Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/VelanPogo3n-IDUuQtAnrMQHtks.roa
File: VelanPogo3n-IDUuQtAnrMQHtks.roa (raw, json)
Hash identifier: yigw0sUAc47ePatlXweGpaaBpq/lsTcHML/wU8Aqh3A=
Subject key identifier: 55:E9:5A:9C:FA:20:A3:79:FE:20:35:2E:42:D0:27:AC:C4:07:B6:4B
Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial: 305F
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/VelanPogo3n-IDUuQtAnrMQHtks.roa
Signing time: Sun 30 Mar 2025 19:58:19 +0000
ROA not before: Sun 30 Mar 2025 19:58:19 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 134762
IP address blocks: 43.226.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12383 (0x305f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Validity
Not Before: Mar 30 19:58:19 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=55E95A9CFA20A379FE20352E42D027ACC407B64B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3f:d2:f4:8e:1a:06:57:58:89:09:6c:19:d7:
79:3b:5f:00:99:a5:e7:2b:ce:36:43:10:c9:4f:07:
44:2c:98:0e:df:a5:48:b4:22:ba:14:85:bb:65:22:
b6:ea:82:81:42:71:f5:35:77:c5:7f:cf:48:a9:aa:
fb:17:d1:8e:4f:b7:9d:68:3e:1a:8b:56:f2:c3:53:
d2:5e:7b:45:9a:40:fa:99:53:71:f9:c5:5d:15:7f:
b1:73:7e:86:12:d0:f9:3c:78:59:d0:6f:c1:1b:98:
a6:ee:c7:67:eb:27:e8:9b:6a:bf:8d:10:c9:20:b8:
b3:ef:2f:57:b1:74:af:95:7e:8e:09:e7:67:12:97:
f6:8c:5d:61:5d:b4:38:3f:06:a7:c9:4a:13:d3:4d:
ba:9d:cf:8c:32:e0:c8:70:c7:f0:b6:67:00:3d:a3:
b2:17:c3:c3:55:25:95:20:78:77:56:63:74:e0:70:
e4:4d:17:99:e7:80:6b:12:34:60:40:74:46:ee:82:
ea:b5:06:7c:c9:c9:3d:02:aa:b9:45:ee:de:55:c8:
2e:e5:92:f6:f3:f2:6f:91:cb:06:7c:f3:b4:ba:90:
3c:c6:bc:6a:91:af:de:b1:41:7d:d4:ef:62:05:e3:
3e:0c:d4:7b:bd:69:2b:fa:74:07:ce:81:eb:da:e9:
46:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E9:5A:9C:FA:20:A3:79:FE:20:35:2E:42:D0:27:AC:C4:07:B6:4B
X509v3 Authority Key Identifier:
keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/VelanPogo3n-IDUuQtAnrMQHtks.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.144.0/20
Signature Algorithm: sha256WithRSAEncryption
7e:68:84:9c:3c:63:a4:5b:71:c2:b2:92:3c:62:3f:69:fe:93:
fb:22:64:e5:9a:1a:27:ed:06:43:8c:75:b8:83:0c:31:78:3c:
94:97:91:7b:ec:2a:1c:bf:4e:90:0b:64:21:01:22:07:2d:27:
88:8b:94:91:20:8a:b9:aa:41:f3:79:8c:bd:8c:1a:00:25:34:
cd:66:b8:7d:0d:7a:d4:fb:82:4a:4e:7e:89:c6:2b:b0:ee:f5:
40:02:a5:da:50:6d:f2:8f:17:27:0e:f2:fa:e1:07:20:09:ea:
32:6d:a0:6c:39:f1:f9:ed:1b:c2:d3:b9:5b:2e:53:de:ab:9f:
25:f0:d2:f1:54:8a:32:84:ac:d7:ea:94:af:1b:f9:1f:f5:41:
ff:c7:80:ca:bc:5d:7e:d8:af:ce:d0:ad:d5:22:32:56:2d:73:
98:90:61:1c:0a:eb:6f:b7:22:2d:84:fb:3a:b3:20:c0:bb:7a:
86:e5:33:1e:bc:33:bf:f1:e8:5d:f8:12:90:44:54:a5:e0:7e:
8d:ad:fd:29:22:48:15:2b:46:c3:25:69:ed:c7:7f:63:c8:f3:
0d:48:7f:7e:dc:d1:9a:c0:63:17:ab:61:58:33:90:dc:e0:25:
65:e2:70:60:8f:ef:0c:a7:17:93:72:8f:c1:1a:dd:aa:e9:b5:
77:35:a5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:09:17 2025 by rpki-client