Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1826/kV9AEml-csA__CqqpnYCMCAIuy0.roa
File: kV9AEml-csA__CqqpnYCMCAIuy0.roa (raw, json)
Hash identifier: A5yckUhA+xMi/p84UjQVEu846ClLWJ01fmT4T/D8rGo=
Subject key identifier: 91:5F:40:12:69:7E:72:C0:3F:FC:2A:AA:A6:76:02:30:20:08:BB:2D
Certificate issuer: /CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F
Certificate serial: 14C7
Authority key identifier: 75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/kV9AEml-csA__CqqpnYCMCAIuy0.roa
Signing time: Sun 27 Apr 2025 09:29:39 +0000
ROA not before: Sun 27 Apr 2025 09:29:39 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 152320
IP address blocks: 45.254.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5319 (0x14c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F
Validity
Not Before: Apr 27 09:29:39 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=915F4012697E72C03FFC2AAAA67602302008BB2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2f:ba:f8:e2:46:b3:32:1f:10:16:ad:0a:69:
f3:9a:f8:80:91:64:08:43:9a:6b:69:4a:48:e6:64:
92:f5:86:76:ed:ae:72:08:93:de:de:a2:ba:57:19:
71:9c:8d:d7:c2:a3:bf:99:68:34:49:81:5c:f0:3d:
08:f7:25:80:bc:40:10:52:ee:df:e4:98:32:53:f2:
f4:2d:2f:b8:e7:d0:7c:df:c0:2d:aa:c4:6d:79:ce:
37:06:68:58:cf:65:07:35:d5:d2:42:4e:00:fc:d9:
bf:4e:03:ff:9e:7e:a3:e1:0c:bd:f7:22:4a:39:6d:
d6:e7:20:0a:35:a7:8e:8b:1e:e9:d0:07:59:20:44:
a1:91:ba:b3:8a:c8:9e:1a:eb:04:e8:72:cb:d5:e6:
ae:ab:cb:d4:72:b1:47:d2:58:17:00:67:bc:2e:d7:
02:74:5d:bf:1c:d5:42:c4:8e:4b:f6:a5:ee:b1:d4:
9d:67:68:0e:4b:e3:86:00:ec:1b:4c:be:e5:cf:78:
2e:53:a6:3b:1d:52:91:86:45:1d:27:99:0e:a9:60:
fb:2d:7f:e7:20:21:a5:21:23:ab:9f:cd:1e:61:b6:
0b:cb:33:8c:cd:ca:09:07:2b:4d:95:30:c2:55:82:
71:73:97:d5:de:df:e8:3d:bd:84:de:cb:c1:a1:c9:
0f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5F:40:12:69:7E:72:C0:3F:FC:2A:AA:A6:76:02:30:20:08:BB:2D
X509v3 Authority Key Identifier:
keyid:75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/kV9AEml-csA__CqqpnYCMCAIuy0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.254.26.0/24
Signature Algorithm: sha256WithRSAEncryption
91:cf:9c:64:6d:3e:31:8d:cd:24:48:93:b3:44:1d:3c:ed:b8:
2a:3e:5c:48:58:27:14:ce:8f:21:5c:db:4e:3f:a9:7f:41:65:
d1:1b:7e:cf:dd:7c:6c:01:72:4f:c6:d9:71:fb:c8:12:07:6c:
88:48:d5:98:8d:0d:f4:b9:e0:05:62:46:c8:e8:95:90:4e:44:
01:cf:85:41:37:f9:2b:87:89:bd:67:d1:1a:b3:9d:8c:17:c9:
fd:4d:3b:d9:e2:43:c4:9f:21:48:76:0e:22:86:6d:f3:49:be:
aa:b6:df:51:65:5e:e5:aa:7c:c3:bd:b2:17:3f:aa:76:67:7e:
ae:1b:48:b6:32:95:6b:28:be:78:81:ee:8b:25:66:04:8a:8d:
18:23:85:69:4b:be:24:07:64:78:71:9e:48:b7:eb:f0:a2:1a:
c0:19:4c:28:d0:5f:df:17:79:c5:40:c0:99:4e:f6:c7:bd:f7:
98:6d:90:09:ef:88:94:2d:72:c8:34:7c:f8:e7:6a:c6:0b:d7:
3e:a8:8f:e3:e6:3b:b7:87:51:a6:7d:c1:5b:a7:9f:4e:68:2a:
68:49:18:5a:31:3f:b3:b5:d4:52:91:b6:07:e9:66:89:42:02:
33:72:a0:fb:92:f3:22:99:4f:54:a6:a5:ab:f0:e4:5b:0e:69:
f1:df:9d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:08:32 2025 by rpki-client on console.sobornost.net