Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1826/_lPMw5cHZkoIFnabusH1RcrzR20.roa
File: _lPMw5cHZkoIFnabusH1RcrzR20.roa (raw, json)
Hash identifier: upEdPmE9Qtl5KKW2RwdPr5fdTQBE0wA5+a6QjYLc15w=
Subject key identifier: FE:53:CC:C3:97:07:66:4A:08:16:76:9B:BA:C1:F5:45:CA:F3:47:6D
Certificate issuer: /CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F
Certificate serial: 14C0
Authority key identifier: 75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/_lPMw5cHZkoIFnabusH1RcrzR20.roa
Signing time: Sun 27 Apr 2025 09:29:37 +0000
ROA not before: Sun 27 Apr 2025 09:29:37 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 152320
IP address blocks: 45.254.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5312 (0x14c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F
Validity
Not Before: Apr 27 09:29:37 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=FE53CCC39707664A0816769BBAC1F545CAF3476D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b4:41:1c:60:e3:a8:9a:bd:56:e9:5b:53:1d:
4c:a2:c7:72:a3:a9:9b:54:7a:9b:d1:76:fe:2d:92:
c5:3a:ab:73:5d:ca:e6:44:eb:0c:d4:d6:27:ba:4a:
7f:ec:bf:54:d4:f2:53:9d:c4:78:6f:cf:41:c0:0d:
f3:06:c8:5b:ef:09:44:12:06:40:4f:95:c6:f0:13:
22:7e:ef:4d:b4:82:7a:d4:40:ed:85:6c:af:05:1d:
00:a2:13:34:e1:29:11:76:74:2b:8e:3e:4c:12:2b:
a1:49:c7:68:51:00:d6:42:a1:be:40:9d:6a:91:68:
48:84:a5:85:65:26:5a:dc:79:22:1d:4b:8f:cb:4c:
f0:46:11:66:87:51:6d:4c:43:45:b4:49:9b:18:3c:
3a:6a:aa:dd:17:82:46:31:71:b4:a6:dd:de:f6:4a:
34:3b:c9:67:42:78:18:02:86:58:55:a2:e2:ae:11:
cf:ab:37:37:77:6a:b8:8c:cb:62:05:6a:36:c7:70:
44:62:8c:c5:96:a0:39:89:0c:b0:fa:45:2c:57:73:
dd:ef:04:48:18:b7:41:fa:19:ac:34:81:49:bb:f9:
0c:65:28:7e:50:de:4f:10:ab:e1:11:94:f2:c5:74:
3d:e9:4e:3b:eb:b9:e6:0c:c9:03:fd:af:8a:98:ab:
f0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:53:CC:C3:97:07:66:4A:08:16:76:9B:BA:C1:F5:45:CA:F3:47:6D
X509v3 Authority Key Identifier:
keyid:75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/_lPMw5cHZkoIFnabusH1RcrzR20.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.254.24.0/24
Signature Algorithm: sha256WithRSAEncryption
79:dd:b0:0a:9e:73:d4:28:81:e2:db:78:6c:d2:24:e4:62:47:
de:d3:0c:0f:f1:9a:55:91:b0:e0:e7:ae:de:13:f7:5a:e2:a8:
3f:e4:7a:31:8c:d2:57:1a:a9:c8:40:d3:00:cb:de:c7:2d:f9:
cf:91:3d:52:9f:b6:db:4c:fa:28:0a:b0:dd:b6:d5:d2:8a:87:
9b:62:64:ea:d6:07:95:b8:ff:39:be:a9:84:49:b2:5a:2d:81:
12:be:59:9e:4f:70:8a:b3:59:f4:83:1a:33:72:44:7d:16:56:
8d:59:fd:20:c1:82:f3:c3:f3:e1:50:bf:14:3d:ca:6c:f3:ec:
27:29:bc:da:6a:8d:9e:02:74:65:7d:8a:b5:bf:e4:8a:14:47:
18:af:6c:87:ee:f4:4c:4f:c7:30:d3:65:89:86:81:f1:f1:c9:
fb:e4:4e:45:8b:ee:a8:d4:e4:b0:e3:30:1d:fe:6e:77:3e:1e:
1a:2a:0b:04:d5:16:bf:b6:4b:f1:55:d8:70:e1:80:23:8a:d7:
08:70:92:5e:e3:e1:29:92:fb:e5:1c:ab:70:4e:e6:d5:54:c1:
c6:ab:00:39:98:23:e5:53:79:68:0a:aa:ce:b0:7b:26:9d:f4:
72:37:aa:8e:66:e0:50:fc:3f:7a:78:40:a9:ed:56:53:00:2d:
d0:44:67:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 05:12:33 2025 by rpki-client