Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/890/WTlPnRqf_aIMa-VK2A7h34n1Zb0.roa
File: WTlPnRqf_aIMa-VK2A7h34n1Zb0.roa (raw, json)
Hash identifier: WIoge0raGn0/UgZlZ1WJN6MHT8M/5OoDSOmNFjD0IRU=
Subject key identifier: 59:39:4F:9D:1A:9F:FD:A2:0C:6B:E5:4A:D8:0E:E1:DF:89:F5:65:BD
Certificate issuer: /CN=DBB4C5FA96B8741BF68B48BF004DBD6FD9636FAD
Certificate serial: 0C8D
Authority key identifier: DB:B4:C5:FA:96:B8:74:1B:F6:8B:48:BF:00:4D:BD:6F:D9:63:6F:AD
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27TF-pa4dBv2i0i_AE29b9ljb60.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/WTlPnRqf_aIMa-VK2A7h34n1Zb0.roa
Signing time: Thu 05 Jun 2025 03:51:20 +0000
ROA not before: Thu 05 Jun 2025 03:51:20 +0000
ROA not after: Thu 09 Apr 2026 06:41:00 +0000
asID: 63567
IP address blocks: 43.248.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3213 (0xc8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBB4C5FA96B8741BF68B48BF004DBD6FD9636FAD
Validity
Not Before: Jun 5 03:51:20 2025 GMT
Not After : Apr 9 06:41:00 2026 GMT
Subject: CN=59394F9D1A9FFDA20C6BE54AD80EE1DF89F565BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a8:3f:9e:6c:a3:4b:d0:94:90:a4:74:21:5f:
3b:c3:35:6a:ca:1c:cd:bf:82:aa:e8:97:15:1e:25:
af:b5:7b:86:f6:51:5c:8f:5e:71:23:d5:32:5d:5d:
54:ca:1d:f0:5b:fb:a3:d7:ba:4e:94:27:34:a5:21:
73:ed:5c:25:16:9a:f1:d2:40:0d:b9:a3:6d:ee:d5:
33:ca:b9:31:ed:1c:ec:41:27:b7:3c:16:1e:6e:20:
43:5d:49:a1:cb:e0:cc:02:20:58:7c:cf:3f:b8:40:
7b:25:3c:f7:db:99:4d:fb:fa:ff:97:13:32:44:e9:
3a:dd:4f:06:3b:7e:66:22:9e:af:79:73:26:ef:88:
18:33:b7:4f:b0:b7:fd:f0:97:9c:da:fe:ec:08:a4:
f3:a8:b0:8d:a5:30:ce:ce:4e:92:a1:d4:ad:e7:31:
44:14:a5:45:55:fd:e9:e3:b7:09:1f:3b:20:16:d7:
e5:c9:ea:da:b6:00:9a:33:94:a0:c8:f3:c8:aa:3b:
f9:fb:83:fc:56:15:1f:5c:dc:23:e6:34:66:46:c5:
4f:8d:85:ed:09:88:69:45:51:3c:19:8e:8b:8b:33:
06:d1:52:27:f0:2d:ee:c4:f4:ae:3d:60:96:f3:e5:
c4:94:8f:8c:0a:58:b8:46:8b:86:cf:07:7b:90:b1:
ed:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:39:4F:9D:1A:9F:FD:A2:0C:6B:E5:4A:D8:0E:E1:DF:89:F5:65:BD
X509v3 Authority Key Identifier:
keyid:DB:B4:C5:FA:96:B8:74:1B:F6:8B:48:BF:00:4D:BD:6F:D9:63:6F:AD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/27TF-pa4dBv2i0i_AE29b9ljb60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27TF-pa4dBv2i0i_AE29b9ljb60.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/890/WTlPnRqf_aIMa-VK2A7h34n1Zb0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.248.187.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:46:c1:b2:5c:6d:4e:54:e3:1f:e3:3e:03:9d:3b:10:6f:f0:
97:6b:37:ad:b5:db:71:86:73:89:42:97:58:d3:fe:29:0b:d8:
42:c6:6b:20:e1:da:81:85:eb:f2:01:ac:23:ff:64:b8:ab:1d:
d1:4b:ff:cd:21:9d:47:98:8b:97:2a:0a:ec:96:5c:8a:96:ef:
62:3b:b1:66:44:ae:38:68:22:cf:74:1f:d6:13:f1:20:4f:14:
ed:7a:c4:a4:b5:b0:55:00:eb:c3:ec:f1:bb:a0:f2:71:a6:d5:
ca:7f:72:38:9b:95:91:f1:e1:af:46:e6:b9:2b:c9:bb:41:36:
0c:39:5e:bd:ce:96:ea:05:fa:21:38:20:ee:12:c6:ad:df:fb:
cb:6d:08:f1:ab:fe:31:1c:51:11:23:9a:7a:a1:b4:ef:03:61:
f4:14:4a:51:78:7f:fe:95:b9:af:cd:5d:1e:07:fb:3f:88:1b:
c4:3d:9e:7b:80:9e:3e:1a:9b:e0:a2:e8:30:3c:fb:c4:0f:06:
3d:59:60:a0:3d:ca:c1:90:7a:53:11:6e:ef:78:20:8b:f4:3e:
b4:fe:74:6d:96:02:cc:e8:3d:2f:0f:ee:a1:0f:44:e3:86:2a:
db:f4:ab:01:95:ea:a8:e6:90:e9:26:a1:2c:57:10:e6:df:c7:
69:45:b5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 19:58:33 2025 by rpki-client