Route Origin Authorization
$ rpki-client -vvf rpki.cernet.edu.cn/repo/cernet/1/3130332e3136352e3131312e302f32342d3234203d3e2034353338.roa
File: 3130332e3136352e3131312e302f32342d3234203d3e2034353338.roa (raw, json)
Hash identifier: PNHsRydJIcZcSuQ0M2TmRWfZvicOhf+CKjeYcEuSD58=
Subject key identifier: 88:35:82:A4:D6:8A:8E:07:5C:02:63:A6:96:D1:C8:7A:BD:96:52:F6
Certificate issuer: /CN=A91E5D610000/serialNumber=D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139
Certificate serial: 60B363F7BD20D1479D59A7878C362FDA590F5BDF
Authority key identifier: D1:24:86:07:B0:DD:D0:A2:16:E8:D7:FA:C5:E2:C2:E7:77:0A:11:39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0SSGB7Dd0KIW6Nf6xeLC53cKETk.cer
Subject info access: rsync://rpki.cernet.edu.cn/repo/cernet/1/3130332e3136352e3131312e302f32342d3234203d3e2034353338.roa
Signing time: Tue 28 May 2024 09:14:25 +0000
ROA not before: Tue 28 May 2024 09:09:25 +0000
ROA not after: Tue 27 May 2025 09:14:25 +0000
asID: 4538
IP address blocks: 103.165.111.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:b3:63:f7:bd:20:d1:47:9d:59:a7:87:8c:36:2f:da:59:0f:5b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610000/serialNumber=D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139
Validity
Not Before: May 28 09:09:25 2024 GMT
Not After : May 27 09:14:25 2025 GMT
Subject: CN=883582A4D68A8E075C0263A696D1C87ABD9652F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:57:fd:d8:fc:48:68:0a:e0:95:29:17:39:e9:
35:f2:e2:fa:d2:14:73:5b:8a:ab:96:77:98:1a:de:
15:ec:96:fe:82:c7:0b:61:c2:cb:56:87:c1:23:d4:
fe:a4:9e:ee:61:bd:49:4f:b2:38:46:d3:45:0a:b7:
af:d8:a1:07:1d:24:e5:04:52:ab:b3:e7:3d:67:43:
d7:e6:14:a7:1c:c0:a2:32:95:a5:f4:0a:25:36:a1:
34:f0:af:c4:83:a0:13:5c:79:c0:91:23:dc:98:6a:
22:86:62:99:e1:ad:40:52:1d:cc:75:e7:6d:4f:e6:
d3:63:2a:4c:66:3d:c9:7f:71:6d:4e:f9:d2:02:c1:
89:19:3b:b8:49:42:af:2d:ea:79:8f:68:a6:57:14:
73:8a:5b:c0:d3:f6:21:85:95:26:50:19:b3:db:53:
40:c2:60:09:8b:41:74:24:e5:e7:91:11:6a:a4:83:
d1:49:92:c0:27:ee:13:03:95:d7:a3:83:1b:9b:84:
0f:b1:e9:41:1a:9f:07:d7:06:8a:37:94:d9:c4:00:
d4:94:5e:9a:60:8b:ba:b1:8a:47:35:b1:de:dd:f0:
60:34:06:40:e4:0b:1b:e3:bf:19:2c:50:44:dc:51:
f0:0b:f0:f3:d0:5c:2c:58:34:48:1a:41:64:01:ca:
db:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:35:82:A4:D6:8A:8E:07:5C:02:63:A6:96:D1:C8:7A:BD:96:52:F6
X509v3 Authority Key Identifier:
keyid:D1:24:86:07:B0:DD:D0:A2:16:E8:D7:FA:C5:E2:C2:E7:77:0A:11:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cernet.edu.cn/repo/cernet/1/D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0SSGB7Dd0KIW6Nf6xeLC53cKETk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.cernet.edu.cn/repo/cernet/1/3130332e3136352e3131312e302f32342d3234203d3e2034353338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.165.111.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:11:50:83:ab:97:ae:53:e3:19:5a:fe:e2:89:80:5e:20:77:
49:bd:d3:46:c7:6c:ce:f5:49:03:2e:f0:5e:f3:e4:53:78:2c:
eb:8f:71:f0:d5:92:9d:0b:f7:84:45:8e:51:26:54:53:a3:8b:
31:cd:24:11:23:59:82:91:9b:0d:ac:fb:69:1d:28:32:b4:d1:
83:66:2b:e5:1b:b1:a1:b9:27:29:cb:86:e2:7e:54:64:f3:1f:
80:ab:02:af:f8:9a:31:1e:ad:8b:19:9a:dc:57:11:7f:1e:d0:
b0:08:dc:db:d2:27:a6:75:88:cc:0d:0a:b5:73:6d:1b:13:4b:
63:5d:7e:0e:d1:f8:ce:f1:ac:ec:68:e1:4e:da:2f:92:dd:ce:
da:37:8c:f4:28:7b:38:2e:f8:9f:f9:30:98:16:56:58:ec:10:
89:c9:74:86:db:31:46:7e:29:5a:cb:70:ce:8c:de:f3:1c:57:
b3:f7:61:5e:11:6e:70:ec:0e:6a:7c:33:e4:d6:bf:fc:76:94:
6f:ae:47:1e:a8:20:59:76:05:c6:b2:00:fb:65:46:3e:79:01:
a1:6d:37:d4:fb:db:ee:7d:df:e2:79:53:04:5f:a9:70:23:0a:
e2:b4:ed:83:e7:53:fe:76:63:e4:cc:0a:78:b5:39:8f:df:1d:
93:1d:f3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 12:26:54 2024 by rpki-client on console-ams.rpki-client.org