Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/bPE-iHuHEq8x2lqieZzrDOd3Fpk.roa
File: bPE-iHuHEq8x2lqieZzrDOd3Fpk.roa (raw, json)
Hash identifier: RNoZz5ZbhwwXKrVtRy2IjcnWKsa4adec5z2pFz8Gdyg=
Subject key identifier: 6C:F1:3E:88:7B:87:12:AF:31:DA:5A:A2:79:9C:EB:0C:E7:77:16:99
Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Certificate serial: 202D
Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/bPE-iHuHEq8x2lqieZzrDOd3Fpk.roa
Signing time: Fri 17 Jan 2025 01:24:12 +0000
ROA not before: Fri 17 Jan 2025 01:24:12 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 212237
IP address blocks: 103.31.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8237 (0x202d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Validity
Not Before: Jan 17 01:24:12 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=6CF13E887B8712AF31DA5AA2799CEB0CE7771699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b6:8a:91:85:a0:b1:73:4d:ed:23:c4:5f:23:
ed:49:cc:07:89:37:d8:0f:d1:96:c9:5a:ce:e7:04:
b0:df:f8:98:c2:e1:cd:e9:ee:43:10:fa:5a:51:09:
97:5a:45:92:5d:72:15:1a:c1:21:be:89:45:b5:3f:
81:77:d5:57:d6:0c:a6:73:fe:f7:21:13:11:38:78:
9d:52:71:e9:75:47:c2:15:c1:cf:4f:75:60:25:0f:
73:1d:dc:08:30:34:ec:a5:fb:85:54:05:2b:09:ea:
1d:ac:ff:72:98:69:63:ee:40:b9:53:fc:a8:77:18:
f4:3e:2b:d3:43:7b:d5:ff:b7:f0:8a:76:f2:cd:27:
2a:e3:db:04:e6:0b:07:85:d8:2b:01:48:05:e4:91:
fb:b6:05:47:a5:fd:84:ef:1a:eb:ac:e0:42:0d:bc:
fd:c9:3e:45:3f:5c:e3:40:a8:21:ab:ed:5c:48:3f:
44:fb:fd:f4:6d:be:19:0b:5d:55:7d:9c:e7:d2:ef:
cf:7c:20:cc:6e:be:31:6d:3f:38:df:19:55:b0:8a:
35:a2:63:5e:1b:09:80:66:a9:87:72:05:d0:32:a6:
5e:95:5b:d2:5c:67:14:88:0f:84:ee:21:67:9e:dc:
3d:b3:44:0e:10:a6:34:3a:14:dc:d5:a3:5a:39:a3:
70:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F1:3E:88:7B:87:12:AF:31:DA:5A:A2:79:9C:EB:0C:E7:77:16:99
X509v3 Authority Key Identifier:
keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/bPE-iHuHEq8x2lqieZzrDOd3Fpk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.31.237.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:01:fc:56:c4:3c:c4:72:98:ef:1a:c5:3c:16:96:ca:67:be:
ef:a3:a9:cf:c9:6e:26:b7:d2:36:11:bc:73:9d:ff:da:d0:8c:
8d:5f:8c:7b:3d:84:8a:60:a0:11:28:63:ff:90:25:d1:2a:44:
45:06:ff:0d:ba:7a:b6:1f:6e:ca:e3:48:fa:3f:8e:c3:4f:31:
df:6d:ef:f7:b2:74:02:e0:5f:c7:8e:ba:f5:00:a1:05:84:6e:
c2:d1:08:8c:11:61:04:af:d6:11:4b:d8:37:6a:89:54:19:11:
fb:83:56:5b:35:8e:b6:4b:d0:22:18:6e:84:6d:da:9b:3c:31:
f7:ea:2b:d6:0a:42:15:e7:3b:8a:da:28:be:a4:a7:af:f3:26:
e4:41:c5:52:bf:00:5d:35:b0:b7:55:96:31:c1:0e:48:e6:86:
fb:a5:2a:2f:d3:97:7a:fb:0b:42:51:c7:0a:79:72:90:d5:09:
02:a3:75:f5:0e:f0:18:1f:5a:d6:43:de:bd:de:99:70:2e:a4:
dc:a2:54:bb:39:53:a9:6b:de:16:27:7b:8d:ca:db:06:40:f1:
fe:97:f6:1b:76:4c:5e:e4:39:93:01:c2:84:e2:8c:df:74:4d:
38:d6:db:e6:da:82:53:a3:03:7d:4c:ab:67:75:93:8a:c8:7b:
ff:e3:c6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:46 2025 by rpki-client