Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3134/n8YuFZf4rSptPvsF2O9DRVuwYSg.roa
File: n8YuFZf4rSptPvsF2O9DRVuwYSg.roa (raw, json)
Hash identifier: ORLak4ERZfWHNiZjYmvHDqkHKusLIGtx05mhZdEnk9k=
Subject key identifier: 9F:C6:2E:15:97:F8:AD:2A:6D:3E:FB:05:D8:EF:43:45:5B:B0:61:28
Certificate issuer: /CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B
Certificate serial: 06DE
Authority key identifier: 1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/n8YuFZf4rSptPvsF2O9DRVuwYSg.roa
Signing time: Tue 10 Jun 2025 01:40:25 +0000
ROA not before: Tue 10 Jun 2025 01:40:25 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 146762
IP address blocks: 114.111.176.0/24 maxlen: 24
114.111.177.0/24 maxlen: 24
114.111.178.0/24 maxlen: 24
114.111.179.0/24 maxlen: 24
114.111.180.0/24 maxlen: 24
114.111.181.0/24 maxlen: 24
114.111.182.0/24 maxlen: 24
114.111.183.0/24 maxlen: 24
114.111.184.0/24 maxlen: 24
114.111.185.0/24 maxlen: 24
114.111.186.0/24 maxlen: 24
114.111.187.0/24 maxlen: 24
114.111.188.0/24 maxlen: 24
114.111.189.0/24 maxlen: 24
114.111.190.0/24 maxlen: 24
114.111.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1758 (0x6de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BC6D9A9F4A226A61F5FA1A9163941D4B35BA35B
Validity
Not Before: Jun 10 01:40:25 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=9FC62E1597F8AD2A6D3EFB05D8EF43455BB06128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d6:62:b6:46:2d:c8:d4:e1:11:98:85:20:60:
f4:49:d3:4b:dc:2f:11:49:b6:f4:7a:1e:d5:7d:16:
a3:25:05:43:58:69:e9:50:12:b6:99:06:bb:cd:e4:
64:94:f8:43:0e:2b:06:8b:0a:b0:b9:72:af:ae:f9:
d2:9c:70:fd:d5:9e:0d:70:11:78:9a:73:54:9a:d9:
ab:13:de:82:16:68:47:3e:44:4f:48:e6:8d:96:5a:
3a:0a:fa:80:8f:64:2c:70:eb:42:4d:9a:29:cb:ed:
e5:d1:1b:b0:67:0c:c6:ce:1d:c5:a9:82:07:6d:18:
32:88:f7:5c:1d:78:e9:99:f3:90:3a:e2:40:80:c1:
aa:a7:bd:cb:b9:c0:07:aa:71:10:06:9e:34:b8:11:
4f:21:b6:8d:59:5c:3e:3f:e2:4b:d2:6b:2f:e1:70:
54:b5:ed:8a:50:d8:7d:20:f1:db:0a:4d:84:1f:61:
b4:f9:62:4b:ff:dc:4a:78:1c:aa:37:bd:81:e5:af:
b2:40:16:a2:39:16:0d:83:df:96:5a:84:af:95:00:
be:b0:85:9b:5a:65:23:e9:6c:3a:83:17:7b:4b:9c:
44:b8:59:69:0f:45:f6:04:7f:b8:87:88:b6:e8:1c:
3c:79:fc:f7:59:3c:46:5e:43:e6:f9:a5:8d:9b:f4:
2e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C6:2E:15:97:F8:AD:2A:6D:3E:FB:05:D8:EF:43:45:5B:B0:61:28
X509v3 Authority Key Identifier:
keyid:1B:C6:D9:A9:F4:A2:26:A6:1F:5F:A1:A9:16:39:41:D4:B3:5B:A3:5B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/G8bZqfSiJqYfX6GpFjlB1LNbo1s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/G8bZqfSiJqYfX6GpFjlB1LNbo1s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3134/n8YuFZf4rSptPvsF2O9DRVuwYSg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.111.176.0/20
Signature Algorithm: sha256WithRSAEncryption
58:d2:4d:d3:95:7f:63:48:ec:81:4c:86:e4:91:bd:1f:b0:11:
44:81:97:43:a0:3f:41:b4:de:e4:ce:63:5a:d8:68:c2:64:d8:
e1:ce:21:d1:8a:7f:0b:e1:dd:ed:0a:f6:6a:75:44:35:f5:33:
ea:4c:ce:23:72:bb:a4:bb:a9:78:e2:8a:bf:91:2a:a9:2a:f9:
6c:3a:ac:c1:bc:66:75:5b:5c:1a:4e:9f:06:5e:cf:16:25:62:
90:7a:12:58:58:7f:1c:19:9c:5c:08:54:36:e8:05:77:dc:22:
d3:34:00:7f:9b:b2:1d:f7:2a:2e:09:15:0c:18:33:ba:94:32:
92:52:eb:dc:7e:7c:4d:7e:39:c6:ef:11:89:b7:38:2c:b9:0c:
5e:b0:62:46:38:b9:da:ea:89:ba:5b:c8:48:99:06:4e:27:04:
5c:7a:46:f3:3d:59:0e:ab:20:73:31:e3:46:e0:a0:25:c3:8b:
8f:12:3b:0b:60:e1:98:e4:d1:08:d2:b9:e6:fe:e2:49:06:32:
13:3a:fd:75:15:92:d9:80:54:52:9b:51:39:b1:06:39:b7:77:
75:c1:17:cd:38:e6:2f:8b:1d:c2:ea:34:b1:52:aa:d0:2b:a6:
cc:16:15:e3:2b:ca:76:28:b8:1a:98:4a:c6:5e:a4:56:d7:6a:
54:91:7a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:18:28 2025 by rpki-client