Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3014/eL_cQNMdx8ke62McUVucsqRgH70.roa
File: eL_cQNMdx8ke62McUVucsqRgH70.roa (raw, json)
Hash identifier: AOV+eur1Wl2JiydvezeQLiPQZUCx1E3CGtNkexfR+A8=
Subject key identifier: 78:BF:DC:40:D3:1D:C7:C9:1E:EB:63:1C:51:5B:9C:B2:A4:60:1F:BD
Certificate issuer: /CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Certificate serial: 11E1
Authority key identifier: 3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/eL_cQNMdx8ke62McUVucsqRgH70.roa
Signing time: Fri 14 Mar 2025 09:37:08 +0000
ROA not before: Fri 14 Mar 2025 09:37:08 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 55990
IP address blocks: 113.46.66.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4577 (0x11e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ACE10C838292C6FC706585B444EBAEDCA2A11B9
Validity
Not Before: Mar 14 09:37:08 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=78BFDC40D31DC7C91EEB631C515B9CB2A4601FBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:01:87:d7:72:82:05:01:26:e4:92:b6:72:e2:
20:8b:be:2a:a4:cd:b1:b0:4f:72:b3:5f:17:54:13:
bd:58:f0:2f:f9:e9:6e:86:9a:87:95:e3:a2:c9:ad:
52:11:43:21:25:65:4b:3d:86:ee:4e:4f:b8:4e:b8:
ae:31:44:72:01:49:fe:68:d4:67:80:eb:92:37:bf:
be:62:40:af:1d:26:09:9e:09:36:fc:c8:07:2d:f8:
f9:9f:ae:d6:d1:7c:70:7f:6a:a1:7b:82:62:97:62:
4e:dc:55:35:09:a3:52:49:75:5c:a9:34:6e:40:dd:
58:35:22:c2:5c:69:01:c4:ef:72:d8:5c:db:e7:6d:
e9:1e:ef:6b:e5:f4:20:cc:dc:dd:86:a7:1a:3e:ea:
57:e2:02:ba:49:7e:3c:fd:3f:c1:86:ab:33:8e:ab:
c3:9e:81:c1:10:1d:d1:37:77:ca:23:5c:b5:98:d5:
3b:a7:ed:96:0e:96:fa:23:53:98:ad:7f:6e:5d:3f:
5b:ae:fd:93:ff:8c:c1:e0:23:90:27:fa:95:69:3b:
bf:89:59:d8:ef:b7:a9:fd:9b:9b:1c:43:8c:ed:12:
49:8d:d6:fb:cc:ab:85:d8:c0:32:c9:1d:fd:78:55:
58:c5:09:25:83:e7:6d:5b:ac:97:af:ae:a1:e4:3b:
89:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:BF:DC:40:D3:1D:C7:C9:1E:EB:63:1C:51:5B:9C:B2:A4:60:1F:BD
X509v3 Authority Key Identifier:
keyid:3A:CE:10:C8:38:29:2C:6F:C7:06:58:5B:44:4E:BA:ED:CA:2A:11:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/Os4QyDgpLG_HBlhbRE667coqEbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Os4QyDgpLG_HBlhbRE667coqEbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3014/eL_cQNMdx8ke62McUVucsqRgH70.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.46.66.0/23
Signature Algorithm: sha256WithRSAEncryption
71:31:fc:11:c4:88:60:99:71:ba:f6:62:a0:e5:0f:48:54:3f:
ee:90:94:9a:a1:07:a8:35:15:f4:0d:cb:69:82:fc:38:48:ac:
d4:3d:ca:ab:ef:70:a3:ac:74:28:d4:00:0a:5f:20:00:ab:c4:
35:0a:2a:62:9e:1b:97:43:77:f0:a8:ef:92:9b:e6:6a:89:fe:
fe:24:92:58:eb:00:70:4e:91:ed:f8:91:a0:6f:bf:3c:34:b0:
df:29:a9:6a:0c:93:de:1b:ac:e2:a9:70:7e:4f:82:7a:03:7f:
87:74:ec:71:0e:d2:ff:f6:2f:d9:2a:8c:48:47:63:ba:e5:47:
23:8b:d8:dd:00:ba:0e:d1:b2:de:d6:49:b3:0d:7c:38:73:ea:
be:09:77:4e:68:ff:9a:18:ab:85:65:73:da:63:c3:27:8c:49:
a1:a1:9a:02:85:59:a0:d4:da:ea:32:92:5c:19:e4:18:ce:92:
25:9e:9b:7c:48:a3:c0:ea:13:2d:49:a2:f4:df:58:26:42:ae:
51:8c:d3:6d:50:13:e6:9d:49:db:03:96:91:d6:6e:37:c3:0a:
4f:0a:34:f7:99:f8:24:cf:80:58:98:f3:9b:d9:96:49:5b:c1:
bd:96:44:74:0b:3d:9b:5a:b8:df:0c:48:c4:ad:f8:7b:51:ff:
64:98:32:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:29:30 2025 by rpki-client