Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/5D0c-WWWWw4FF1ELtp0U_cPBQd8.roa
File: 5D0c-WWWWw4FF1ELtp0U_cPBQd8.roa (raw, json)
Hash identifier: +BAnoDks/I9MJXYriLgObyMPkMI3GpRgHTysE1uOmJ0=
Subject key identifier: E4:3D:1C:F9:65:96:5B:0E:05:17:51:0B:B6:9D:14:FD:C3:C1:41:DF
Certificate issuer: /CN=DC6892E3620DD0F1FD62982E118E29757DC8CB3D
Certificate serial: 14D1
Authority key identifier: DC:68:92:E3:62:0D:D0:F1:FD:62:98:2E:11:8E:29:75:7D:C8:CB:3D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/5D0c-WWWWw4FF1ELtp0U_cPBQd8.roa
Signing time: Wed 09 Apr 2025 06:48:39 +0000
ROA not before: Wed 09 Apr 2025 06:48:39 +0000
ROA not after: Thu 09 Apr 2026 06:41:24 +0000
asID: 34549
IP address blocks: 114.66.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5329 (0x14d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC6892E3620DD0F1FD62982E118E29757DC8CB3D
Validity
Not Before: Apr 9 06:48:39 2025 GMT
Not After : Apr 9 06:41:24 2026 GMT
Subject: CN=E43D1CF965965B0E0517510BB69D14FDC3C141DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:1a:61:77:76:49:58:ae:c2:42:ee:d1:84:3d:
3b:3a:03:78:dc:4e:55:d2:de:f9:00:c1:2b:70:a3:
1d:3d:ff:f0:62:ec:46:5b:25:08:18:1a:dc:8e:20:
38:40:7a:0e:de:88:19:97:dc:34:c3:33:e6:67:57:
62:2c:ba:c6:81:8b:a7:93:d8:9b:11:bf:60:f7:96:
eb:5d:63:42:11:ce:46:6c:64:8e:a8:cc:32:64:a2:
61:81:94:de:6f:24:dd:35:4f:0f:a9:fb:72:6b:d8:
b4:43:d1:6f:db:6e:c7:f3:5e:0c:b0:31:a6:44:e6:
86:3f:bb:47:ce:96:a8:99:8f:8f:e2:d3:90:a9:4c:
f5:0b:c0:e8:c5:60:a9:35:46:91:bd:01:03:cd:3b:
29:4e:34:18:65:28:1e:37:d7:ac:e0:3f:57:76:1c:
6f:c1:55:29:68:60:4f:7b:5e:42:58:5b:27:a7:f3:
49:17:ab:3a:6b:8f:42:3d:81:f6:d7:09:f9:59:f1:
23:95:f6:d9:7a:a6:10:a2:89:fa:56:39:57:f3:d6:
c5:bf:29:d9:09:1b:0e:17:d5:a1:21:ee:8c:c7:15:
6b:80:fd:bd:fa:b1:a6:17:f3:3e:02:8a:c9:4c:1e:
49:9d:87:1f:aa:3b:59:92:cd:c2:62:cb:e2:61:59:
87:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3D:1C:F9:65:96:5B:0E:05:17:51:0B:B6:9D:14:FD:C3:C1:41:DF
X509v3 Authority Key Identifier:
keyid:DC:68:92:E3:62:0D:D0:F1:FD:62:98:2E:11:8E:29:75:7D:C8:CB:3D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/5D0c-WWWWw4FF1ELtp0U_cPBQd8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.66.212.0/22
Signature Algorithm: sha256WithRSAEncryption
60:94:8a:9b:04:67:f1:54:c6:7e:ea:3e:83:22:e1:84:17:47:
23:b9:e4:b4:a2:1a:4c:2c:c4:8b:37:c9:0a:0e:2b:ba:30:60:
f1:3b:da:97:15:dd:5b:ee:23:bd:08:61:5d:54:95:b1:81:b7:
a9:79:72:90:e2:db:ae:f0:b4:3a:58:a7:fc:31:8c:d7:7f:d2:
1d:6a:8c:37:48:ee:eb:10:7d:ac:74:d4:93:5e:2c:d4:d1:06:
65:3b:d2:32:30:17:55:f1:4a:83:0a:d5:58:15:4a:35:e2:77:
b8:4a:7c:b1:ff:9d:21:c0:89:86:44:2c:4f:3b:7c:cf:09:a0:
23:37:1f:37:e3:1c:21:4c:24:96:38:78:c6:0e:cc:f0:d1:2a:
15:6e:71:1a:67:85:d5:31:5a:56:96:18:6c:00:fe:60:2f:41:
e4:f9:99:93:94:7e:49:d1:cc:7c:17:cb:65:0c:b0:f0:c0:7f:
58:a7:70:c9:63:85:df:a9:0f:ab:ca:51:e8:03:86:f3:d4:36:
eb:41:c6:99:6e:87:22:fa:22:8b:0c:69:91:67:9f:db:60:40:
e8:fb:57:45:50:c8:4d:bb:aa:26:ce:74:94:76:a4:75:5b:35:
b1:8f:71:3d:50:69:3f:3c:2d:57:7c:7c:be:ca:92:0c:b6:6a:
10:82:6f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:57:45 2025 by rpki-client