Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2411/G-_EUah9OXXnRYOJw30MerVDppU.roa
File: G-_EUah9OXXnRYOJw30MerVDppU.roa (raw, json)
Hash identifier: UUNV1l93qUPA2xNRVe2U7WGTQJmnzlOqvCDgaKHZotc=
Subject key identifier: 1B:EF:C4:51:A8:7D:39:75:E7:45:83:89:C3:7D:0C:7A:B5:43:A6:95
Certificate issuer: /CN=1F552F6E8AC2F97E1447BFAC810059695E2B32A9
Certificate serial: 2C
Authority key identifier: 1F:55:2F:6E:8A:C2:F9:7E:14:47:BF:AC:81:00:59:69:5E:2B:32:A9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H1UvborC-X4UR7-sgQBZaV4rMqk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/G-_EUah9OXXnRYOJw30MerVDppU.roa
Signing time: Mon 18 Aug 2025 01:57:56 +0000
ROA not before: Mon 18 Aug 2025 01:57:56 +0000
ROA not after: Sun 16 Aug 2026 01:52:01 +0000
asID: 137690
IP address blocks: 202.189.40.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F552F6E8AC2F97E1447BFAC810059695E2B32A9
Validity
Not Before: Aug 18 01:57:56 2025 GMT
Not After : Aug 16 01:52:01 2026 GMT
Subject: CN=1BEFC451A87D3975E7458389C37D0C7AB543A695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:25:2f:b3:07:63:ef:b4:b3:5b:34:e6:08:02:
dd:cf:65:fe:a2:b6:a9:b6:3c:61:31:f1:81:7b:29:
1e:f7:93:a1:70:a4:76:9f:58:48:f7:c1:18:9d:fa:
a8:cd:3b:12:ec:ef:9c:c4:ad:58:3a:3e:6b:5d:95:
3d:7b:eb:88:39:cd:ec:23:4a:d3:95:6d:fb:40:ba:
13:2b:6b:65:b5:dd:35:2c:98:bb:c3:a6:59:b3:dc:
38:01:68:cc:22:0f:91:f9:99:d7:6b:9f:98:c3:1d:
d0:d6:34:98:59:be:64:70:a5:1b:eb:ed:38:a1:d4:
48:b3:0e:7e:34:2a:18:c2:32:72:fa:25:7c:17:e1:
da:c8:d6:48:72:ee:63:a7:fb:8c:43:e7:ed:c5:6b:
d5:01:c3:29:25:51:61:c0:92:b4:71:fc:b7:2e:e3:
f9:9d:0c:1d:c1:49:a5:4a:b0:a3:4c:3d:d5:66:f1:
4d:08:eb:1a:54:fd:64:1c:5a:02:18:d2:4c:e7:00:
bb:6d:14:d8:21:6c:31:ed:d9:77:57:53:6d:02:03:
ab:b9:d5:d5:c8:4c:91:87:23:c1:c0:e3:60:2a:29:
5f:25:b3:5f:9d:03:fc:6f:97:c5:c6:82:6e:57:c4:
15:20:84:ae:09:5f:49:f6:55:ce:3f:c0:1c:43:fd:
2f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EF:C4:51:A8:7D:39:75:E7:45:83:89:C3:7D:0C:7A:B5:43:A6:95
X509v3 Authority Key Identifier:
keyid:1F:55:2F:6E:8A:C2:F9:7E:14:47:BF:AC:81:00:59:69:5E:2B:32:A9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/H1UvborC-X4UR7-sgQBZaV4rMqk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/H1UvborC-X4UR7-sgQBZaV4rMqk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2411/G-_EUah9OXXnRYOJw30MerVDppU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.189.40.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:dc:4a:2c:d3:52:85:23:c1:87:9d:86:9d:8b:ed:07:96:6f:
a3:b4:b3:01:08:b4:e4:51:72:84:f7:00:56:9d:e9:70:27:23:
a5:6c:7b:4f:cf:0a:23:ad:83:a6:95:97:47:65:67:d8:7b:f4:
0c:cc:7e:6d:6d:3e:63:bc:23:54:86:47:b9:1f:be:3a:71:de:
a9:6e:4e:32:92:d8:74:ce:de:52:e7:ac:8f:e5:e0:69:ac:47:
af:7b:82:2e:b7:05:e9:eb:5e:bd:c9:65:e8:cc:97:9a:b8:84:
54:00:75:74:f3:58:e2:c6:dc:21:ad:15:51:98:0a:39:79:d8:
5f:30:b5:9b:af:20:3f:6a:ed:42:16:2a:49:c3:0d:45:fd:04:
ef:56:ec:76:bd:23:71:e2:43:71:26:6f:2d:38:8d:f7:0e:e8:
52:5a:3e:07:35:0d:12:5a:0a:58:01:47:48:d9:93:cd:8e:07:
3b:d1:7b:19:40:76:63:93:f2:90:37:e6:d4:e0:e8:f7:b5:2c:
ea:4a:06:73:93:b5:ec:0d:e4:8a:4a:3f:18:9c:45:92:01:1d:
5a:b0:bd:15:5f:8e:17:20:93:b2:69:57:74:8c:0f:0a:21:4a:
73:a3:aa:81:f6:61:04:68:c5:76:d3:cf:34:dd:2f:53:39:4d:
6f:18:1f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:04:29 2025 by rpki-client