Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/OjvJeSo6lsEg9uLCdozMhBG1wpM.roa
File: OjvJeSo6lsEg9uLCdozMhBG1wpM.roa (raw, json)
Hash identifier: o11AaYnXnEfRHY+f+c5bRhxX0vq/1+fUyNDi4psENWI=
Subject key identifier: 3A:3B:C9:79:2A:3A:96:C1:20:F6:E2:C2:76:8C:CC:84:11:B5:C2:93
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/OjvJeSo6lsEg9uLCdozMhBG1wpM.roa
Signing time: Wed 09 Apr 2025 07:08:25 +0000
ROA not before: Wed 09 Apr 2025 07:08:25 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 210.78.64.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Apr 9 07:08:25 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=3A3BC9792A3A96C120F6E2C2768CCC8411B5C293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:91:01:97:c3:21:4e:ea:a6:7f:28:7f:c8:6a:
3b:37:86:9f:3f:54:ef:fc:9f:a8:20:a7:27:97:d0:
1e:02:f1:21:df:15:62:2b:6a:e3:38:2c:60:10:66:
6a:42:89:53:1e:61:8c:50:fe:b1:5b:65:1f:84:af:
63:c8:cb:6a:6f:d1:9b:01:d7:e4:a9:57:ef:43:2f:
b1:cb:b0:7c:33:81:02:c9:4e:82:47:e0:78:46:6f:
ff:17:ae:87:6b:19:ed:93:f6:20:39:1e:a2:0c:8d:
cb:67:3f:fd:3b:d7:34:c4:f5:01:69:f0:e4:2f:2d:
8a:75:33:33:d5:78:00:af:18:1d:54:79:f5:21:f2:
5d:f7:af:a0:ba:22:1b:2c:aa:f5:0e:17:2c:6d:31:
99:b6:7a:93:be:dd:21:b3:ef:d9:f5:86:97:47:0e:
33:fe:32:d3:2f:1d:0b:59:0e:21:1b:87:b2:65:c7:
42:5a:f3:a9:70:22:b3:8f:c4:35:fc:f2:ef:40:20:
92:7e:a6:fa:b7:e2:df:94:8c:e1:e3:02:2a:8f:44:
c7:e8:69:1c:4b:d9:56:48:02:1a:9e:f2:71:af:27:
3f:59:04:4e:eb:ad:5a:78:45:b0:8b:73:9c:d0:5d:
8d:f7:c5:22:8e:6d:0c:74:18:2e:f1:57:9f:e5:d6:
c4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3B:C9:79:2A:3A:96:C1:20:F6:E2:C2:76:8C:CC:84:11:B5:C2:93
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/OjvJeSo6lsEg9uLCdozMhBG1wpM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.78.64.0/19
Signature Algorithm: sha256WithRSAEncryption
87:62:2f:21:fe:5f:2e:1e:26:54:38:48:31:50:e0:2a:d4:27:
68:8e:b8:65:25:6a:5b:ea:9c:69:e0:c9:e8:49:1b:3a:86:ae:
04:a9:be:e7:7d:9c:97:70:de:46:4b:6b:3d:73:f0:52:0f:89:
dc:d7:6c:fc:14:a7:85:ac:fe:cb:95:0f:93:10:61:26:f8:a2:
60:3c:99:50:06:fb:af:64:73:e8:34:1f:35:3c:30:d6:e9:87:
cd:60:bb:49:78:d0:29:9a:cb:8a:9b:83:7d:56:89:67:f5:a9:
43:d5:cd:4f:69:99:f2:74:4a:b7:d2:c5:e6:f4:88:01:2b:1b:
8d:63:29:4c:f3:84:59:f3:ca:3a:ea:94:18:2e:69:a4:c8:76:
d9:7a:3c:fa:b4:ad:b7:ed:68:78:db:32:d1:38:9a:ee:28:8b:
68:92:1a:6b:ac:3e:d0:89:73:e6:7a:bb:0e:0a:01:01:c1:bb:
bc:2b:6d:0b:15:fb:e2:ca:d3:60:0c:7d:56:e6:e3:70:91:b4:
ee:26:fe:a9:1c:92:1a:22:3e:54:6d:cc:89:47:b0:6f:8a:6d:
51:9d:9c:2a:aa:92:91:3b:a4:29:b6:b8:83:ca:f4:30:61:5e:
28:bb:2e:4c:8d:04:2f:db:19:b0:d5:dc:73:96:32:b7:70:c1:
98:11:0b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:25:45 2025 by rpki-client