Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/65/Hid9TSxvy611Z8cDtqNMLtc4760.roa
File: Hid9TSxvy611Z8cDtqNMLtc4760.roa (raw, json)
Hash identifier: 5G/Adrd2lTvVPhN1xnfJeUTCdkxClmLK6htDh4mHOlI=
Subject key identifier: 1E:27:7D:4D:2C:6F:CB:AD:75:67:C7:03:B6:A3:4C:2E:D7:38:EF:AD
Certificate issuer: /CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9
Certificate serial: 1282
Authority key identifier: 98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/Hid9TSxvy611Z8cDtqNMLtc4760.roa
Signing time: Fri 23 May 2025 11:06:17 +0000
ROA not before: Fri 23 May 2025 11:06:17 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 23853
IP address blocks: 120.136.128.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4738 (0x1282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9
Validity
Not Before: May 23 11:06:17 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=1E277D4D2C6FCBAD7567C703B6A34C2ED738EFAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:55:53:3d:47:ae:1f:a2:de:ac:29:65:ef:4a:
38:a2:54:5d:36:e0:1e:0c:d3:38:cc:0f:e8:60:9d:
5d:25:06:aa:6a:6a:03:67:70:01:92:eb:d6:f7:26:
13:e4:be:f9:6a:80:00:7f:68:6f:4d:9c:34:de:d1:
11:eb:7f:a3:f1:20:c1:b5:1a:93:c4:75:bc:3f:4d:
2b:be:0d:a0:aa:51:f5:15:28:6a:58:af:38:70:16:
f4:0e:49:18:ba:5c:85:78:66:52:76:ff:b5:c9:89:
be:21:f5:21:d0:fc:4b:93:50:85:10:a3:8a:de:52:
e7:dc:d7:73:28:ab:a8:d5:ed:e4:62:ec:07:6e:f4:
85:7a:b1:15:dd:51:38:e3:59:c0:9c:05:a7:11:c7:
21:63:24:2b:e5:1a:8f:b6:3a:5f:b4:a5:4a:be:6b:
4c:15:5e:7e:76:6b:53:4a:ce:c3:d7:9b:3d:dd:35:
25:e3:94:0e:78:f0:f9:a1:b0:51:38:7f:2a:fc:04:
30:86:d8:cf:83:c7:79:18:88:80:e2:00:4d:08:dd:
6d:b7:f7:c0:41:3c:80:28:95:ee:a0:56:0f:e3:54:
33:bb:71:d4:53:16:64:3f:03:2d:dc:e3:f7:e6:b1:
14:6e:a1:56:ee:46:14:90:2a:58:52:45:68:75:8a:
16:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:27:7D:4D:2C:6F:CB:AD:75:67:C7:03:B6:A3:4C:2E:D7:38:EF:AD
X509v3 Authority Key Identifier:
keyid:98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/Hid9TSxvy611Z8cDtqNMLtc4760.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.136.128.0/21
Signature Algorithm: sha256WithRSAEncryption
2c:1c:55:4f:9a:ee:c8:68:fe:13:04:3d:bf:eb:e0:e4:88:cd:
16:7c:d2:16:fc:61:1b:c3:8f:05:9e:96:f8:81:1d:e2:41:44:
8d:a8:74:51:e8:d2:55:55:88:44:b6:c4:4c:48:63:ed:78:9c:
9c:48:64:23:b9:b8:c0:89:b0:07:78:4d:57:4a:bf:49:e4:ad:
b9:5f:f1:98:75:04:59:65:49:16:a1:88:0a:e3:a9:19:99:d8:
d2:21:7b:5a:64:42:e6:8b:b6:c8:72:60:4a:5f:ec:d9:b5:74:
3b:ad:15:02:7a:8b:ea:03:25:63:d2:01:1b:99:b9:e4:5e:3b:
4e:74:68:f1:58:82:27:c6:f6:4a:da:77:de:a5:b8:be:a0:ea:
eb:a4:2f:39:2b:a9:e3:ef:ef:6e:04:c9:9e:e6:98:ce:3a:a9:
19:c4:ac:e9:eb:3e:2a:bf:3d:58:f3:8a:49:56:05:8e:b1:a7:
1d:50:a8:cf:c1:9d:c4:41:ba:51:54:7e:ba:01:fe:fa:65:db:
c9:0d:30:27:4a:ff:85:3c:c9:15:83:37:3f:41:a9:bc:67:de:
e2:87:a2:99:65:c1:d3:b5:cc:43:11:52:02:5f:38:82:c1:e7:
34:2d:41:e4:55:07:78:0a:3c:4b:e2:89:48:34:e5:5a:ea:53:
b9:77:ea:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:07:30 2025 by rpki-client