Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/MLAeHR5_4BW4Dh_LrqZsiNcRZRY.roa
File: MLAeHR5_4BW4Dh_LrqZsiNcRZRY.roa (raw, json)
Hash identifier: 31o8rJwuwRvzMLyB+e/5mtJR0hM7k6lsviMrYudE+VQ=
Subject key identifier: 30:B0:1E:1D:1E:7F:E0:15:B8:0E:1F:CB:AE:A6:6C:88:D7:11:65:16
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 11D9
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/MLAeHR5_4BW4Dh_LrqZsiNcRZRY.roa
Signing time: Fri 14 Mar 2025 09:33:49 +0000
ROA not before: Fri 14 Mar 2025 09:33:49 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 55990
IP address blocks: 113.47.160.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4569 (0x11d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Mar 14 09:33:49 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=30B01E1D1E7FE015B80E1FCBAEA66C88D7116516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:28:f7:ec:12:61:b6:2e:b4:ec:87:6c:8e:26:
e9:26:48:f0:a4:28:c7:46:94:9b:b7:55:ea:e2:5f:
6c:4a:97:94:e7:7f:bc:e6:84:31:4d:41:9a:4c:20:
b3:39:44:b8:3b:7d:88:c5:61:7b:c6:48:af:de:be:
98:c3:d1:36:d6:53:54:a8:3b:7f:4e:f9:62:2c:71:
62:05:5d:b7:8f:ed:b3:8e:78:29:1e:1f:a8:5e:87:
b2:ca:e5:44:a8:8d:11:93:6f:43:b6:66:64:2c:15:
ce:15:e0:f9:e6:74:b1:5c:8d:b6:56:76:4b:c0:fc:
55:63:ce:b4:9b:69:81:bb:6e:0d:6f:98:63:19:8f:
08:2b:64:8a:c4:40:64:62:64:36:66:75:1f:9d:e4:
bd:bd:30:bd:f7:aa:4c:27:9d:2b:ac:f8:c3:8d:07:
bc:7d:83:8e:c8:9e:ff:ae:48:44:33:90:0e:0c:2e:
de:8c:0a:51:a5:68:dc:8f:90:95:f3:6e:75:c3:03:
10:19:6b:3c:04:52:dd:08:57:9c:eb:d2:68:44:f4:
0e:47:7b:be:22:69:57:37:14:5d:06:19:75:48:2a:
1a:b6:9e:0d:75:79:cb:57:5f:4c:76:44:9a:8e:ed:
cc:76:8d:a6:cd:35:07:b8:54:04:f6:67:aa:4d:9b:
f3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B0:1E:1D:1E:7F:E0:15:B8:0E:1F:CB:AE:A6:6C:88:D7:11:65:16
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/MLAeHR5_4BW4Dh_LrqZsiNcRZRY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.47.160.0/19
Signature Algorithm: sha256WithRSAEncryption
a1:4f:36:5a:e7:3a:b9:82:5e:35:82:3e:aa:45:86:8b:d1:04:
f0:dd:43:97:f1:9d:71:7d:42:78:aa:f5:36:cb:9b:16:d4:e8:
75:f3:54:42:d2:28:aa:65:4a:8d:fb:2c:0f:95:0f:fa:69:79:
13:3c:2a:ac:da:d7:0e:4b:90:a3:00:a9:b6:33:d9:ed:5d:be:
ea:fb:e1:f5:5e:bd:b8:bf:2d:51:9d:08:6e:dd:54:c8:d2:a5:
e6:f8:e3:7b:c1:21:54:90:8e:33:6a:29:6a:1f:58:cb:b2:2d:
b9:ae:08:4e:c5:cd:bb:11:b9:89:71:c1:e6:13:af:cd:6e:9e:
9e:94:15:16:85:e4:1f:75:c0:33:67:07:76:91:7f:0d:79:23:
f8:d1:66:ee:59:1b:cf:e9:33:0b:8d:45:72:af:ad:3b:72:1f:
71:73:9a:45:55:14:da:aa:34:88:05:d9:2e:ee:51:b9:8f:02:
1a:19:6b:2c:40:33:15:45:e4:a5:ba:23:54:32:93:c6:97:d4:
7b:ff:bb:e7:cf:b3:3d:a1:1f:df:53:92:92:19:5d:84:fd:13:
3f:65:be:49:88:a3:a4:c9:b9:23:5d:a4:13:a7:14:61:65:43:
73:ad:b4:99:5a:66:78:e9:80:a7:77:ec:76:b5:1d:86:6a:70:
34:58:dc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:21:58 2025 by rpki-client