Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1228/gg5Y69X3BYJYKtKplYkxI624BOc.roa
File: gg5Y69X3BYJYKtKplYkxI624BOc.roa (raw, json)
Hash identifier: 7dXDaR1UhAgliO0V0w6sUe9FKzO6OIi8peZ+fAyYMz4=
Subject key identifier: 82:0E:58:EB:D5:F7:05:82:58:2A:D2:A9:95:89:31:23:AD:B8:04:E7
Certificate issuer: /CN=ADD2726DD6FF9F5A459AE5B0A9EE8E7DDFC7F07C
Certificate serial: 11
Authority key identifier: AD:D2:72:6D:D6:FF:9F:5A:45:9A:E5:B0:A9:EE:8E:7D:DF:C7:F0:7C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/gg5Y69X3BYJYKtKplYkxI624BOc.roa
Signing time: Sat 17 May 2025 03:26:13 +0000
ROA not before: Sat 17 May 2025 03:26:13 +0000
ROA not after: Sat 16 May 2026 10:06:17 +0000
asID: 14618
IP address blocks: 43.254.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADD2726DD6FF9F5A459AE5B0A9EE8E7DDFC7F07C
Validity
Not Before: May 17 03:26:13 2025 GMT
Not After : May 16 10:06:17 2026 GMT
Subject: CN=820E58EBD5F70582582AD2A995893123ADB804E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:38:84:81:da:2b:37:2c:07:76:71:f4:bf:a0:
b3:31:95:bf:b7:e0:a8:73:67:fb:1c:f5:3e:3f:7b:
4e:cb:99:81:96:76:1d:00:b5:88:f9:75:65:ca:0e:
79:0e:ea:a9:39:fa:1e:25:36:31:40:60:f0:1d:b9:
da:1c:8f:4a:dd:1c:d4:9b:5a:77:2a:fa:dd:ac:0c:
41:c6:3a:87:3e:d0:c2:2a:60:60:d2:b3:3c:b0:e1:
44:95:89:a3:17:80:1a:32:03:67:f0:f8:2f:75:53:
6d:4a:1b:fc:2b:79:30:2f:77:a6:9a:a2:55:b4:91:
d3:9d:38:e9:75:2e:bf:1e:55:38:36:f4:65:01:64:
ee:85:fe:8b:15:83:09:da:41:bb:43:5f:45:60:0e:
54:fc:5a:5f:dc:91:41:cd:1e:2e:2e:34:f0:d6:98:
4d:a0:87:f0:c1:e6:ed:a6:3b:0b:88:ad:f1:77:10:
21:98:87:d5:2d:d1:8e:ae:f3:6a:e3:0a:f6:4f:f5:
30:2e:65:21:ac:43:d2:d7:3b:08:13:25:22:70:20:
f2:47:01:f5:e1:50:11:8e:29:cf:93:68:e5:11:fe:
ca:f7:cc:5e:08:63:8f:21:89:4d:bf:4d:c7:b2:d7:
23:2b:80:85:b3:d2:d8:4b:05:85:9f:58:e7:93:26:
f8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0E:58:EB:D5:F7:05:82:58:2A:D2:A9:95:89:31:23:AD:B8:04:E7
X509v3 Authority Key Identifier:
keyid:AD:D2:72:6D:D6:FF:9F:5A:45:9A:E5:B0:A9:EE:8E:7D:DF:C7:F0:7C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/gg5Y69X3BYJYKtKplYkxI624BOc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.254.193.0/24
Signature Algorithm: sha256WithRSAEncryption
74:ec:0f:57:44:9d:dc:96:06:0c:50:31:b9:95:84:27:8c:97:
a3:5f:f3:52:f6:f0:3a:99:f8:dd:c7:b9:89:d6:b8:2b:90:f7:
