Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1232/1aQww9cPJhLPbc0TG3tApknV8Ko.roa
File: 1aQww9cPJhLPbc0TG3tApknV8Ko.roa (raw, json)
Hash identifier: ANaRpAjZShiPajdKHTIe9sjNeKMSVnY/EeLx7drqQNc=
Subject key identifier: D5:A4:30:C3:D7:0F:26:12:CF:6D:CD:13:1B:7B:40:A6:49:D5:F0:AA
Certificate issuer: /CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4
Certificate serial: 44
Authority key identifier: F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/1aQww9cPJhLPbc0TG3tApknV8Ko.roa
Signing time: Fri 22 Aug 2025 06:30:23 +0000
ROA not before: Fri 22 Aug 2025 06:30:23 +0000
ROA not after: Thu 20 Aug 2026 07:49:18 +0000
asID: 138457
IP address blocks: 45.120.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68 (0x44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1989B406901ADF8810B9DCDC4E0FC9E7E85EEB4
Validity
Not Before: Aug 22 06:30:23 2025 GMT
Not After : Aug 20 07:49:18 2026 GMT
Subject: CN=D5A430C3D70F2612CF6DCD131B7B40A649D5F0AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bc:d5:e6:06:85:5f:51:46:7c:87:85:2a:c8:
9a:c0:88:a8:12:18:5f:ac:8b:05:22:04:9b:9f:b1:
b1:7a:f5:e6:16:25:0a:de:d0:33:f9:31:11:9f:47:
de:ae:85:f1:06:99:c4:c3:f4:d3:ad:1f:45:4a:45:
59:59:3a:5b:4e:07:c0:18:45:ee:c7:cd:82:c2:da:
27:d3:09:57:b2:08:4f:9d:13:22:21:fa:88:96:83:
37:78:17:e0:60:08:67:ab:3c:6d:63:d9:83:f0:b9:
01:2a:df:12:35:76:8a:e7:a7:c0:51:de:bf:9c:1d:
02:0a:4e:f3:02:20:c0:95:eb:2c:98:4b:df:af:fa:
54:eb:be:69:e6:f8:28:01:3b:d1:69:db:4b:4a:39:
93:e9:20:d8:ed:1a:d2:4a:99:03:15:d2:99:54:90:
32:aa:7c:0a:ca:a5:32:49:65:91:46:5b:c2:3a:5c:
cf:3c:4e:f8:44:ef:b8:45:ae:87:69:a6:bc:b8:72:
63:c1:af:5a:49:77:c8:bd:58:22:f9:00:ec:d8:ad:
eb:c5:1c:db:c8:e7:9a:70:88:45:4a:56:57:5b:1d:
59:dc:01:b1:be:f0:e3:fe:f4:ad:87:a6:41:a0:53:
a5:ce:b5:af:ef:10:0c:4a:35:78:60:46:18:1b:9b:
24:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A4:30:C3:D7:0F:26:12:CF:6D:CD:13:1B:7B:40:A6:49:D5:F0:AA
X509v3 Authority Key Identifier:
keyid:F1:98:9B:40:69:01:AD:F8:81:0B:9D:CD:C4:E0:FC:9E:7E:85:EE:B4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/8ZibQGkBrfiBC53NxOD8nn6F7rQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8ZibQGkBrfiBC53NxOD8nn6F7rQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1232/1aQww9cPJhLPbc0TG3tApknV8Ko.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.120.243.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:5b:62:e4:65:d7:e0:0b:86:b2:aa:b1:a7:7d:2a:32:ae:e5:
8e:cb:da:7d:df:1c:dd:3a:db:5b:e5:b3:6c:6b:3b:76:2a:c8:
32:a7:6e:e6:73:ec:4e:98:86:bf:37:25:72:f5:e4:39:23:1b:
39:5f:77:a8:cd:72:94:6d:75:8e:46:06:24:4f:40:d7:8b:a0:
12:3f:e8:ff:b8:ef:60:5a:e3:13:85:d0:6b:3c:5d:de:ef:d6:
5a:6d:8d:8c:ea:01:2d:ba:61:e0:42:6f:b8:19:fd:91:37:3a:
13:1a:2d:8f:66:ed:b3:4b:73:a0:bf:4c:14:a2:94:fd:6a:6f:
39:11:5a:4c:38:88:87:45:99:ee:4c:46:e5:c7:e0:41:9c:6b:
70:a0:33:b3:6d:bd:4d:06:a5:78:aa:de:9b:5b:a9:a5:7f:c2:
03:b2:2f:8a:fd:d4:d2:75:39:38:cb:a0:58:50:1a:88:b1:52:
70:10:87:81:9e:4a:1f:6a:dd:e5:02:aa:77:5c:ad:24:b8:96:
c8:39:53:65:76:17:21:d4:d6:e4:bf:00:13:16:fb:12:94:60:
fd:a1:76:29:b5:ba:cf:84:56:b5:fe:39:f7:de:82:f8:c3:c8:
80:ae:87:61:ce:8e:9f:67:d5:87:70:84:ca:b1:c4:0c:52:91:
fb:65:b3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:47:52 2025 by rpki-client