Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1211/XyzDu2UB-JXsNDygTO-JOGhCgZA.roa
File: XyzDu2UB-JXsNDygTO-JOGhCgZA.roa (raw, json)
Hash identifier: J//OPaEKLNaBZyXOXU8oxd89INt9WsMsH258iUTn/tU=
Subject key identifier: 5F:2C:C3:BB:65:01:F8:95:EC:34:3C:A0:4C:EF:89:38:68:42:81:90
Certificate issuer: /CN=183D882201945BE13993B4C6DAC954F8EE426C97
Certificate serial: 1020
Authority key identifier: 18:3D:88:22:01:94:5B:E1:39:93:B4:C6:DA:C9:54:F8:EE:42:6C:97
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GD2IIgGUW-E5k7TG2slU-O5CbJc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/XyzDu2UB-JXsNDygTO-JOGhCgZA.roa
Signing time: Mon 24 Feb 2025 05:03:02 +0000
ROA not before: Mon 24 Feb 2025 05:03:02 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 63701
IP address blocks: 103.125.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4128 (0x1020)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=183D882201945BE13993B4C6DAC954F8EE426C97
Validity
Not Before: Feb 24 05:03:02 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=5F2CC3BB6501F895EC343CA04CEF893868428190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:76:e6:17:d8:d9:6f:94:1c:ea:19:23:4e:62:
42:7c:53:22:65:0c:a8:ef:ac:67:5e:d6:57:11:34:
a8:6b:d7:bb:f4:3e:d1:f4:94:fa:de:fd:6b:56:05:
8d:72:38:e0:bb:de:86:43:25:36:6a:35:8e:10:15:
29:11:20:c3:0f:bf:f0:24:b2:c9:f5:fc:0d:1e:6c:
b1:03:ba:55:22:f9:cc:a5:6f:ba:ae:22:9e:f8:d3:
22:e3:a3:f5:5f:dd:9e:fe:51:f9:43:37:de:f4:42:
6b:94:cc:37:c0:9a:51:b2:ac:15:cb:26:22:d4:b5:
54:16:0f:1f:3e:57:02:07:54:9d:f3:28:aa:29:74:
b1:7b:3f:0e:27:0a:57:7a:75:a2:c4:56:48:be:41:
fd:4a:3b:f5:d3:de:99:47:4b:61:ab:4a:ab:9c:e7:
c0:30:65:03:ef:42:40:94:4c:6f:e0:dd:5a:37:1c:
12:50:5d:f1:e6:81:9e:b1:39:6a:17:85:c4:5d:9d:
e4:d6:be:07:e1:a2:78:de:ee:32:ef:f0:04:c4:6f:
3c:26:6f:88:27:67:38:aa:d3:96:b7:9d:f2:0d:e3:
c1:fa:9f:d6:fa:9b:e0:33:6c:46:0a:9f:21:30:a2:
9d:32:e7:2a:3b:4e:c1:cf:5c:b8:79:62:55:40:df:
65:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2C:C3:BB:65:01:F8:95:EC:34:3C:A0:4C:EF:89:38:68:42:81:90
X509v3 Authority Key Identifier:
keyid:18:3D:88:22:01:94:5B:E1:39:93:B4:C6:DA:C9:54:F8:EE:42:6C:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/GD2IIgGUW-E5k7TG2slU-O5CbJc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GD2IIgGUW-E5k7TG2slU-O5CbJc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/XyzDu2UB-JXsNDygTO-JOGhCgZA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.125.236.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:64:9e:3f:eb:c9:d5:9e:b5:a0:01:05:4a:25:00:15:4b:6f:
d0:af:4d:eb:ee:38:35:90:5c:79:c3:99:44:d3:a0:53:87:bd:
fd:43:51:8b:80:62:d2:27:64:7f:c3:71:fe:55:bd:e2:05:a3:
89:31:4b:ff:b8:76:4f:f4:1f:fc:df:f7:0b:8c:97:16:cd:4b:
9a:ea:a4:d1:cb:d8:d2:b9:d8:96:7a:fa:93:ca:b2:aa:99:81:
21:b4:cc:a1:93:8a:63:2c:2d:f9:8b:be:26:b4:11:4a:6f:39:
d4:be:cd:d9:e4:89:cf:d2:1e:81:2b:b6:be:47:47:a7:98:ec:
e3:e0:4f:f2:47:d1:98:68:73:0d:74:70:cd:2b:af:24:f4:dc:
48:a9:ee:59:4a:9a:0f:30:6c:d2:51:29:77:81:42:8c:b1:e9:
49:3c:a7:cb:34:c6:e7:01:41:01:1b:da:cc:91:ef:73:a3:29:
40:2a:60:cd:d1:65:d8:cb:17:12:d5:77:13:b9:44:b1:e1:32:
b3:89:27:ba:4d:00:f1:94:c9:4d:32:b3:95:25:09:96:86:ab:
fa:d8:cf:6d:45:fe:9c:b5:14:97:89:08:c2:76:5d:60:d5:d1:
57:82:d8:e3:dd:71:6c:41:df:34:b8:08:c9:f8:10:50:19:2a:
6e:fc:59:00
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICECAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTgz
RDg4MjIwMTk0NUJFMTM5OTNCNEM2REFDOTU0RjhFRTQyNkM5NzAeFw0yNTAyMjQw
NTAzMDJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDVGMkNDM0JCNjUwMUY4
OTVFQzM0M0NBMDRDRUY4OTM4Njg0MjgxOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0duYX2NlvlBzqGSNOYkJ8UyJlDKjvrGde1lcRNKhr17v0PtH0
lPre/WtWBY1yOOC73oZDJTZqNY4QFSkRIMMPv/Akssn1/A0ebLEDulUi+cylb7qu
Ip740yLjo/Vf3Z7+UflDN970QmuUzDfAmlGyrBXLJiLUtVQWDx8+VwIHVJ3zKKop
dLF7Pw4nCld6daLEVki+Qf1KO/XT3plHS2GrSquc58AwZQPvQkCUTG/g3Vo3HBJQ
XfHmgZ6xOWoXhcRdneTWvgfhonje7jLv8ATEbzwmb4gnZziq05a3nfIN48H6n9b6
m+AzbEYKnyEwop0y5yo7TsHPXLh5YlVA32WLAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUXyzDu2UB+JXsNDygTO+JOGhCgZAwHwYDVR0jBBgwFoAUGD2IIgGUW+E5k7TG
2slU+O5CbJcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIx
MS9HRDJJSWdHVVctRTVrN1RHMnNsVS1PNUNiSmMuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0dEMklJZ0dVVy1FNWs3VEcyc2xVLU81Q2JKYy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEyMTEvWHl6RHUyVUItSlhz
TkR5Z1RPLUpPR2hDZ1pBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmd97DANBgkqhkiG9w0BAQsFAAOCAQEAHGSeP+vJ1Z61oAEFSiUAFUtv0K9N
6+44NZBcecOZRNOgU4e9/UNRi4Bi0idkf8Nx/lW94gWjiTFL/7h2T/Qf/N/3C4yX
Fs1Lmuqk0cvY0rnYlnr6k8qyqpmBIbTMoZOKYywt+Yu+JrQRSm851L7N2eSJz9Ie
gSu2vkdHp5js4+BP8kfRmGhzDXRwzSuvJPTcSKnuWUqaDzBs0lEpd4FCjLHpSTyn
yzTG5wFBARvazJHvc6MpQCpgzdFl2MsXEtV3E7lEseEys4knuk0A8ZTJTTKzlSUJ
loar+tjPbUX+nLUUl4kIwnZdYNXRV4LY491xbEHfNLgIyfgQUBkqbvxZAA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:50 2025 by rpki-client