d0:9f:a8:e0:36:bf:57:de:1e:2a:64:8a:2a:8e:dd:11:ab:d3:
00:b6:fa:f2:37:c2:2f:d1:eb:fd:0e:19:7b:32:d8:14:73:f4:
50:c2:64:ea:53:e2:b8:4d:2c:8b:2e:5a:3a:9e:2d:72:f0:aa:
3a:b2:cd:02:76:4c:d6:34:c8:26:01:cb:ba:3f:08:32:43:4f:
6a:1f:c2:88:cf:9b:3f:e6:3d:f2:e0:39:8d:cd:c8:ef:af:37:
c3:f7:f3:eb:8d:8c:d6:ff:86:8b:3c:cd:a0:4d:15:05:d2:e0:
1f:0d:ae:6c:bd:24:61:12:2f:20:da:72:b8:71:f1:4d:b4:ff:
95:34:fc:c4:59:93:b0:c0:d6:90:9c:fa:85:8a:5c:81:31:2f:
8f:0b:81:8f:b5:15:81:8b:22:58:56:75:ae:61:5d:87:bb:51:
77:33:f8:fe:30:bc:96:66:21:fa:ba:e0:e2:a3:b4:d7:21:a8:
08:a4:1e:ba:41:c8:c8:f6:25:35:83:5f:0c:95:fc:45:4e:a7:
d8:11:07:a7:76:99:f0:e3:38:0e:dd:b9:9a:8e:d8:f1:40:11:
0d:95:1a:9c
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgIBETANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBREQy
NzI2REQ2RkY5RjVBNDU5QUU1QjBBOUVFOEU3RERGQzdGMDdDMB4XDTI1MDUxNzAz
MjYxM1oXDTI2MDUxNjEwMDYxN1owMzExMC8GA1UEAxMoODIwRTU4RUJENUY3MDU4
MjU4MkFEMkE5OTU4OTMxMjNBREI4MDRFNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOY4hIHaKzcsB3Zx9L+gszGVv7fgqHNn+xz1Pj97TsuZgZZ2HQC1
iPl1ZcoOeQ7qqTn6HiU2MUBg8B252hyPSt0c1Jtadyr63awMQcY6hz7QwipgYNKz
PLDhRJWJoxeAGjIDZ/D4L3VTbUob/Ct5MC93ppqiVbSR05046XUuvx5VODb0ZQFk
7oX+ixWDCdpBu0NfRWAOVPxaX9yRQc0eLi408NaYTaCH8MHm7aY7C4it8XcQIZiH
1S3Rjq7zauMK9k/1MC5lIaxD0tc7CBMlInAg8kcB9eFQEY4pz5No5RH+yvfMXghj
jyGJTb9Nx7LXIyuAhbPS2EsFhZ9Y55Mm+D8CAwEAAaOCAfMwggHvMB0GA1UdDgQW
BBSCDljr1fcFglgq0qmViTEjrbgE5zAfBgNVHSMEGDAWgBSt0nJt1v+fWkWa5bCp
7o5938fwfDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xMjI4
L3JkSnliZGJfbjFwRm11V3dxZTZPZmRfSDhIdy5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvcmRKeWJkYl9uMXBGbXVXd3FlNk9mZF9IOEh3LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIyOC9nZzVZNjlYM0JZSllL
dEtwbFlreEk2MjRCT2Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAK/7BMA0GCSqGSIb3DQEBCwUAA4IBAQB07A9XRJ3clgYMUDG5lYQnjJejX/NS
9vA6mfjdx7mJ1rgrkPfQn6jgNr9X3h4qZIoqjt0Rq9MAtvryN8Iv0ev9Dhl7MtgU
c/RQwmTqU+K4TSyLLlo6ni1y8Ko6ss0CdkzWNMgmAcu6PwgyQ09qH8KIz5s/5j3y
4DmNzcjvrzfD9/PrjYzW/4aLPM2gTRUF0uAfDa5svSRhEi8g2nK4cfFNtP+VNPzE
WZOwwNaQnPqFilyBMS+PC4GPtRWBiyJYVnWuYV2Hu1F3M/j+MLyWZiH6uuDio7TX
IagIpB66QcjI9iU1g18MlfxFTqfYEQendpnw4zgO3bmajtjxQBENlRqc
-----END CERTIFICATE-----
Generated at Sat May 17 20:16:08 2025 by rpki-client