Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/AgJxZK9n-LdTAjTQ79jDrU5XhLE.roa
File: AgJxZK9n-LdTAjTQ79jDrU5XhLE.roa (raw, json)
Hash identifier: Kl4ON26En4eQQWoPY5fQ8/eUXeZ0rB7LwCLX4iDWg+4=
Subject key identifier: 02:02:71:64:AF:67:F8:B7:53:02:34:D0:EF:D8:C3:AD:4E:57:84:B1
Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Certificate serial: 201A
Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/AgJxZK9n-LdTAjTQ79jDrU5XhLE.roa
Signing time: Fri 17 Jan 2025 01:24:06 +0000
ROA not before: Fri 17 Jan 2025 01:24:06 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139648
IP address blocks: 103.244.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8218 (0x201a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Validity
Not Before: Jan 17 01:24:06 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=02027164AF67F8B7530234D0EFD8C3AD4E5784B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8f:d7:60:61:c3:44:d7:a6:fa:83:5c:87:b2:
ef:ea:df:86:7c:2b:72:e8:60:34:db:3f:ed:2c:b5:
26:a5:65:ac:e5:c5:86:78:e5:6f:59:49:15:bb:f4:
f0:72:eb:8e:87:82:96:02:a9:59:59:5f:d1:d2:1f:
d6:3c:25:97:be:8d:2b:be:f5:e2:7c:84:dd:87:b0:
69:45:41:57:a0:1c:d4:83:c0:18:28:28:5c:08:a0:
40:5a:ca:17:6f:2e:2b:ef:4e:25:26:32:94:87:e6:
44:e9:89:4f:22:de:00:8e:80:e3:6e:79:5d:d2:22:
91:19:e5:f1:c0:6d:14:b3:c3:94:0a:65:4f:b7:48:
2a:be:a9:ae:4b:30:aa:06:05:cf:4f:46:fa:0f:57:
0b:b8:a0:dd:8b:63:6b:28:fc:43:d2:59:8f:d0:73:
18:9c:6f:b5:58:e3:35:27:f7:db:93:c0:2f:82:70:
d8:c7:34:a2:5a:2f:a4:b1:78:61:be:c5:a2:9d:2e:
8b:ea:cc:04:69:a2:0f:eb:aa:0e:b7:37:ed:56:5b:
b6:10:cb:8f:38:fb:e4:ad:de:dd:ef:46:50:0a:01:
1f:62:36:20:fa:60:99:a9:73:fa:06:5b:3d:68:8d:
9c:63:f3:96:9e:46:ba:2d:61:7b:44:9c:21:81:b9:
79:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:02:71:64:AF:67:F8:B7:53:02:34:D0:EF:D8:C3:AD:4E:57:84:B1
X509v3 Authority Key Identifier:
keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/AgJxZK9n-LdTAjTQ79jDrU5XhLE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.244.116.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:19:5c:34:5a:2c:09:95:91:5c:67:03:c8:73:eb:26:45:a6:
4d:d3:3a:14:da:52:06:35:bf:3f:83:12:9c:65:13:b9:9e:4a:
87:67:fb:14:da:26:65:9d:d7:4b:3f:66:02:67:f6:14:98:1e:
9e:36:81:85:8a:85:14:a8:0a:5a:fa:06:e2:92:8d:2d:2c:ae:
76:9e:92:43:36:ae:95:75:8c:f8:8d:f6:d6:89:2f:ce:e2:79:
3a:0c:7a:cf:a2:30:41:f2:4e:b6:4b:86:85:6f:df:09:ae:ac:
ca:6b:89:93:fc:f7:c6:fa:8f:99:c5:38:0c:db:39:4b:02:fe:
13:e6:bb:59:ed:b1:b7:0a:03:4e:67:36:43:4a:a3:9c:d9:1f:
c9:e2:58:a3:5a:48:e2:34:07:c8:1e:92:b8:30:1f:48:dc:f3:
8e:a3:15:a4:9d:f8:21:4f:8f:a0:f7:2e:b2:aa:96:d9:79:5d:
aa:e3:87:a5:33:a6:72:9e:43:ec:62:65:7e:f1:3c:cf:28:96:
58:26:6a:d3:84:90:28:86:69:64:59:c7:e1:5a:55:fe:4a:b3:
4d:ce:0e:fe:f8:c5:d8:a0:d4:71:05:d4:fa:7b:17:56:b3:f7:
2e:b0:72:c0:20:09:03:11:2b:51:9a:65:ef:2c:bc:0f:eb:2d:
9d:e2:8e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:37:09 2025 by rpki-client