Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/SXeeQW1Tm6k_jhOMuM8v2YGQaHA.roa
File: SXeeQW1Tm6k_jhOMuM8v2YGQaHA.roa (raw, json)
Hash identifier: 5C4Kz2tvXlKpPp0zUdoEHwlfyvHduEz/cUpmRj3xDAg=
Subject key identifier: 49:77:9E:41:6D:53:9B:A9:3F:8E:13:8C:B8:CF:2F:D9:81:90:68:70
Certificate issuer: /CN=DC6892E3620DD0F1FD62982E118E29757DC8CB3D
Certificate serial: 14CB
Authority key identifier: DC:68:92:E3:62:0D:D0:F1:FD:62:98:2E:11:8E:29:75:7D:C8:CB:3D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/SXeeQW1Tm6k_jhOMuM8v2YGQaHA.roa
Signing time: Wed 09 Apr 2025 06:48:36 +0000
ROA not before: Wed 09 Apr 2025 06:48:36 +0000
ROA not after: Thu 09 Apr 2026 06:41:24 +0000
asID: 34549
IP address blocks: 114.66.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5323 (0x14cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC6892E3620DD0F1FD62982E118E29757DC8CB3D
Validity
Not Before: Apr 9 06:48:36 2025 GMT
Not After : Apr 9 06:41:24 2026 GMT
Subject: CN=49779E416D539BA93F8E138CB8CF2FD981906870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:02:04:bd:8d:2a:f0:c4:dd:27:e6:88:e6:d9:
9b:7e:a4:5e:7d:7a:20:a0:19:bd:91:26:54:e1:da:
0b:39:4a:ad:4d:09:42:88:5f:a3:28:51:92:69:58:
26:19:b7:ee:ca:c5:87:87:be:23:4c:18:eb:4b:ad:
35:c5:62:f6:3b:b3:65:97:61:74:8e:1f:7d:09:f4:
a4:b4:d3:cb:45:4c:8e:59:54:8a:d3:38:77:43:c3:
85:1a:d8:4e:51:19:90:13:c0:ae:38:82:d2:5a:83:
1c:c0:b3:86:6a:f7:4d:3f:c6:c9:42:8d:d3:41:6c:
cf:a3:fe:91:86:f9:55:3c:74:f1:4c:39:ac:49:86:
16:8a:7d:2b:d2:8f:57:f8:4d:59:a6:db:f2:8c:c4:
d7:25:c0:30:c5:02:70:f7:a1:05:7a:88:25:55:92:
75:e5:e5:b2:83:c6:e2:ff:0f:53:87:2e:bb:56:07:
93:7f:b3:76:e5:14:91:9f:3a:56:30:e1:2e:4b:0f:
7b:ee:59:a5:e6:a9:b7:c2:a6:d2:14:ce:1d:a3:8b:
2d:b5:78:7a:53:f8:63:4c:83:cc:09:6e:50:57:bf:
e6:c6:d1:85:54:71:85:b9:ab:2a:d9:52:21:78:b4:
7a:bf:cd:40:9d:b9:f5:03:7b:73:40:6f:aa:8c:69:
83:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:77:9E:41:6D:53:9B:A9:3F:8E:13:8C:B8:CF:2F:D9:81:90:68:70
X509v3 Authority Key Identifier:
keyid:DC:68:92:E3:62:0D:D0:F1:FD:62:98:2E:11:8E:29:75:7D:C8:CB:3D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/SXeeQW1Tm6k_jhOMuM8v2YGQaHA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.66.181.0/24
Signature Algorithm: sha256WithRSAEncryption
79:6c:c4:b2:c5:bc:57:30:85:bf:03:e3:4c:52:3c:9d:f8:af:
c1:0b:b7:d3:77:38:24:3b:fb:ea:8c:91:e2:dc:76:d2:3e:1d:
40:32:59:49:4a:db:cf:f6:2d:ef:4c:50:df:f4:0c:81:d2:f4:
0a:36:a8:2b:de:c3:ef:60:7f:c9:33:22:ad:0a:73:29:42:df:
cd:64:e7:03:bc:aa:f5:64:ec:c6:64:09:57:cf:06:fc:39:14:
a1:3e:78:b6:0b:80:db:5a:db:3b:c8:db:8d:b3:a2:49:bc:ed:
a1:db:a9:5b:ea:9c:58:24:19:5c:11:29:19:b7:c1:f3:a4:5a:
bc:42:d1:93:de:59:af:93:30:2a:50:9b:4b:79:e6:4b:88:a1:
92:8a:d4:34:4c:34:3a:af:64:10:0e:5d:91:c4:f3:4f:34:4c:
78:a4:53:6e:45:d3:5e:7b:e3:fe:5a:1d:c7:fc:b9:e2:f5:a4:
18:4f:35:6a:72:ad:c6:2e:da:26:28:af:b9:9a:e1:9b:7a:2a:
7b:d4:2b:23:7f:3a:04:3f:f6:e6:89:87:8e:49:b5:e8:72:f2:
06:ba:13:94:a4:8c:92:de:9f:ee:f2:83:11:0d:3e:20:ad:62:
9c:12:56:5d:d9:a8:ee:ff:64:58:2e:99:32:38:50:03:63:d4:
49:8c:39:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:26:44 2025 by rpki-client