Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/9XxOyd1OUAPvWTPUWW2_vJwovyI.roa
File: 9XxOyd1OUAPvWTPUWW2_vJwovyI.roa (raw, json)
Hash identifier: DMqOmTOkgrY5ytsZTzRh2Pwz/cla5EyKprQeDQUuRu8=
Subject key identifier: F5:7C:4E:C9:DD:4E:50:03:EF:59:33:D4:59:6D:BF:BC:9C:28:BF:22
Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA
Certificate serial: 0834
Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/9XxOyd1OUAPvWTPUWW2_vJwovyI.roa
Signing time: Fri 23 May 2025 07:41:07 +0000
ROA not before: Fri 23 May 2025 07:41:07 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 9808
IP address blocks: 223.161.248.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2100 (0x834)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA
Validity
Not Before: May 23 07:41:07 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=F57C4EC9DD4E5003EF5933D4596DBFBC9C28BF22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f3:73:76:f6:0a:36:e9:6d:f2:c4:97:39:22:
65:62:0c:1f:7a:c5:71:39:cd:6c:1c:2d:02:48:7a:
a9:d7:10:39:fc:99:8a:7b:c2:6a:c3:a1:b0:01:bc:
d1:7f:3b:56:2b:a3:e7:a0:fa:40:b1:0f:88:77:c7:
d8:57:3d:74:d0:bb:29:04:9d:3e:6f:86:31:1a:a2:
d6:0f:48:58:4b:72:e7:23:23:ea:62:ec:50:69:fa:
31:75:6b:e2:ba:b8:3c:e6:eb:71:88:0b:b9:b6:e3:
5b:3c:af:c4:91:8d:60:49:62:ca:ee:2f:02:16:e0:
4e:49:ee:fc:42:61:d2:0c:e1:29:d7:21:52:c3:78:
61:42:b9:cd:a0:bc:c1:04:a2:3c:35:b1:86:20:df:
7b:a0:16:3f:a0:83:27:5a:1b:cf:1b:0e:1c:42:b1:
c8:17:06:07:66:9b:bb:17:71:27:09:4d:3a:fd:6f:
5c:c1:60:16:67:2d:7f:ef:58:c5:00:97:7c:80:e4:
95:36:0b:af:58:c7:71:4c:94:97:69:5c:64:2d:1d:
13:0d:08:ad:96:8d:ca:0e:27:c9:c1:f4:d2:a5:84:
8d:9a:e1:d5:2d:70:5d:d7:0c:01:77:7b:a9:28:2f:
9d:6b:26:94:49:21:af:07:93:58:cd:0c:d5:da:3e:
59:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7C:4E:C9:DD:4E:50:03:EF:59:33:D4:59:6D:BF:BC:9C:28:BF:22
X509v3 Authority Key Identifier:
keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/9XxOyd1OUAPvWTPUWW2_vJwovyI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.161.248.0/23
Signature Algorithm: sha256WithRSAEncryption
59:51:66:48:24:f1:77:eb:2b:57:c8:66:fb:83:16:0d:6e:e1:
ba:fa:7f:40:03:ef:39:ff:bf:0b:c3:8d:a6:43:12:dc:40:f3:
c5:f8:97:06:75:a7:66:06:d3:ea:19:94:81:08:3b:b5:26:17:
97:76:4d:b3:4e:f3:c8:f5:fa:13:81:37:ce:bd:d9:85:1a:25:
85:e4:6b:c0:55:7b:41:25:8f:27:f0:b0:fa:9f:4c:9b:07:73:
ab:47:a9:18:84:f8:aa:58:ff:e2:37:c6:f1:97:7f:1e:e4:03:
58:cc:a4:c7:1b:02:30:3c:cc:f4:b8:a7:b0:8b:19:45:5c:1c:
57:fd:81:8d:8f:6a:13:44:93:04:66:55:f7:02:62:4b:07:4d:
67:e9:14:5e:e0:69:a8:15:ee:a8:55:a9:35:61:70:da:5c:4f:
84:67:04:bb:ec:d0:f9:70:55:8e:5a:45:23:53:91:1c:ba:2b:
6e:74:14:cd:a4:97:1e:ea:31:50:ce:96:e7:2a:6b:f1:ab:2a:
9a:1e:8c:65:ae:8f:79:d2:11:00:2c:38:28:92:8c:f1:a9:cc:
1b:bc:d9:dd:19:4e:c4:a2:d8:6c:64:65:62:56:bf:ed:a3:f2:
5d:09:71:2c:81:fe:56:90:71:a5:c5:95:74:7c:22:29:24:c2:
78:d8:d1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:26:26 2025 by rpki-client