Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3078/JKHutdgWtZwyrNAD0C2H17GlJeE.roa
File: JKHutdgWtZwyrNAD0C2H17GlJeE.roa (raw, json)
Hash identifier: t4LS0jm4WzTaHianm5HBFpaSNV7SKuXZDOjEE34Fjr4=
Subject key identifier: 24:A1:EE:B5:D8:16:B5:9C:32:AC:D0:03:D0:2D:87:D7:B1:A5:25:E1
Certificate issuer: /CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785
Certificate serial: 3F
Authority key identifier: F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/JKHutdgWtZwyrNAD0C2H17GlJeE.roa
Signing time: Sat 17 May 2025 03:42:31 +0000
ROA not before: Sat 17 May 2025 03:42:31 +0000
ROA not after: Sun 10 May 2026 04:51:55 +0000
asID: 151270
IP address blocks: 110.40.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F702935F02FC1B81297D1FFB4C78CE0BA1D43785
Validity
Not Before: May 17 03:42:31 2025 GMT
Not After : May 10 04:51:55 2026 GMT
Subject: CN=24A1EEB5D816B59C32ACD003D02D87D7B1A525E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c1:88:08:57:95:a0:e5:f2:98:9e:ee:0e:ce:
0e:0d:c1:a3:d2:e7:b6:d2:ff:06:95:32:13:27:bf:
7a:db:dc:24:75:96:79:8d:2c:13:ea:2b:72:23:7c:
2d:bc:3a:3f:48:da:3c:b3:85:7b:a5:46:d1:87:b0:
df:06:9e:31:0d:bd:d9:2c:31:67:6c:e5:74:f5:8a:
2e:48:d9:70:83:28:4d:a6:ae:30:49:12:c9:c3:a7:
b5:74:9f:8a:82:c1:01:a7:45:c6:fa:c5:bf:7d:95:
55:95:9d:45:8f:05:7a:68:3a:7c:c4:07:66:f3:34:
8d:fc:6a:71:98:3f:40:cc:cd:96:df:e9:e2:1d:a2:
60:ac:8c:3f:67:d9:fd:d7:f3:0b:07:48:74:98:18:
c0:26:1a:7a:03:2a:6f:ef:f7:3e:24:63:49:a3:49:
a3:03:39:f7:b6:67:17:7f:60:06:40:2a:1d:e3:82:
ec:ef:cc:1e:5a:9d:ae:f6:9a:73:1f:ae:c6:b5:da:
58:6d:38:89:5f:b0:8d:d8:44:44:fd:e2:5b:5b:4b:
6c:c0:61:01:97:2d:f4:34:4b:a2:18:53:12:04:55:
a8:13:26:cc:7d:12:90:17:bb:79:c7:5c:b0:96:9c:
88:fa:31:a9:5d:a2:2b:2e:56:87:e5:89:94:1d:88:
21:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A1:EE:B5:D8:16:B5:9C:32:AC:D0:03:D0:2D:87:D7:B1:A5:25:E1
X509v3 Authority Key Identifier:
keyid:F7:02:93:5F:02:FC:1B:81:29:7D:1F:FB:4C:78:CE:0B:A1:D4:37:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/9wKTXwL8G4EpfR_7THjOC6HUN4U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9wKTXwL8G4EpfR_7THjOC6HUN4U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3078/JKHutdgWtZwyrNAD0C2H17GlJeE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
110.40.63.0/24
Signature Algorithm: sha256WithRSAEncryption
