Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/dbIHTyVCCNZ6zZX7pCtWraClN7o.roa
File: dbIHTyVCCNZ6zZX7pCtWraClN7o.roa (raw, json)
Hash identifier: Qa4hYzFLGjvelXezHJzWzu+yjzs0V8VNFVbkDfcWerE=
Subject key identifier: 75:B2:07:4F:25:42:08:D6:7A:CD:95:FB:A4:2B:56:AD:A0:A5:37:BA
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 10B2
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/dbIHTyVCCNZ6zZX7pCtWraClN7o.roa
Signing time: Fri 17 Jan 2025 01:28:55 +0000
ROA not before: Fri 17 Jan 2025 01:28:55 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 55990
IP address blocks: 110.41.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4274 (0x10b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Jan 17 01:28:55 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=75B2074F254208D67ACD95FBA42B56ADA0A537BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f9:40:69:06:7f:fe:5c:71:b1:1e:c5:ea:90:
27:77:80:9c:f3:be:2a:4a:e2:82:18:5f:d7:5c:3b:
2f:33:68:4a:9f:bf:ef:24:e0:20:76:3d:6c:85:f0:
2b:6e:16:aa:d8:e7:ca:49:d7:40:ec:14:36:b2:e0:
ce:e3:bc:a2:c6:99:fd:aa:b4:df:0c:5e:05:71:7f:
1a:c2:5c:35:bc:ca:ec:72:7f:0a:e4:88:33:56:03:
60:39:f4:3b:cc:f2:d9:8c:7a:9c:6a:a8:d3:51:65:
eb:63:f4:81:7a:91:f0:7b:8a:98:e1:b5:0e:62:69:
95:26:92:3d:65:6f:44:9a:8c:55:d0:6c:7c:8e:a5:
58:07:98:6c:38:fe:d0:0e:fe:a2:54:43:40:b8:1d:
80:a8:92:3a:43:8c:1b:10:61:2f:c5:eb:cb:c1:73:
34:71:ec:f4:37:68:bb:c6:c4:56:0a:0b:94:e2:3e:
50:3e:fb:7a:29:bc:94:56:25:1a:09:68:fc:fe:a2:
10:9d:e3:c0:b8:c1:65:cf:e1:dc:47:e1:5f:da:f4:
58:02:e4:6e:68:a9:56:ba:b2:34:b1:90:1a:5a:cc:
f4:ae:76:34:ec:8b:66:3d:56:a0:8b:e2:5f:c8:fd:
16:c3:ed:f0:98:5c:f2:02:73:9c:be:9a:70:7e:77:
7c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B2:07:4F:25:42:08:D6:7A:CD:95:FB:A4:2B:56:AD:A0:A5:37:BA
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/dbIHTyVCCNZ6zZX7pCtWraClN7o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
110.41.90.0/24
Signature Algorithm: sha256WithRSAEncryption
33:f4:c5:70:92:fd:cc:15:99:95:be:50:0d:49:2e:fa:9e:57:
f4:eb:43:18:36:dd:50:0e:56:3c:df:b3:c2:18:34:50:80:a9:
ce:97:fe:71:1a:8e:2e:da:c4:65:22:8f:8d:98:94:8f:73:79:
87:13:26:be:65:29:01:bd:53:be:29:cd:35:1e:e0:53:68:43:
8a:ae:ce:82:ed:0f:45:5c:db:24:9e:2f:90:a9:a9:41:5d:87:
30:cb:1f:55:95:5b:05:7e:6c:c7:0e:bd:01:ff:25:14:e9:f6:
18:81:54:bc:7e:e1:fe:bf:d6:b1:7e:80:d4:81:ef:50:c5:41:
a2:0d:42:39:66:68:0e:17:47:7d:d8:aa:7d:5d:9a:44:a3:5a:
68:ad:1b:ca:4d:b2:54:fa:00:eb:2b:e9:9e:7d:95:6e:59:53:
4c:a3:72:37:cc:b9:d2:4f:d4:dc:19:41:82:0c:3e:5a:fc:bc:
56:03:9d:98:9f:50:f5:40:b2:39:f9:bd:10:b0:66:ef:46:26:
b9:a9:d1:c8:69:2a:97:64:8f:b3:73:5b:0b:3e:22:81:7a:9e:
99:97:a6:51:18:49:a5:23:94:ae:f1:1d:0f:a8:b7:51:8a:bc:
a7:31:b8:96:8b:0c:93:a2:02:91:15:44:8c:0d:2f:79:bf:14:
a0:c0:f2:2b
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICELIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0FD
RTEwQzgzODI5MkM2RkM3MDY1ODVCNDQ0RUJBRURDQTJBMTFCOTAeFw0yNTAxMTcw
MTI4NTVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDc1QjIwNzRGMjU0MjA4
RDY3QUNEOTVGQkE0MkI1NkFEQTBBNTM3QkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDH+UBpBn/+XHGxHsXqkCd3gJzzvipK4oIYX9dcOy8zaEqfv+8k
4CB2PWyF8CtuFqrY58pJ10DsFDay4M7jvKLGmf2qtN8MXgVxfxrCXDW8yuxyfwrk
iDNWA2A59DvM8tmMepxqqNNRZetj9IF6kfB7ipjhtQ5iaZUmkj1lb0SajFXQbHyO
pVgHmGw4/tAO/qJUQ0C4HYCokjpDjBsQYS/F68vBczRx7PQ3aLvGxFYKC5TiPlA+
+3opvJRWJRoJaPz+ohCd48C4wWXP4dxH4V/a9FgC5G5oqVa6sjSxkBpazPSudjTs
i2Y9VqCL4l/I/RbD7fCYXPICc5y+mnB+d3zzAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUdbIHTyVCCNZ6zZX7pCtWraClN7owHwYDVR0jBBgwFoAUOs4QyDgpLG/HBlhb
RE667coqEbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzAx
NC9PczRReURncExHX0hCbGhiUkU2Njdjb3FFYmsuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL09zNFF5RGdwTEdfSEJsaGJSRTY2N2NvcUViay5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwMTQvZGJJSFR5VkNDTlo2
elpYN3BDdFdyYUNsTjdvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAG4pWjANBgkqhkiG9w0BAQsFAAOCAQEAM/TFcJL9zBWZlb5QDUku+p5X9OtD
GDbdUA5WPN+zwhg0UICpzpf+cRqOLtrEZSKPjZiUj3N5hxMmvmUpAb1TvinNNR7g
U2hDiq7Ogu0PRVzbJJ4vkKmpQV2HMMsfVZVbBX5sxw69Af8lFOn2GIFUvH7h/r/W
sX6A1IHvUMVBog1COWZoDhdHfdiqfV2aRKNaaK0byk2yVPoA6yvpnn2VbllTTKNy
N8y50k/U3BlBggw+Wvy8VgOdmJ9Q9UCyOfm9ELBm70YmuanRyGkql2SPs3NbCz4i
gXqemZemURhJpSOUrvEdD6i3UYq8pzG4losMk6ICkRVEjA0veb8UoMDyKw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:56:47 2025 by rpki-client