Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/Y1E3Bp0LbmNIQF2VjHFO7xdWwE4.roa
File: Y1E3Bp0LbmNIQF2VjHFO7xdWwE4.roa (raw, json)
Hash identifier: Pyt8SO9nZCqKkU4e4PUUkcaWHd5TEeeSctmquYdUfzs=
Subject key identifier: 63:51:37:06:9D:0B:6E:63:48:40:5D:95:8C:71:4E:EF:17:56:C0:4E
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 1219
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/Y1E3Bp0LbmNIQF2VjHFO7xdWwE4.roa
Signing time: Mon 05 May 2025 12:08:07 +0000
ROA not before: Mon 05 May 2025 12:08:07 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 62387
IP address blocks: 101.232.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4633 (0x1219)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: May 5 12:08:07 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=635137069D0B6E6348405D958C714EEF1756C04E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fd:d6:00:f3:1f:a7:a4:21:30:8a:ec:2f:f4:
7c:8e:9c:40:cc:2a:14:ba:25:e5:48:d6:d4:b5:52:
a3:80:fd:0a:0d:76:49:67:43:73:b3:94:40:03:67:
16:4f:b5:21:fe:57:5a:74:00:99:df:0c:e2:d8:3b:
8f:fb:bd:44:9c:d6:cb:b6:b3:1f:e3:42:44:78:c1:
fd:30:b7:cb:23:c0:b5:7a:5c:8e:bc:60:d1:c3:04:
3a:fd:0a:c4:1d:c7:f0:a5:ca:9d:9a:a2:a8:6a:98:
72:eb:ce:ef:5b:0a:ca:e3:28:9d:2b:8e:17:c5:ba:
a6:39:6b:95:49:42:fa:e5:81:8d:32:e8:93:bd:8c:
99:1b:07:27:01:28:5f:2c:79:a6:2c:3e:72:35:1c:
38:c4:21:ad:e3:23:23:a2:ce:d1:40:79:95:23:a7:
1b:92:ef:5e:21:6e:07:06:69:3f:9d:b6:3e:c2:5a:
7c:df:2d:e3:0f:0b:2f:87:b4:d4:17:5b:98:6a:54:
09:c9:af:cc:3f:64:35:dc:8e:a9:45:91:b9:d9:b2:
f8:9d:91:29:94:a3:d5:7d:5b:07:da:47:1b:aa:f9:
68:d5:3e:49:d5:0e:92:5c:17:32:3c:67:b8:f8:5d:
42:5b:2a:a0:1d:1f:84:ae:6d:f6:85:e1:c4:97:b4:
75:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:51:37:06:9D:0B:6E:63:48:40:5D:95:8C:71:4E:EF:17:56:C0:4E
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/Y1E3Bp0LbmNIQF2VjHFO7xdWwE4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.232.120.0/22
Signature Algorithm: sha256WithRSAEncryption
46:1d:50:23:24:ee:25:96:52:16:da:0c:90:0e:3a:c0:32:0e:
11:71:75:25:a7:50:2f:f7:b7:0f:6a:8d:21:ef:07:99:04:cb:
79:ed:d4:31:56:96:38:81:49:01:ac:ad:4c:d3:9d:aa:bf:88:
e9:aa:bf:d4:cc:59:f8:be:9e:bc:59:59:95:5b:64:cf:ec:19:
c1:f0:7b:cd:a3:7c:40:32:5d:f0:9f:f2:99:ee:d6:65:7b:e8:
b4:9b:e3:ab:e1:6e:fa:18:48:70:bd:ba:a8:48:1f:09:91:6a:
2a:20:63:8d:e5:09:0e:ee:fd:a7:6b:29:a5:14:6e:3b:f8:e6:
fa:24:f1:c9:32:71:6d:85:7a:65:42:9b:26:97:44:d9:a6:69:
94:5e:de:a7:93:4f:3e:0a:d5:14:46:02:1d:1b:6d:78:06:88:
f6:e8:aa:da:5d:52:13:83:62:70:f7:dc:47:b6:ce:f4:54:69:
23:ee:3d:60:64:f4:eb:23:4d:22:cb:16:55:32:cb:0c:95:45:
8f:c8:9a:63:f3:78:d2:23:aa:89:0c:04:c2:18:81:88:c2:59:
17:e3:98:c6:d3:89:d1:a5:a6:78:b1:7d:f4:d3:9d:88:0b:8a:
7e:aa:1d:84:f9:3e:96:fa:0d:5e:99:cc:92:9e:d3:c2:56:31:
bc:11:be:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 06:14:30 2025 by rpki-client