Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3246/81XUE6ph-YfMqkp2MvnqNYH6XP8.roa
File: 81XUE6ph-YfMqkp2MvnqNYH6XP8.roa (raw, json)
Hash identifier: udMdA++dFCcVG2w6E/Jd7VL8jbt0XvwZh3yIc1S4UOg=
Subject key identifier: F3:55:D4:13:AA:61:F9:87:CC:AA:4A:76:32:F9:EA:35:81:FA:5C:FF
Certificate issuer: /CN=7FFE6EB152FAF96D18BFC69FD3E3BF99862AA9F1
Certificate serial: 09B7
Authority key identifier: 7F:FE:6E:B1:52:FA:F9:6D:18:BF:C6:9F:D3:E3:BF:99:86:2A:A9:F1
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/f_5usVL6-W0Yv8af0-O_mYYqqfE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3246/81XUE6ph-YfMqkp2MvnqNYH6XP8.roa
Signing time: Thu 17 Apr 2025 20:07:29 +0000
ROA not before: Thu 17 Apr 2025 20:07:29 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 211392
IP address blocks: 210.87.72.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2487 (0x9b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7FFE6EB152FAF96D18BFC69FD3E3BF99862AA9F1
Validity
Not Before: Apr 17 20:07:29 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=F355D413AA61F987CCAA4A7632F9EA3581FA5CFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c8:cc:a4:79:3e:9e:82:f6:15:25:38:41:8d:
f3:be:1a:5a:40:46:bd:46:b2:3c:ef:ee:70:d4:4d:
f2:df:60:ed:b8:9c:90:92:cf:ab:52:f4:e3:23:10:
c7:c7:ad:93:5b:d2:cd:77:bf:ff:7a:dc:2e:ec:a4:
f6:70:71:eb:e4:ef:2b:fe:10:67:3b:a4:4c:9e:40:
5a:58:54:dd:72:c9:16:0c:a2:ad:59:d8:12:6b:85:
e9:bd:f3:aa:2e:7d:dd:0e:54:43:7d:0c:c5:63:cc:
9c:29:dc:eb:37:11:7b:fa:02:11:0f:ac:d7:b5:65:
67:a8:36:db:91:9d:38:85:6b:09:55:31:9d:29:1e:
55:3e:99:be:7d:19:e4:f0:6d:3d:e0:60:54:34:9b:
59:0a:b4:42:1e:d1:04:0b:1d:1c:83:07:c6:8d:3f:
f3:0a:66:8a:35:56:b4:93:a3:f1:46:db:c5:03:fa:
ac:20:fc:c2:a6:b7:3c:13:86:42:58:72:29:ab:90:
37:c4:c1:47:5b:e9:7a:cb:eb:41:a5:25:1b:d0:09:
9a:4e:64:ee:fa:cd:9f:56:68:96:08:bb:b7:0d:e2:
65:57:6c:ff:3f:c5:99:54:ea:d9:6f:83:37:4d:14:
4b:f3:e0:cc:00:c1:1c:8e:27:f6:39:5f:bb:a3:61:
aa:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:55:D4:13:AA:61:F9:87:CC:AA:4A:76:32:F9:EA:35:81:FA:5C:FF
X509v3 Authority Key Identifier:
keyid:7F:FE:6E:B1:52:FA:F9:6D:18:BF:C6:9F:D3:E3:BF:99:86:2A:A9:F1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3246/f_5usVL6-W0Yv8af0-O_mYYqqfE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/f_5usVL6-W0Yv8af0-O_mYYqqfE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3246/81XUE6ph-YfMqkp2MvnqNYH6XP8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.87.72.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:3a:b8:5b:30:97:8e:80:18:e9:c0:61:ae:c7:5f:34:c6:6b:
6b:ad:6e:11:12:4e:9a:2c:86:7f:ce:74:a9:1a:09:6c:c4:29:
6f:e9:ac:c1:e0:01:08:ac:64:43:5c:37:12:83:ae:bc:a4:3e:
7b:2a:8d:3d:57:a3:f5:d4:c9:92:05:1a:ee:78:d8:a5:9c:b6:
8d:d3:bd:75:18:43:16:41:f0:e5:58:95:2f:ba:b3:16:31:7f:
ba:87:07:97:5e:1b:3d:8b:81:87:bf:c9:46:0b:0e:35:c0:08:
90:cf:7d:08:cd:9c:ec:9e:c4:63:01:a1:5a:98:eb:a1:bd:0e:
07:54:cf:0f:e9:e6:34:7f:1c:13:ee:87:0d:48:36:76:6b:81:
12:df:a0:60:71:7b:0f:05:c1:a7:8e:92:1c:9a:52:9a:2a:cf:
87:ef:04:6b:4d:18:60:52:9d:c8:15:c4:1f:97:88:4f:1e:c2:
d6:54:59:f0:c2:a9:a0:30:af:78:a7:a7:32:27:94:fe:ce:d0:
ea:3e:72:ab:fc:29:8d:74:3f:32:e2:0e:ab:10:ae:7c:d1:53:
3e:5f:42:8d:fa:43:9a:e0:a8:67:fc:3e:30:21:d9:54:96:c6:
94:79:65:84:31:69:83:5a:74:18:50:ed:6f:2b:c2:38:7d:d3:
7b:63:43:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:29:23 2025 by rpki-client