Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/64/NpRrsLdPP0YpI7jjQD34UQ5k4G8.roa
File: NpRrsLdPP0YpI7jjQD34UQ5k4G8.roa (raw, json)
Hash identifier: 01WGFpA57IU1hSI2uRZXrj1/+8ZrG6EjbFFy2SBjfaM=
Subject key identifier: 36:94:6B:B0:B7:4F:3F:46:29:23:B8:E3:40:3D:F8:51:0E:64:E0:6F
Certificate issuer: /CN=5EB8C57D72F7946DD7B2420599288ECA153CB709
Certificate serial: 14
Authority key identifier: 5E:B8:C5:7D:72:F7:94:6D:D7:B2:42:05:99:28:8E:CA:15:3C:B7:09
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XrjFfXL3lG3XskIFmSiOyhU8twk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/NpRrsLdPP0YpI7jjQD34UQ5k4G8.roa
Signing time: Mon 26 May 2025 00:56:40 +0000
ROA not before: Mon 26 May 2025 00:56:40 +0000
ROA not after: Tue 26 May 2026 00:40:26 +0000
asID: 23724
IP address blocks: 211.157.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5EB8C57D72F7946DD7B2420599288ECA153CB709
Validity
Not Before: May 26 00:56:40 2025 GMT
Not After : May 26 00:40:26 2026 GMT
Subject: CN=36946BB0B74F3F462923B8E3403DF8510E64E06F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ba:67:15:c5:79:38:45:67:bd:f0:fc:24:e2:
80:28:a9:27:4c:c5:64:a7:0d:e3:a9:83:69:5c:69:
c8:fd:d8:6a:1c:38:7a:b2:7a:40:af:53:9c:21:59:
d8:e1:ed:bb:dc:f0:a8:49:34:4f:c5:e4:49:5e:c5:
c3:ca:a5:0e:2c:b3:b7:b8:76:ff:62:3c:db:f2:a6:
83:cb:0b:fd:55:92:4d:9e:3c:43:70:33:01:e1:00:
fd:f0:c3:9f:5f:05:b5:bb:18:10:71:c9:26:e1:5e:
ee:b5:42:a6:b0:b4:43:e6:ae:ff:3a:5e:6d:a8:dc:
04:8a:ff:a9:a3:6e:06:b1:ad:ec:36:f2:06:c7:fd:
93:56:06:d7:95:12:88:fb:48:3a:1a:1f:bd:4d:d9:
3d:3e:6b:77:56:59:dc:cb:fc:24:f5:a8:8d:cf:94:
39:88:6e:17:74:e6:fd:53:4a:dd:d7:30:f9:d6:be:
a6:44:2a:16:18:b1:c8:6f:54:78:8e:ec:5f:f9:66:
72:15:c3:f1:a7:82:43:98:47:2b:23:51:46:93:5b:
5d:5a:38:dc:b6:e9:fd:47:6d:aa:54:7d:e0:2d:f4:
c1:72:74:8f:e1:26:b5:c9:76:b5:72:99:6c:cc:0d:
7a:ae:22:59:0f:44:8a:73:90:ab:2c:e9:db:11:47:
1b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:94:6B:B0:B7:4F:3F:46:29:23:B8:E3:40:3D:F8:51:0E:64:E0:6F
X509v3 Authority Key Identifier:
keyid:5E:B8:C5:7D:72:F7:94:6D:D7:B2:42:05:99:28:8E:CA:15:3C:B7:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/XrjFfXL3lG3XskIFmSiOyhU8twk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XrjFfXL3lG3XskIFmSiOyhU8twk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/64/NpRrsLdPP0YpI7jjQD34UQ5k4G8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.157.128.0/18
Signature Algorithm: sha256WithRSAEncryption
3c:56:62:77:03:6d:3a:a7:f8:fb:48:5a:d7:6f:2d:7e:05:dc:
56:21:c6:44:73:9b:38:67:fa:c1:c0:2a:f0:fe:7b:26:fa:45:
de:c7:b0:e6:53:a1:11:79:30:37:0e:37:e3:af:fa:f1:cc:62:
91:1f:cf:1a:87:e4:ae:af:eb:4e:cb:87:b9:8b:ba:b5:62:06:
18:64:2d:af:4e:df:7b:11:de:e3:79:c2:50:bc:88:94:ad:b6:
bf:33:bd:20:74:fd:b7:f5:99:96:f9:7e:7b:15:9a:e8:71:ef:
db:37:a9:1a:89:70:83:9a:86:ae:c1:2a:98:43:73:04:0b:5f:
cc:ab:2b:52:27:dd:f0:c6:54:9f:ef:2e:79:c6:0a:d0:e6:61:
9f:60:5c:61:9a:69:c8:3b:06:8a:c5:46:c7:24:96:31:88:36:
02:05:56:fc:1b:c8:04:d3:02:fd:5a:0b:00:f9:33:7a:11:08:
10:35:f4:60:64:3a:07:58:f3:7a:f6:10:3f:bc:24:0a:5c:d0:
9e:17:5d:b5:0c:21:12:57:28:31:bf:48:6b:4f:51:f0:2d:57:
37:24:59:00:fc:d0:a6:f9:b8:74:1d:a3:be:c9:40:3d:95:7b:
00:f3:83:4a:b8:3a:a3:4b:38:46:a7:9e:4a:51:5d:92:3f:d3:
af:86:2a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:04:53 2025 by rpki-client