Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2122/AV8N1GSSpFOInK-vkTiyj7vuY-Y.roa
File: AV8N1GSSpFOInK-vkTiyj7vuY-Y.roa (raw, json)
Hash identifier: ZXm6JgfrjytbAA1sPRbLsbQRQgtNuxMK24C9YtSPWU8=
Subject key identifier: 01:5F:0D:D4:64:92:A4:53:88:9C:AF:AF:91:38:B2:8F:BB:EE:63:E6
Certificate issuer: /CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97
Certificate serial: 20AC
Authority key identifier: 88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/AV8N1GSSpFOInK-vkTiyj7vuY-Y.roa
Signing time: Sat 13 Sep 2025 03:05:50 +0000
ROA not before: Sat 13 Sep 2025 03:05:50 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 4515
IP address blocks: 123.49.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8364 (0x20ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97
Validity
Not Before: Sep 13 03:05:50 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=015F0DD46492A453889CAFAF9138B28FBBEE63E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4c:f2:dd:ab:51:eb:97:f7:71:8f:3e:ff:5b:
af:18:2f:9b:87:54:55:3e:06:d2:d7:e7:d7:72:f4:
39:87:f5:dc:bc:95:c7:b5:f0:c8:74:e8:89:25:0f:
a7:33:5f:50:3a:0d:38:1b:52:34:47:56:51:18:a5:
7a:6a:7f:9e:dd:85:b5:15:3c:75:dd:52:ff:c6:77:
21:c0:93:da:36:14:94:b9:77:64:bc:b0:f7:ff:88:
32:dc:34:fb:4c:82:b9:8e:64:0c:e8:e1:65:02:a8:
a7:43:8a:2f:28:64:78:71:8a:ff:2a:50:52:b5:14:
84:bb:40:6e:a8:51:8c:66:45:26:6c:ec:cf:a8:85:
27:dd:7a:14:44:1e:65:f6:bb:8a:9f:c3:54:63:5c:
90:cb:bc:97:58:18:9b:db:2a:3c:b6:4e:db:4d:ed:
1f:73:a0:c2:fc:d6:e2:b8:55:c1:4f:e1:78:89:cf:
73:b3:61:a8:10:d1:6a:e5:89:8d:59:bf:b8:36:09:
62:d6:88:51:33:80:54:a8:3e:e7:91:19:ca:14:ea:
9b:bd:e8:54:05:d1:c3:4a:2d:ff:08:a0:95:bd:d6:
f5:98:3e:7b:12:67:cf:6a:24:86:e9:e7:2d:a4:01:
56:b2:bf:a0:26:88:01:7b:af:f0:9c:70:c0:15:1a:
a7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5F:0D:D4:64:92:A4:53:88:9C:AF:AF:91:38:B2:8F:BB:EE:63:E6
X509v3 Authority Key Identifier:
keyid:88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/AV8N1GSSpFOInK-vkTiyj7vuY-Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.49.247.0/24
Signature Algorithm: sha256WithRSAEncryption
28:3b:16:74:1d:85:9b:d8:bc:02:6c:89:74:35:90:af:dc:0d:
f4:ab:3c:b7:90:fc:d3:5e:fa:53:6b:32:10:9e:84:79:f8:b6:
ac:2b:a6:55:a8:1e:3c:58:c9:96:d4:a3:61:3c:1e:4b:33:c1:
02:16:c1:0e:e1:99:8c:59:f9:15:80:9f:f8:1a:2a:88:7c:83:
bf:bf:28:8c:bf:b8:70:6b:f6:29:2d:fc:c7:c5:de:6b:70:82:
db:2a:35:60:f8:d9:75:bf:14:86:86:aa:22:26:d9:b8:51:4d:
8a:af:d7:f3:54:5b:29:45:5e:a8:e8:60:31:61:c7:9e:fd:e1:
0d:5c:7d:36:bc:49:da:77:6a:69:85:b1:e5:14:6a:55:7b:8f:
ff:d2:8e:aa:1a:c0:3c:c7:4d:fb:ae:47:2b:11:21:56:a7:5f:
02:9a:ab:7e:8d:b5:14:99:15:05:49:af:82:2d:94:a9:57:df:
a3:3d:89:7e:07:a1:f4:e3:b1:67:d4:c3:25:82:e4:42:f2:aa:
02:ad:78:b8:06:22:cf:d9:da:43:bc:3e:66:ce:76:79:05:e2:
f9:99:fd:a5:53:b8:74:26:1d:ed:39:f4:00:bd:49:be:a8:90:
7d:72:a6:6d:a4:16:f4:e8:f9:d4:9b:17:e7:8f:00:5a:7e:ef:
6b:fa:26:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:52:23 2025 by rpki-client