Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/fCm0HO3RIYIUkfefOLdCTvm5awM.roa
File: fCm0HO3RIYIUkfefOLdCTvm5awM.roa (raw, json)
Hash identifier: 6JNGKVMLI331cyu2Q1Yx8W1ywEUi9VL8qpSIskTFc48=
Subject key identifier: 7C:29:B4:1C:ED:D1:21:82:14:91:F7:9F:38:B7:42:4E:F9:B9:6B:03
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 0CB4
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/fCm0HO3RIYIUkfefOLdCTvm5awM.roa
Signing time: Fri 27 Jun 2025 14:08:50 +0000
ROA not before: Fri 27 Jun 2025 14:08:50 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 9304
IP address blocks: 124.173.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3252 (0xcb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Jun 27 14:08:50 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=7C29B41CEDD121821491F79F38B7424EF9B96B03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:97:ab:61:87:4a:85:ba:a4:23:b1:5f:c9:be:
c9:98:0b:81:76:d3:ee:99:57:d8:48:6a:03:cd:ba:
86:b8:10:0a:87:d5:61:9f:4b:8a:5e:83:87:0e:c2:
50:50:c4:f4:82:9f:e0:45:1f:50:91:f4:6e:dd:d6:
6b:cf:f6:5d:99:30:49:b5:3d:fc:4e:d1:00:76:ad:
7b:40:08:2e:04:6b:8f:82:ce:7a:2b:70:b4:da:59:
da:56:2f:32:44:01:23:34:51:4f:48:f0:26:d5:85:
a6:87:84:01:79:16:62:29:fa:98:d9:03:f8:4c:11:
6f:94:a3:47:b6:ad:da:11:31:f5:35:81:95:c6:a3:
0b:da:da:71:90:82:5d:eb:65:87:e8:58:3d:83:74:
21:7b:e7:66:30:92:84:3c:df:cd:b2:72:d4:7b:b3:
c1:54:e6:a6:84:5b:6e:43:56:b9:be:63:a8:3f:c8:
79:2c:00:d6:68:db:fa:af:99:bf:15:56:d5:bb:df:
10:20:90:11:50:e1:52:22:2c:18:0c:b7:d6:98:76:
c1:c2:e2:f4:c9:a1:6b:b1:dd:40:4a:ce:03:19:c2:
f0:14:c6:6b:c0:5e:07:0a:84:c7:19:af:00:0f:ed:
55:cd:d6:3d:5d:aa:36:57:35:24:3a:78:57:5e:73:
71:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:29:B4:1C:ED:D1:21:82:14:91:F7:9F:38:B7:42:4E:F9:B9:6B:03
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/fCm0HO3RIYIUkfefOLdCTvm5awM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.173.192.0/18
Signature Algorithm: sha256WithRSAEncryption
dd:c9:03:ba:13:85:9d:e1:3f:36:b6:50:92:b3:bd:35:fa:4e:
d8:21:7f:cc:88:c8:1c:49:da:af:9f:23:0e:73:af:22:3c:b3:
ba:28:e9:2c:9c:0a:03:95:ce:47:4b:a7:92:19:58:b1:1a:82:
1a:d2:90:16:dc:ef:65:35:fb:08:4b:5c:33:28:03:4d:b8:63:
ce:fb:49:d6:f6:1a:e4:d9:a2:f4:e0:70:d7:7f:72:fb:c5:50:
d7:09:98:3f:b3:e0:41:6a:be:e7:9c:5c:6f:65:a9:9f:53:3e:
49:cb:d1:6a:02:f8:b8:15:2d:65:5f:42:38:f0:ac:50:16:cc:
b9:c9:c9:c8:93:c3:3d:c0:ff:8d:ab:f8:0e:a8:d0:67:9b:a8:
8b:13:ce:6c:b0:d5:ef:1c:c7:31:67:e9:a8:05:4a:3d:59:53:
7a:9f:dd:fc:c8:79:0a:65:90:5b:f2:ec:83:91:92:31:9c:59:
9a:88:92:36:27:b9:e6:49:a8:e2:db:aa:fb:94:8d:07:df:7c:
3c:4d:d0:b0:6b:8c:29:9a:57:42:ff:7a:68:6a:23:fa:15:f7:
2d:8d:50:90:f9:b9:0a:80:e9:e1:ad:c1:04:b4:76:00:a7:53:
c9:d6:d5:2d:2c:c0:7f:78:17:40:a7:f2:09:fd:d5:10:4d:7d:
d9:05:be:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:17:59 2025 by rpki-client