Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2672/vPclrXRfPv8Id4he8utYQ4ofH0Q.roa
File: vPclrXRfPv8Id4he8utYQ4ofH0Q.roa (raw, json)
Hash identifier: pEOJzOAPgMrZbn3rdvIatv7m5K1xmggkzGMAAK+I6RI=
Subject key identifier: BC:F7:25:AD:74:5F:3E:FF:08:77:88:5E:F2:EB:58:43:8A:1F:1F:44
Certificate issuer: /CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Certificate serial: 12
Authority key identifier: 94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/vPclrXRfPv8Id4he8utYQ4ofH0Q.roa
Signing time: Tue 27 May 2025 08:11:29 +0000
ROA not before: Tue 27 May 2025 08:11:29 +0000
ROA not after: Wed 27 May 2026 07:38:41 +0000
asID: 56048
IP address blocks: 240a:4090:1100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94EFF7392E1EDC1225FC4CFB8FAB6EB617A9D24D
Validity
Not Before: May 27 08:11:29 2025 GMT
Not After : May 27 07:38:41 2026 GMT
Subject: CN=BCF725AD745F3EFF0877885EF2EB58438A1F1F44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:02:3f:30:f3:3f:1f:fb:c1:61:94:0a:e8:c9:
a7:c0:5b:95:8d:75:28:ee:24:d9:2d:d4:d8:b4:b2:
85:36:7d:d7:76:b4:64:19:61:e6:68:13:4c:fa:9f:
e1:d9:07:1c:dc:30:75:47:f6:44:e3:be:a0:01:9c:
c3:57:93:70:52:2f:c5:ca:04:f2:72:88:09:d3:47:
42:00:a1:2c:7d:8f:8b:a3:7a:e5:a8:20:42:d5:b3:
d5:ba:c2:f8:86:81:ef:a8:89:7c:33:3e:33:0f:5c:
18:35:2c:78:79:6b:db:65:7f:33:88:e2:eb:99:f2:
64:ed:75:7a:89:26:b5:ce:ae:02:be:fd:6d:11:e4:
5b:25:d4:5c:db:09:98:33:4e:1e:01:51:1c:b0:1d:
54:76:7a:c1:5d:94:fb:88:c6:4e:10:b2:09:89:39:
d9:3d:50:ce:35:49:78:02:30:ce:e7:36:78:ee:70:
98:de:98:1f:d8:ab:7e:0a:96:70:88:52:70:4b:33:
ea:6a:1d:4f:89:42:85:c3:7f:34:51:a9:2a:53:a4:
8c:d8:90:56:69:74:6e:66:43:82:de:10:81:ef:c1:
85:a8:5e:70:14:49:98:b7:70:09:b9:5d:11:fc:ac:
bc:04:8f:9e:87:75:c1:5e:84:63:f5:40:89:ad:f4:
fd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F7:25:AD:74:5F:3E:FF:08:77:88:5E:F2:EB:58:43:8A:1F:1F:44
X509v3 Authority Key Identifier:
keyid:94:EF:F7:39:2E:1E:DC:12:25:FC:4C:FB:8F:AB:6E:B6:17:A9:D2:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/lO_3OS4e3BIl_Ez7j6tuthep0k0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lO_3OS4e3BIl_Ez7j6tuthep0k0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2672/vPclrXRfPv8Id4he8utYQ4ofH0Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:4090:1100::/40
Signature Algorithm: sha256WithRSAEncryption
01:46:86:89:5a:87:64:c8:e4:27:da:09:e2:44:51:82:64:92:
7f:78:7f:79:58:f5:d5:c9:77:3d:95:27:61:c4:f2:13:54:84:
77:4c:86:1e:2c:55:f8:3b:0b:1d:96:04:4d:07:24:96:34:af:
af:0a:23:9c:50:db:03:91:7d:77:06:b6:3e:16:08:66:18:5e:
e8:03:5d:8d:7e:d0:f1:09:d8:1c:5c:63:a7:a5:2d:79:97:34:
0e:71:e6:75:db:95:44:cf:81:f2:64:e0:97:2b:aa:8f:cb:3b:
cb:ab:60:d1:98:93:7b:32:95:f5:56:de:1e:b2:15:77:c6:1c:
e2:0c:00:92:db:a7:b8:45:40:26:49:bb:47:fc:5d:21:a1:58:
d2:c3:20:5f:ae:3d:a6:04:18:24:f6:20:66:21:86:bc:fb:be:
27:78:03:f4:3b:9e:af:12:1c:ad:ab:96:22:db:01:fd:b5:9b:
75:3f:71:86:25:6c:e4:0d:e0:4e:20:e5:48:04:7b:db:3d:02:
a1:e7:43:d0:8c:b8:b1:83:9e:70:1e:91:fd:f6:44:50:6c:84:
97:fa:18:91:c7:b1:c2:e8:54:d9:46:b3:96:11:ea:0a:ec:50:
6a:d6:91:4e:b3:f9:26:d3:a2:59:8e:76:2b:91:a3:d4:94:7a:
8a:b4:e4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 19:55:04 2025 by rpki-client