Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1228/wd0ZEZbfswlkQA_nX1iBMwf4B0I.roa
File: wd0ZEZbfswlkQA_nX1iBMwf4B0I.roa (raw, json)
Hash identifier: YVSes9Ldo3RpHIdBMa6k3HHI1larS4SN0KINEUzprP0=
Subject key identifier: C1:DD:19:11:96:DF:B3:09:64:40:0F:E7:5F:58:81:33:07:F8:07:42
Certificate issuer: /CN=ADD2726DD6FF9F5A459AE5B0A9EE8E7DDFC7F07C
Certificate serial: B7
Authority key identifier: AD:D2:72:6D:D6:FF:9F:5A:45:9A:E5:B0:A9:EE:8E:7D:DF:C7:F0:7C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/wd0ZEZbfswlkQA_nX1iBMwf4B0I.roa
Signing time: Mon 16 Jun 2025 12:18:42 +0000
ROA not before: Mon 16 Jun 2025 12:18:42 +0000
ROA not after: Sat 16 May 2026 10:06:17 +0000
asID: 62468
IP address blocks: 103.8.223.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183 (0xb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADD2726DD6FF9F5A459AE5B0A9EE8E7DDFC7F07C
Validity
Not Before: Jun 16 12:18:42 2025 GMT
Not After : May 16 10:06:17 2026 GMT
Subject: CN=C1DD191196DFB30964400FE75F58813307F80742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3f:37:69:d1:37:9f:ae:b3:c4:3f:de:28:0c:
22:db:5a:9b:e2:7f:24:c8:61:0c:d1:fd:be:f8:c5:
6e:d0:1b:d1:21:b7:48:c3:25:80:52:30:ed:94:42:
ff:81:a6:af:fc:5a:c9:13:79:33:8c:57:d4:bf:7a:
db:4d:37:87:b8:08:d7:6c:bc:2d:e5:d9:d5:41:2b:
28:1c:31:ac:e6:d1:2c:32:6f:0f:13:72:70:e7:94:
56:e4:16:ae:6f:5a:14:cb:f0:6d:71:05:9c:ce:7d:
85:f1:34:18:ef:4a:f3:a4:ea:49:c6:a0:5f:2b:07:
5e:ab:55:f1:60:2a:32:80:b7:50:b7:a9:3c:1b:a7:
0e:9b:b8:61:36:47:0e:5c:77:a8:9e:d4:52:f4:43:
a1:bd:c1:e4:fe:3e:d1:e5:89:4d:71:99:a8:51:85:
39:11:76:5a:b8:11:5d:4b:86:a0:cd:e6:9a:9e:f8:
4b:3a:ca:5d:e6:5d:cc:7a:98:d8:a3:4f:7f:fa:d2:
53:fa:54:04:db:38:56:76:ee:90:61:f3:04:5e:3d:
c6:b9:f2:a8:e4:cd:14:b2:e0:63:3d:c4:d3:dd:ee:
56:48:3f:3e:b0:4d:0b:65:72:5f:84:3a:f0:aa:3c:
2b:9a:3c:2b:c2:46:5b:4c:d6:56:d7:ce:b4:8b:51:
0f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DD:19:11:96:DF:B3:09:64:40:0F:E7:5F:58:81:33:07:F8:07:42
X509v3 Authority Key Identifier:
keyid:AD:D2:72:6D:D6:FF:9F:5A:45:9A:E5:B0:A9:EE:8E:7D:DF:C7:F0:7C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rdJybdb_n1pFmuWwqe6Ofd_H8Hw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1228/wd0ZEZbfswlkQA_nX1iBMwf4B0I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.8.223.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:3f:36:87:41:6a:cf:12:a1:8b:90:68:79:27:af:f7:34:8a:
d0:13:5b:89:cb:18:ab:0a:40:c5:7b:1b:5b:f6:fe:b5:f1:c9:
a8:f4:15:7d:4f:8a:33:25:ba:87:ec:0c:06:36:23:9e:6d:fc:
5e:e8:61:be:a1:28:4a:78:f4:7d:d9:aa:ac:3e:17:59:07:98:
f9:b1:7d:56:67:27:04:b8:6a:6f:6a:48:6b:19:70:68:a5:6f:
82:1b:0a:ff:1c:ce:22:39:b6:31:ea:51:1b:94:a3:1e:1b:28:
99:de:10:c2:fe:7a:e4:e4:37:80:e7:c6:89:e7:60:d7:c6:59:
9b:0d:7f:f0:45:4f:78:66:e8:92:1c:31:1e:4e:57:5a:0b:43:
67:ec:dd:e7:72:4e:70:66:1a:4e:15:87:e0:16:f4:08:e7:20:
f3:59:1f:1b:4c:53:a4:af:71:d8:a5:54:57:a0:6d:d2:1e:61:
7b:09:25:91:9f:e3:d6:e0:57:31:af:f3:12:29:1b:db:ac:99:
12:ce:07:f1:8c:0a:16:b3:3c:f1:d2:1e:91:2b:56:07:fe:5d:
51:af:3b:b4:cb:38:1e:41:b2:6f:bc:91:33:24:75:19:c8:29:
9c:b6:af:26:1f:e7:2d:cb:4d:cd:37:f4:d4:82:39:90:0d:94:
45:6b:14:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:05:07 2025 by rpki-client