:6d:cf:45:48:60:04:46:ba:be:82:b9:
b7:2f:91:cb:9c:c6:1c:a1:ba:80:62:01:17:eb:f3:
d3:95:5e:43:d5:40:82:40:0c:72:6f:06:4f:09:3f:
67:e3:2e:d6:a4:57:19:e5:d9:33:95:64:3d:88:4a:
f4:fd:a2:d8:1a:57:4b:1e:c7:41:f8:0e:af:91:04:
e3:6d:66:c2:ac:20:a1:38:6a:75:c7:95:cc:93:ac:
1e:1d:07:82:26:d6:fb:7d:97:25:91:8b:61:41:2d:
88:b8:2e:ee:82:98:f2:66:db:a1:37:b3:12:0a:f0:
96:00:a4:71:2c:a6:99:2c:53:78:5b:fa:63:e6:b1:
1d:91:cd:1d:e1:f1:e8:d2:c1:35:6b:4c:30:27:c9:
e5:b0:60:08:3d:88:68:44:a1:87:be:68:9d:70:fc:
2e:bd:06:0f:2b:3f:0c:8e:83:31:38:47:df:dd:f0:
29:3d:f2:95:d8:ee:bd:58:6e:4d:7e:1a:5a:61:74:
a5:d9:e8:90:05:7f:77:3f:d1:7d:84:cf:27:e1:1b:
5d:85:2c:e4:25:18:b1:ff:31:43:44:3d:31:c9:9c:
2c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AB:0E:74:D9:AF:D3:31:EE:E3:F7:3D:F8:0C:E3:34:29:1C:D2:E2
X509v3 Authority Key Identifier:
keyid:5E:B8:C5:7D:72:F7:94:6D:D7:B2:42:05:99:28:8E:CA:15:3C:B7:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/XrjFfXL3lG3XskIFmSiOyhU8twk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XrjFfXL3lG3XskIFmSiOyhU8twk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/AasOdNmv0zHu4_c9-AzjNCkc0uI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.150.128.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:4d:dc:28:c2:4d:a8:ee:29:27:6e:38:f2:b9:a6:6f:00:18:
f1:e2:1f:f5:cb:6a:6d:fc:4f:71:da:15:ff:0c:34:83:fb:18:
5d:24:b8:8a:30:ec:79:4c:c4:44:22:42:18:df:66:f9:11:e6:
2f:cf:e9:58:b3:37:cf:1b:20:c5:0f:86:4c:fe:ef:c0:01:5e:
d4:85:88:54:3e:a2:92:39:0f:64:f6:3c:7e:b0:d5:13:e5:04:
6e:a7:44:f2:83:fa:cc:8a:4e:cd:49:ef:b5:9c:6c:d0:79:52:
5d:5b:f5:01:74:c5:19:8f:cb:36:b9:7c:28:f6:61:a9:81:18:
f8:78:1d:10:2d:d8:d5:c8:fb:a2:14:e4:e3:53:2f:dc:d9:ab:
11:a2:67:8e:6e:ee:5b:c8:ad:4e:9f:07:c1:60:aa:eb:b0:88:
b3:6b:d7:9b:d7:c2:39:6f:a6:20:5d:93:18:f0:b9:ae:47:fe:
f0:69:03:db:df:a6:ab:07:80:40:4e:50:89:f1:c6:7a:81:b9:
94:e0:7d:02:c9:37:8f:ed:d9:61:a9:10:68:42:27:ea:5b:8e:
2e:2e:30:e1:60:04:e6:2a:d4:3a:14:27:dd:5d:a3:6d:63:a2:
10:b9:ce:71:88:b1:4c:34:c6:27:29:b2:36:13:46:1a:35:f0:
f6:20:d2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:59:41 2025 by rpki-client