Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/75ys0PrDinDFKrNoR4e23Idu8m4.roa
File: 75ys0PrDinDFKrNoR4e23Idu8m4.roa (raw, json)
Hash identifier: hqT2Mqlf2A+MLPQIu6Z0Qjy6Mwg44SLEln0zoQxySso=
Subject key identifier: EF:9C:AC:D0:FA:C3:8A:70:C5:2A:B3:68:47:87:B6:DC:87:6E:F2:6E
Certificate issuer: /CN=DC6892E3620DD0F1FD62982E118E29757DC8CB3D
Certificate serial: 14CA
Authority key identifier: DC:68:92:E3:62:0D:D0:F1:FD:62:98:2E:11:8E:29:75:7D:C8:CB:3D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/75ys0PrDinDFKrNoR4e23Idu8m4.roa
Signing time: Wed 09 Apr 2025 06:48:36 +0000
ROA not before: Wed 09 Apr 2025 06:48:36 +0000
ROA not after: Thu 09 Apr 2026 06:41:24 +0000
asID: 34549
IP address blocks: 114.66.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5322 (0x14ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC6892E3620DD0F1FD62982E118E29757DC8CB3D
Validity
Not Before: Apr 9 06:48:36 2025 GMT
Not After : Apr 9 06:41:24 2026 GMT
Subject: CN=EF9CACD0FAC38A70C52AB3684787B6DC876EF26E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:06:65:29:7c:1a:73:4b:38:bb:b6:92:63:80:
80:53:8d:8d:ee:7e:fa:b8:b6:cc:2c:5c:8b:c7:97:
fd:0d:f1:e1:27:d2:7c:bf:2e:38:11:f7:41:f0:1f:
17:b4:20:c0:b5:aa:e4:55:23:73:d6:6b:d1:09:5f:
cf:bc:3b:0a:d0:fd:4b:4e:48:39:39:6a:a9:15:98:
fe:fb:f5:fb:89:a8:f1:1d:6e:1d:8d:d9:81:d0:a7:
05:ce:22:b1:c9:3d:49:9e:7f:03:00:a0:29:35:e8:
f6:58:17:5c:fa:17:73:7d:5a:57:59:15:03:cb:f8:
ac:e5:65:ec:80:12:07:95:9e:ec:e0:c4:19:66:19:
ae:cb:ef:40:89:d2:7a:65:b0:ab:cb:30:a0:9f:75:
0d:86:ef:2a:4c:f3:b0:10:0d:9d:ba:c0:d3:1a:1a:
93:6d:77:8d:95:db:3b:a8:05:db:3c:9f:5e:0e:1e:
4d:cd:53:b8:c6:fc:d6:71:ef:c9:bd:fa:46:f4:d3:
94:8e:62:b7:d6:83:d0:58:9f:f2:81:2b:7f:92:36:
09:a1:9c:eb:31:59:b1:e6:56:62:a8:51:f5:02:15:
32:fd:16:c9:ac:ec:4f:c3:0a:99:6f:77:9e:4a:97:
6f:25:34:c1:69:c6:7d:82:05:b0:c2:34:ec:14:62:
64:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9C:AC:D0:FA:C3:8A:70:C5:2A:B3:68:47:87:B6:DC:87:6E:F2:6E
X509v3 Authority Key Identifier:
keyid:DC:68:92:E3:62:0D:D0:F1:FD:62:98:2E:11:8E:29:75:7D:C8:CB:3D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/75ys0PrDinDFKrNoR4e23Idu8m4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.66.169.0/24
Signature Algorithm: sha256WithRSAEncryption
79:ac:5a:3f:23:0a:b7:d0:fa:a8:20:71:94:db:a0:1c:91:08:
9d:87:ae:9c:74:aa:70:ce:c6:86:33:8a:d5:c1:d4:13:31:05:
fd:b6:0e:46:f4:af:6b:f3:72:ad:40:53:1b:4b:72:8b:2e:1d:
3f:31:5f:b5:0e:e4:fa:73:bb:a4:40:5e:fd:ad:a0:06:c3:44:
c7:98:a4:8a:3e:18:82:69:ba:db:66:b4:55:db:8d:a6:40:96:
42:34:8c:8b:9f:5c:52:1c:82:41:22:fa:ff:95:eb:65:eb:28:
63:3d:f8:72:01:c0:52:32:24:14:81:0b:8b:ff:36:1a:c9:73:
e6:3e:1d:b7:c3:e5:7e:1e:ef:19:2b:60:ca:a7:0b:e5:13:7d:
c4:74:69:88:67:7b:16:ed:98:2b:a6:1f:fd:34:96:16:3c:99:
44:0b:c4:9f:2a:59:60:73:b2:4c:76:16:a9:bb:2c:c9:90:41:
15:38:86:69:d0:4e:a0:80:2e:f5:77:0f:e4:04:ee:02:ba:66:
a5:40:5b:34:40:d9:d1:38:0a:c4:e4:20:4c:61:ab:f7:ab:4d:
0f:bc:e7:91:ce:28:10:19:7f:ca:59:31:ea:1a:4c:7d:37:bc:
03:39:b9:5e:5c:e3:0b:ef:9a:68:95:5d:0b:70:71:0c:7a:11:
ff:37:e2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:16:07 2025 by rpki-client