08:2b:d4:a4:64:b8:94:ce:a2:a6:ee:0e:64:bf:7d:fd:5e:8f:
9c:e2:54:25:57:d2:ca:37:2b:79:4b:67:8a:09:aa:3f:9c:b4:
e9:82:83:ae:04:3c:e7:15:b4:9e:71:2f:09:61:9a:fb:61:86:
aa:20:3c:45:7f:7d:47:ea:ff:87:9b:b2:8c:0e:9c:65:57:b5:
b3:7c:ff:cc:4a:e4:b7:c0:55:64:33:be:b6:d2:eb:3a:1c:4e:
61:9e:5e:87:68:5c:53:c5:db:5d:9e:79:92:5e:7d:34:80:7a:
17:07:64:e9:47:aa:5a:d6:1a:5d:12:92:57:b0:62:c7:8e:94:
a6:34:8e:b6:5d:a0:d5:1f:3c:9c:ce:a0:70:8e:34:7b:91:ce:
d8:18:45:4e:53:f3:b6:c8:d2:70:27:d1:30:f3:cb:69:90:59:
ca:e6:ec:20:83:5d:b6:91:28:89:87:22:87:5e:17:85:53:44:
bb:6e:b3:44:2a:65:4f:c7:ac:2f:fe:63:29:f6:9b:42:c2:b2:
3e:a0:50:6f:19:f7:09:81:5e:1b:a5:39:2a:62:1a:29:9a:33:
d5:37:52:62:41:4f:46:d5:ff:b4:e5:35:b9:7a:4e:af:1c:f1:
92:38:25:4f:7e:d0:52:c6:93:7e:84:e4:08:3e:90:03:74:a6:
dc:47:dc:50
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgIBPzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGNzAy
OTM1RjAyRkMxQjgxMjk3RDFGRkI0Qzc4Q0UwQkExRDQzNzg1MB4XDTI1MDUxNzAz
NDIzMVoXDTI2MDUxMDA0NTE1NVowMzExMC8GA1UEAxMoMjRBMUVFQjVEODE2QjU5
QzMyQUNEMDAzRDAyRDg3RDdCMUE1MjVFMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMXBiAhXlaDl8pie7g7ODg3Bo9LnttL/BpUyEye/etvcJHWWeY0s
E+orciN8Lbw6P0jaPLOFe6VG0Yew3waeMQ292SwxZ2zldPWKLkjZcIMoTaauMEkS
ycOntXSfioLBAadFxvrFv32VVZWdRY8Femg6fMQHZvM0jfxqcZg/QMzNlt/p4h2i
YKyMP2fZ/dfzCwdIdJgYwCYaegMqb+/3PiRjSaNJowM597ZnF39gBkAqHeOC7O/M
Hlqdrvaacx+uxrXaWG04iV+wjdhERP3iW1tLbMBhAZct9DRLohhTEgRVqBMmzH0S
kBe7ecdcsJaciPoxqV2iKy5Wh+WJlB2IIdMCAwEAAaOCAfMwggHvMB0GA1UdDgQW
BBQkoe612Ba1nDKs0APQLYfXsaUl4TAfBgNVHSMEGDAWgBT3ApNfAvwbgSl9H/tM
eM4LodQ3hTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMDc4
Lzl3S1RYd0w4RzRFcGZSXzdUSGpPQzZIVU40VS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvOXdLVFh3TDhHNEVwZlJfN1RIak9DNkhVTjRVLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA3OC9KS0h1dGRnV3Rad3ly
TkFEMEMySDE3R2xKZUUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAbig/MA0GCSqGSIb3DQEBCwUAA4IBAQAIK9SkZLiUzqKm7g5kv339Xo+c4lQl
V9LKNyt5S2eKCao/nLTpgoOuBDznFbSecS8JYZr7YYaqIDxFf31H6v+Hm7KMDpxl
V7WzfP/MSuS3wFVkM7620us6HE5hnl6HaFxTxdtdnnmSXn00gHoXB2TpR6pa1hpd
EpJXsGLHjpSmNI62XaDVHzyczqBwjjR7kc7YGEVOU/O2yNJwJ9Ew88tpkFnK5uwg
g122kSiJhyKHXheFU0S7brNEKmVPx6wv/mMp9ptCwrI+oFBvGfcJgV4bpTkqYhop
mjPVN1JiQU9G1f+05TW5ek6vHPGSOCVPftBSxpN+hOQIPpADdKbcR9xQ
-----END CERTIFICATE-----
Generated at Sun Jun 22 09:52:34 2025 by rpki-client