Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1534/2Z6bSW3BNGWmlr4TZQEn8qhJimc.roa
File: 2Z6bSW3BNGWmlr4TZQEn8qhJimc.roa (raw, json)
Hash identifier: BcxpJNuPELdbLFPXX9ukqtyK+HPlQUdaLVAUtq6K/pI=
Subject key identifier: D9:9E:9B:49:6D:C1:34:65:A6:96:BE:13:65:01:27:F2:A8:49:8A:67
Certificate issuer: /CN=78F1EEC94794DA5530B552AFC84232040D5A5455
Certificate serial: 079E
Authority key identifier: 78:F1:EE:C9:47:94:DA:55:30:B5:52:AF:C8:42:32:04:0D:5A:54:55
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ePHuyUeU2lUwtVKvyEIyBA1aVFU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/2Z6bSW3BNGWmlr4TZQEn8qhJimc.roa
Signing time: Mon 23 Aug 2021 09:24:09 +0000
ROA not before: Mon 23 Aug 2021 09:24:09 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 59067
IP address blocks: 103.36.96.0/22 maxlen: 22
103.202.116.0/22 maxlen: 22
103.255.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1950 (0x79e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78F1EEC94794DA5530B552AFC84232040D5A5455
Validity
Not Before: Aug 23 09:24:09 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=D99E9B496DC13465A696BE13650127F2A8498A67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:26:4b:22:9b:a5:6f:77:e8:05:a3:6b:1d:ed:
ef:a5:f7:10:e1:d7:d1:34:03:b6:04:13:c1:01:a1:
85:95:86:47:3b:bf:54:e2:b2:0d:bc:8f:a2:de:65:
29:37:bf:48:88:ee:5a:a4:92:33:2e:ab:e9:29:67:
8d:de:be:99:71:ff:dc:e6:3f:cc:25:9c:a6:5b:8d:
31:ab:bf:a9:81:03:fe:10:77:90:ee:53:52:dc:f2:
b0:20:bc:4d:04:29:eb:dd:7e:01:c0:20:de:de:52:
f8:2e:29:fb:96:90:e2:a6:88:d9:da:1e:0c:af:00:
ea:e8:8a:36:8c:f0:99:1d:aa:4f:3f:16:71:6e:e7:
2f:84:45:ba:bd:cb:62:4c:33:9a:36:73:89:5d:bb:
ee:c8:0b:ab:af:e8:ae:88:8e:71:57:30:b0:bf:29:
4b:94:3f:ee:ae:15:0f:0c:fc:5a:c4:51:94:2d:f4:
a8:eb:43:72:c7:ec:57:69:0f:49:6d:71:40:74:18:
3b:40:e3:91:88:85:a1:ee:99:77:46:5c:25:6a:df:
a8:6c:8c:c6:e7:72:74:43:86:3a:e3:7d:b5:15:6f:
2c:3f:9c:ef:97:90:d0:5c:bf:e8:d4:05:24:88:ea:
9d:cd:ac:82:86:35:ec:67:80:a0:9b:00:df:90:b6:
7f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9E:9B:49:6D:C1:34:65:A6:96:BE:13:65:01:27:F2:A8:49:8A:67
X509v3 Authority Key Identifier:
keyid:78:F1:EE:C9:47:94:DA:55:30:B5:52:AF:C8:42:32:04:0D:5A:54:55
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/ePHuyUeU2lUwtVKvyEIyBA1aVFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ePHuyUeU2lUwtVKvyEIyBA1aVFU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/2Z6bSW3BNGWmlr4TZQEn8qhJimc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.36.96.0/22
103.202.116.0/22
103.255.140.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:22:d2:b2:eb:e5:27:4c:04:8b:d5:46:84:93:36:ee:f7:77:
e6:c8:05:a4:77:ed:1e:09:84:fd:c8:1e:d7:98:07:83:cf:42:
72:79:e1:09:08:d3:26:68:1f:68:13:8a:71:0a:0e:51:60:72:
ea:a5:62:2f:57:dd:0f:b2:49:6b:3a:aa:7e:94:ed:24:60:c2:
b9:99:c9:c7:bf:6b:2c:70:0b:5a:9d:47:c0:ed:ae:f3:f4:7c:
cd:b7:63:8d:dd:3d:07:4e:79:77:78:eb:1d:27:0c:a6:46:0c:
9b:e7:5d:1c:00:65:9a:ea:b3:ab:0a:f3:2b:56:73:ba:53:54:
da:42:6b:da:e4:9a:3d:d8:d6:46:29:19:d9:08:cf:8a:40:be:
0b:78:89:a0:69:d4:d5:81:bd:3f:86:ac:5a:b3:a6:0d:06:1a:
1b:2f:72:78:1f:0b:ea:f5:2f:1f:44:cf:9e:f6:39:11:af:11:
53:ef:6e:d5:7c:0c:c5:dc:fc:5b:34:99:8b:57:f0:ae:19:0d:
93:7f:f6:bb:a9:fe:a5:99:03:23:62:ff:cb:f1:45:28:3c:f8:
26:04:38:54:db:91:82:8d:26:fa:c2:5a:05:f5:4a:e9:e3:72:
7a:c9:0d:72:d2:98:a5:2c:10:eb:26:86:73:2d:42:69:24:35:
84:13:96:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:53:42 2025 by rpki-client