Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/jT09XRsBHfPtmEPWrhFGFMXgClg.roa
File: jT09XRsBHfPtmEPWrhFGFMXgClg.roa (raw, json)
Hash identifier: qRXP2zRb2Iiihm4Cfu3yfyZLEdCElFvnGVDJ91Rwxqg=
Subject key identifier: 8D:3D:3D:5D:1B:01:1D:F3:ED:98:43:D6:AE:11:46:14:C5:E0:0A:58
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 1321
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/jT09XRsBHfPtmEPWrhFGFMXgClg.roa
Signing time: Wed 18 Jun 2025 04:51:13 +0000
ROA not before: Wed 18 Jun 2025 04:51:13 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 62387
IP address blocks: 119.59.244.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4897 (0x1321)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Jun 18 04:51:13 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=8D3D3D5D1B011DF3ED9843D6AE114614C5E00A58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c7:84:51:f1:32:e9:68:6e:9d:7d:f0:e7:51:
39:32:23:e3:76:b4:58:41:a7:89:9c:4e:0e:72:fc:
07:dc:4e:64:bf:35:26:fb:3f:a7:03:eb:9c:42:6c:
ab:ae:8a:b4:dc:9a:0b:73:fa:d2:20:bc:a8:49:27:
e0:9b:81:6b:2b:1d:f2:84:ec:04:17:16:44:46:56:
2d:d5:f8:80:32:31:7d:98:fa:f3:d1:b4:7b:6b:ca:
9a:f8:64:4c:61:0e:c4:ff:e6:14:b1:99:d0:e3:b3:
04:e1:41:42:54:8a:71:42:74:82:05:81:af:35:b2:
a5:04:a1:d5:c4:d4:78:a9:9e:7e:89:4e:fe:9d:c5:
cb:73:a4:0f:a0:5d:4f:4a:c4:87:9f:74:fe:e0:ea:
6a:11:22:5f:4f:ab:f1:70:8c:43:48:9f:92:1c:e1:
e6:51:fa:0a:cd:da:ab:39:f2:21:0d:d4:26:2a:47:
df:d4:be:30:8f:8d:d5:62:ea:c4:69:59:32:e0:3e:
5b:a0:1e:ad:cd:bc:51:31:50:b3:e8:3d:c1:40:27:
8f:48:70:8b:a0:c9:f1:8a:26:8e:53:3a:a6:3b:27:
14:ed:29:9d:aa:e7:3c:63:2b:b9:ec:e2:86:7d:f3:
3c:2d:bb:dd:f8:2a:6e:b1:06:a8:28:ef:d6:d7:07:
1a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:3D:3D:5D:1B:01:1D:F3:ED:98:43:D6:AE:11:46:14:C5:E0:0A:58
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/jT09XRsBHfPtmEPWrhFGFMXgClg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.59.244.0/22
Signature Algorithm: sha256WithRSAEncryption
d0:f7:ae:22:c5:34:7e:1c:d0:ee:08:a0:6f:b2:88:c5:53:82:
f1:f1:4b:a7:8c:33:c9:85:da:bd:77:9a:b8:4d:11:35:36:c0:
68:ae:6d:b8:61:a4:1d:1a:0e:3b:d9:98:f9:9d:9b:5e:b3:d6:
cb:55:7c:f8:9a:40:ab:87:bd:58:7e:f8:44:10:79:2b:9e:6e:
33:ff:8c:eb:9a:f7:11:97:15:29:4c:c8:f2:70:b3:0c:9e:75:
87:10:1f:2e:71:cc:f0:14:03:fb:f3:8b:89:3f:a1:b2:ef:cf:
df:f4:59:b8:b5:87:35:68:53:84:b3:36:53:84:f3:4f:6e:03:
d5:17:e4:84:e1:4c:33:cd:9e:bd:90:0a:be:6c:04:ae:ec:cc:
dd:71:f2:8d:03:06:ba:25:b0:b0:a1:93:1b:7b:4b:1c:ad:92:
e1:96:84:3c:68:95:0b:ab:90:08:73:9c:94:25:7d:17:95:b1:
1c:40:51:32:3f:23:5d:77:f6:e4:99:98:ed:bf:2b:1b:e3:f2:
6a:a3:67:5d:fb:d1:5c:06:35:84:6e:5a:c9:5c:fe:9b:d4:51:
ad:9b:7d:15:3e:68:ab:27:45:ca:ec:7d:0a:b3:f6:2c:b4:52:
f2:ec:20:40:bf:51:6f:03:8f:3e:33:50:74:e6:8e:12:6b:a1:
61:6e:ed:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 23:54:54 2025 by rpki-client