Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/FvqKxWxVCAfdU9eDhdI8-jyDG1o.roa
File: FvqKxWxVCAfdU9eDhdI8-jyDG1o.roa (raw, json)
Hash identifier: b1dwBNxSeyagBJnjfusORa6Ujn0h9iGRZ+f5L/n3uL4=
Subject key identifier: 16:FA:8A:C5:6C:55:08:07:DD:53:D7:83:85:D2:3C:FA:3C:83:1B:5A
Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Certificate serial: 201F
Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/FvqKxWxVCAfdU9eDhdI8-jyDG1o.roa
Signing time: Fri 17 Jan 2025 01:24:08 +0000
ROA not before: Fri 17 Jan 2025 01:24:08 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 61317
IP address blocks: 103.244.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8223 (0x201f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Validity
Not Before: Jan 17 01:24:08 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=16FA8AC56C550807DD53D78385D23CFA3C831B5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a6:92:d2:99:29:49:60:4e:8a:21:0f:a0:e7:
a4:92:aa:d8:97:a0:9e:f7:ae:0f:56:6c:eb:45:c0:
7d:2d:f4:b6:ca:ea:73:67:23:c5:11:e9:26:c3:ef:
39:1e:cd:c8:bd:41:2b:ff:99:e1:48:51:ef:7f:41:
84:f1:85:d4:a3:24:5d:3e:c7:fb:ba:21:49:9c:43:
6f:3f:e3:41:d8:11:bd:43:17:94:61:49:03:07:fe:
aa:c7:2a:90:98:f2:bd:6f:16:1a:67:91:ee:df:b1:
93:f7:d7:77:60:e1:bc:ed:8a:51:e2:4d:63:7a:d9:
4e:bd:b4:ec:a9:1e:3d:15:af:1e:1a:1a:9d:21:40:
ee:7a:ad:3f:04:63:1c:d1:82:29:c4:c8:57:a1:cc:
3d:bb:26:b0:f4:53:21:c8:30:63:96:22:d9:30:0b:
0b:5d:1e:8e:b4:67:c3:9b:e6:83:78:03:50:24:61:
52:23:37:1c:2e:21:66:17:eb:df:58:7b:f6:bf:30:
43:de:ea:a1:ff:6e:fc:10:41:5e:95:da:5a:00:b3:
d1:d4:b4:5e:d7:ea:cf:d4:c4:56:61:6d:15:79:da:
70:87:40:4f:11:fe:9b:d7:ee:2b:e4:bf:77:9e:3a:
92:f1:94:82:6d:1a:61:60:44:8c:a7:57:f9:98:28:
09:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FA:8A:C5:6C:55:08:07:DD:53:D7:83:85:D2:3C:FA:3C:83:1B:5A
X509v3 Authority Key Identifier:
keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/FvqKxWxVCAfdU9eDhdI8-jyDG1o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.244.116.0/22
Signature Algorithm: sha256WithRSAEncryption
46:98:0d:c4:de:37:83:b0:14:a0:aa:aa:b0:8e:b5:e7:7b:39:
5c:81:19:97:59:3a:1c:ad:ec:4b:f7:8c:85:71:c6:89:fd:3d:
a5:55:5e:fc:12:d8:b9:26:7c:52:6f:dd:a3:1b:90:f0:fc:e6:
b0:4c:d6:1b:07:2a:f6:b4:88:e6:56:48:b7:47:c7:95:d0:f5:
85:d8:a0:90:21:d7:49:bd:e8:61:09:0c:71:b5:91:c8:e0:0e:
34:12:d1:e4:7e:4f:09:2f:a8:d1:ee:71:65:3e:a2:87:20:45:
9d:a9:62:3d:48:74:9a:c7:6f:95:d0:4f:a3:a8:0f:c7:fb:b5:
19:f3:60:7c:44:96:b2:89:c8:ef:40:6a:0e:d7:a0:a2:be:14:
2c:8f:d7:c0:45:0e:e0:48:e4:48:ad:36:2d:65:cd:26:7b:31:
ca:36:4b:fe:d0:d3:80:da:17:6a:25:92:3a:43:8c:ed:02:83:
f7:d4:f4:7e:1a:d0:b7:b5:f4:87:60:e9:95:32:a2:c3:9c:22:
40:93:38:3a:67:d1:72:5f:90:9f:b4:b5:ac:ae:16:0f:2a:f3:
c2:48:08:d3:5c:4f:5f:c3:5e:f6:c3:a1:ff:ac:2d:8f:b3:92:
13:a9:d1:10:ae:62:ca:74:db:77:70:f3:62:02:de:76:81:d9:
47:18:07:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:30 2025 by rpki-client