Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/aX4hJDF0bJCSU4ePeWAaXLuAv7I.roa
File: aX4hJDF0bJCSU4ePeWAaXLuAv7I.roa (raw, json)
Hash identifier: 3AmaA6tp7GabNXg0iGIHu2sayNs/VYaHMP9tOjJ2DZg=
Subject key identifier: 69:7E:21:24:31:74:6C:90:92:53:87:8F:79:60:1A:5C:BB:80:BF:B2
Certificate issuer: /CN=2DE14F2AC7F0238137052EAA315C5BD643134022
Certificate serial: 1C5F
Authority key identifier: 2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/aX4hJDF0bJCSU4ePeWAaXLuAv7I.roa
Signing time: Wed 05 Feb 2025 02:41:09 +0000
ROA not before: Wed 05 Feb 2025 02:41:09 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 63689
IP address blocks: 103.204.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7263 (0x1c5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DE14F2AC7F0238137052EAA315C5BD643134022
Validity
Not Before: Feb 5 02:41:09 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=697E212431746C909253878F79601A5CBB80BFB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:5b:0d:99:bf:8e:d5:c3:9a:12:01:70:2b:2b:
f5:8d:46:3f:62:5d:5a:3c:37:a8:29:13:8f:1b:73:
c5:5f:dd:a5:55:1c:c1:5e:6e:2c:67:79:2c:64:de:
5b:75:d9:f2:f5:7f:ca:76:6d:52:da:48:ba:dd:db:
c3:55:0c:d8:34:9e:7d:6d:9d:6a:80:3a:9b:4f:79:
ec:d9:53:7f:d4:79:1b:7f:2c:8e:df:1d:dc:57:a8:
d8:69:2f:a1:72:4e:f5:98:c6:4c:64:a2:96:60:24:
79:98:81:7a:fd:15:96:38:d0:94:9a:9b:76:76:2e:
9b:cd:12:c1:95:4f:2c:5c:a3:aa:2e:f3:2b:6d:e3:
e8:5c:07:b6:0b:7f:d1:2f:f6:06:8a:cb:cf:97:25:
50:be:1a:49:6e:41:77:2f:1e:7f:8c:8a:31:29:8c:
51:f8:08:f4:e0:90:63:d1:46:75:15:cb:d8:1d:26:
c0:7f:53:b7:0f:ff:c1:ca:21:ab:c5:58:3d:4a:87:
bc:0e:ab:5f:e9:fe:b2:2e:74:64:65:8e:3d:22:12:
34:57:19:ce:d7:06:ff:c4:a0:4c:d7:e0:82:42:99:
92:a2:f2:dc:71:fb:76:86:4d:ce:2e:28:39:5f:8e:
b9:ca:cc:c5:78:ae:f2:a8:03:dd:38:3f:9a:97:e5:
68:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7E:21:24:31:74:6C:90:92:53:87:8F:79:60:1A:5C:BB:80:BF:B2
X509v3 Authority Key Identifier:
keyid:2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/LeFPKsfwI4E3BS6qMVxb1kMTQCI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/aX4hJDF0bJCSU4ePeWAaXLuAv7I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.204.72.0/22
Signature Algorithm: sha256WithRSAEncryption
63:98:ac:2d:10:51:9d:c9:75:57:e8:d2:6b:0c:4b:68:b5:07:
bc:a0:a8:4c:2d:ba:6d:aa:1e:c9:35:fd:58:77:65:c1:16:db:
18:07:10:ee:63:6c:d2:65:23:8a:46:51:61:ab:4d:82:e4:43:
a7:ab:1a:a5:1f:4d:82:18:9a:78:d6:f2:58:40:70:17:73:da:
f6:3f:85:7a:e7:05:cc:e9:8a:24:77:5e:5d:b0:ad:95:33:6c:
db:b4:c9:df:21:44:de:ac:4b:ac:b3:92:30:10:67:3c:02:e7:
bf:fc:a9:50:4a:21:21:05:b6:c3:8c:12:5a:4c:a0:58:87:1c:
dd:fd:22:58:32:fb:ed:cb:98:2d:aa:3f:16:6c:d9:3c:99:e3:
31:a3:68:5a:fe:dd:6f:99:44:52:4b:49:f4:15:13:a9:f1:33:
ab:dc:d3:cb:05:64:41:aa:3f:46:a1:69:43:2b:89:97:77:ba:
0e:7d:f9:86:88:e1:26:67:3e:1f:ab:a9:e1:a8:73:ae:02:34:
3e:02:75:1a:fc:77:93:a3:d9:88:36:34:d7:af:90:aa:08:bf:
1f:b1:eb:9b:f3:a5:57:2c:90:9e:e9:65:cd:d2:9e:58:f2:72:
fc:a6:6d:f1:de:26:45:5d:26:f6:ce:31:32:1a:8d:18:8f:69:
e1:ed:84:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:36 2025 by rpki-client