Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1211/fuCadLFqpfc3ZhXliUOUoU20c4U.roa
File: fuCadLFqpfc3ZhXliUOUoU20c4U.roa (raw, json)
Hash identifier: bd5RsltFHI16gpSOYLb77UBXTQcc8EW+TNLYgzhCmTo=
Subject key identifier: 7E:E0:9A:74:B1:6A:A5:F7:37:66:15:E5:89:43:94:A1:4D:B4:73:85
Certificate issuer: /CN=183D882201945BE13993B4C6DAC954F8EE426C97
Certificate serial: 1021
Authority key identifier: 18:3D:88:22:01:94:5B:E1:39:93:B4:C6:DA:C9:54:F8:EE:42:6C:97
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GD2IIgGUW-E5k7TG2slU-O5CbJc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/fuCadLFqpfc3ZhXliUOUoU20c4U.roa
Signing time: Mon 24 Feb 2025 05:03:02 +0000
ROA not before: Mon 24 Feb 2025 05:03:02 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 63701
IP address blocks: 103.88.96.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4129 (0x1021)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=183D882201945BE13993B4C6DAC954F8EE426C97
Validity
Not Before: Feb 24 05:03:02 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=7EE09A74B16AA5F7376615E5894394A14DB47385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:80:cf:7a:20:ea:90:f5:de:6e:06:83:ea:3d:
a7:70:07:86:54:f4:ab:5c:25:6f:a9:7f:65:0d:50:
dd:3f:9f:a0:3b:93:fc:d5:d9:c4:0f:1c:20:6b:b1:
27:25:bd:61:75:2d:d5:7f:31:da:cb:3e:79:f4:8b:
a8:1d:67:dd:cb:4c:61:85:e5:d8:7f:73:8c:87:cc:
83:6e:32:11:d3:d0:3c:ab:45:09:5a:cb:4c:18:10:
24:10:fa:d8:c7:16:60:2d:e6:68:77:e7:a4:1a:ed:
81:9e:64:b9:5e:b1:44:dc:7e:e8:bb:9f:f8:3b:89:
39:63:6e:75:7e:eb:d1:af:1d:80:02:83:1f:31:10:
9e:ad:df:27:cd:3a:61:0c:d3:ff:40:9e:ea:d2:b5:
84:9d:a8:0e:b6:d1:d6:72:89:4e:37:e0:25:42:a0:
bc:15:b9:0f:8f:dc:09:aa:05:fe:e4:29:35:4c:71:
ef:4c:07:b2:db:73:b6:f7:30:57:6e:82:f2:d4:c2:
cc:e9:0a:74:d6:35:d5:2f:78:be:3d:ab:d9:cb:d3:
e5:29:c0:f4:d4:c7:3f:1a:69:d2:51:f5:5b:c6:85:
fd:f0:9e:28:55:e3:83:ca:59:bb:18:a8:c4:cc:fb:
8b:14:a9:79:42:f7:83:32:b2:6a:5e:3f:a1:3c:14:
84:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E0:9A:74:B1:6A:A5:F7:37:66:15:E5:89:43:94:A1:4D:B4:73:85
X509v3 Authority Key Identifier:
keyid:18:3D:88:22:01:94:5B:E1:39:93:B4:C6:DA:C9:54:F8:EE:42:6C:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/GD2IIgGUW-E5k7TG2slU-O5CbJc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GD2IIgGUW-E5k7TG2slU-O5CbJc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/fuCadLFqpfc3ZhXliUOUoU20c4U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.88.96.0/22
Signature Algorithm: sha256WithRSAEncryption
70:cd:83:76:43:6b:c3:53:4d:eb:b0:cd:af:96:e2:01:b2:e5:
fb:db:b1:c6:96:a7:1d:52:17:13:93:36:8e:82:a8:3f:79:89:
13:cf:2c:fc:45:c4:ff:29:b0:d6:e2:4c:71:0f:5c:89:42:c0:
a4:32:ef:a1:26:3d:3a:e8:8a:d8:fa:e1:1b:df:e2:4e:29:9c:
fb:78:53:c6:e2:a1:e3:2d:bb:24:84:30:a9:65:73:63:21:a7:
07:2c:ba:93:c1:0f:87:ac:f2:75:b8:21:bb:e6:9a:d2:6d:4a:
1c:29:ee:6a:b4:10:dc:ab:71:6c:4b:93:14:8e:5f:9d:15:d2:
55:bf:57:74:0b:47:94:19:87:90:8b:f1:af:fe:0a:ef:c3:a3:
54:74:6b:3f:5c:b6:9c:29:00:8f:ab:ec:59:ce:01:9f:d6:31:
5f:56:a8:d0:10:ed:05:8f:d3:be:93:d7:05:8a:51:c9:67:09:
a9:df:19:d6:ba:8b:5c:4e:6b:54:42:e8:a6:65:70:c0:12:e2:
97:eb:69:5a:25:a2:e3:fc:df:1d:10:6c:4e:b4:e9:aa:cc:77:
9c:d8:a5:b4:23:eb:10:46:88:69:fe:65:57:dd:6e:bf:54:9c:
ce:a5:24:cd:c2:ff:e4:5f:ed:1f:a5:77:57:e1:42:a0:a9:12:
51:0a:c4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:00:55 2025 by rpki-client