Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/ZIu2cDATC1fuyNWUre-4z8MdRJQ.roa
File: ZIu2cDATC1fuyNWUre-4z8MdRJQ.roa (raw, json)
Hash identifier: FvWAWdHlZfe8cZsITf2/A06d9VsOp6LGA7o/YZd8tAI=
Subject key identifier: 64:8B:B6:70:30:13:0B:57:EE:C8:D5:94:AD:EF:B8:CF:C3:1D:44:94
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 0D
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ZIu2cDATC1fuyNWUre-4z8MdRJQ.roa
Signing time: Wed 09 Apr 2025 07:08:25 +0000
ROA not before: Wed 09 Apr 2025 07:08:25 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 218.97.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Apr 9 07:08:25 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=648BB67030130B57EEC8D594ADEFB8CFC31D4494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:48:92:15:ee:dc:dc:e9:d5:f4:fd:be:b7:cc:
44:29:84:81:c2:c4:c7:66:d6:37:0d:84:5a:06:1b:
aa:9e:40:e0:8a:5b:f6:62:de:7b:92:28:f5:51:f2:
60:db:55:3e:38:f8:eb:83:26:2f:41:bd:17:8e:1e:
9e:72:42:d3:0e:ba:c7:eb:0b:2e:f8:3e:58:bf:71:
1c:00:5f:dc:6b:5c:b4:cd:57:d2:63:d4:e1:6b:d7:
37:5d:71:05:28:1d:d7:c4:d8:d7:ec:f5:ac:05:5f:
5a:d4:42:2f:04:ee:8c:3e:96:34:bb:f5:0a:3d:e6:
a3:f3:2f:22:4b:d8:dc:d3:d4:cc:ff:df:d9:1e:6b:
49:1b:05:d8:60:41:1b:fd:77:9e:88:e6:51:79:7d:
eb:7d:d9:fb:71:50:65:2b:c0:4f:73:cb:e0:38:28:
b4:16:2d:83:9f:b7:01:c5:06:46:4e:cb:7a:83:9f:
79:d0:f3:ff:37:f9:36:f7:4a:bb:40:6b:82:52:b9:
20:35:27:1a:c8:dc:5c:a5:0c:92:45:68:d5:2f:2e:
63:e6:d6:5f:3b:04:a5:9f:4c:b5:e5:9f:b6:df:99:
fc:90:79:29:db:7b:d4:a4:87:17:77:50:2e:5d:8f:
e6:82:97:ad:af:b2:fa:fa:97:35:8c:bb:83:ca:d1:
0a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8B:B6:70:30:13:0B:57:EE:C8:D5:94:AD:EF:B8:CF:C3:1D:44:94
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/ZIu2cDATC1fuyNWUre-4z8MdRJQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.97.224.0/20
Signature Algorithm: sha256WithRSAEncryption
97:23:2f:91:f6:db:57:21:b0:b9:ad:db:ae:e5:e9:74:cf:03:
c7:cf:55:01:86:d9:15:6e:2f:5e:b9:6b:3b:74:88:11:e3:42:
6e:16:0a:d4:f4:19:b4:4b:0b:6a:82:9d:3c:64:f6:8f:fd:fa:
49:94:fd:d3:3a:5f:b3:d4:bc:3d:79:47:b1:13:71:5a:87:dc:
b4:f6:a5:39:dc:02:27:9d:b3:4a:a3:97:bb:68:c6:cc:b5:79:
5c:35:53:33:ad:a2:50:36:87:68:bf:1f:90:09:2d:cc:40:b6:
f6:52:8e:c0:2b:54:61:97:8f:fc:59:08:9b:0d:b6:69:36:63:
03:d6:bb:13:43:a8:95:88:45:cb:69:f2:f1:c0:1b:e8:1c:ee:
f2:40:fb:f0:e5:5d:f6:b5:a0:81:8c:f2:2c:a7:00:e4:7d:02:
d6:f6:64:ec:f9:c2:84:b7:e2:49:e2:c6:c8:b0:26:6c:83:a3:
26:7c:12:49:49:fa:20:01:16:67:ae:39:a3:b9:56:9d:2d:54:
63:e6:4a:cd:fd:47:05:0c:40:7d:8e:a1:59:9a:f1:f5:86:29:
fc:ef:c0:e7:ce:7a:6b:47:be:87:77:17:9a:2a:de:48:27:cd:
3e:7d:84:e2:f3:64:7d:fb:5c:64:80:65:27:71:0f:57:ef:a7:
ed:17:00:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:48:43 2025 by rpki-client