Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/2KxUTv0-K1DcrJO5PtPjKhhmsN4.roa
File: 2KxUTv0-K1DcrJO5PtPjKhhmsN4.roa (raw, json)
Hash identifier: qwstu4jgU8o4M5tWzozf0m2HvWXFdZGbD6w/sxvEqvI=
Subject key identifier: D8:AC:54:4E:FD:3E:2B:50:DC:AC:93:B9:3E:D3:E3:2A:18:66:B0:DE
Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial: 1635
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/2KxUTv0-K1DcrJO5PtPjKhhmsN4.roa
Signing time: Fri 13 Jan 2023 07:26:39 +0000
ROA not before: Fri 13 Jan 2023 07:26:39 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 63612
IP address blocks: 103.45.96.0/19 maxlen: 24
103.45.96.0/24 maxlen: 24
103.45.97.0/24 maxlen: 24
103.45.98.0/24 maxlen: 24
103.45.99.0/24 maxlen: 24
103.45.100.0/24 maxlen: 24
103.45.101.0/24 maxlen: 24
103.45.102.0/24 maxlen: 24
103.45.103.0/24 maxlen: 24
103.45.104.0/24 maxlen: 24
103.45.105.0/24 maxlen: 24
103.45.106.0/24 maxlen: 24
103.45.107.0/24 maxlen: 24
103.45.108.0/24 maxlen: 24
103.45.109.0/24 maxlen: 24
103.45.110.0/24 maxlen: 24
103.45.111.0/24 maxlen: 24
103.45.112.0/24 maxlen: 24
103.45.113.0/24 maxlen: 24
103.45.114.0/24 maxlen: 24
103.45.115.0/24 maxlen: 24
103.45.116.0/24 maxlen: 24
103.45.117.0/24 maxlen: 24
103.45.118.0/24 maxlen: 24
103.45.119.0/24 maxlen: 24
103.45.120.0/24 maxlen: 24
103.45.121.0/24 maxlen: 24
103.45.122.0/24 maxlen: 24
103.45.123.0/24 maxlen: 24
103.45.124.0/24 maxlen: 24
103.45.125.0/24 maxlen: 24
103.45.126.0/24 maxlen: 24
103.45.127.0/24 maxlen: 24
103.45.128.0/19 maxlen: 24
103.45.128.0/24 maxlen: 24
103.45.129.0/24 maxlen: 24
103.45.130.0/24 maxlen: 24
103.45.131.0/24 maxlen: 24
103.45.132.0/24 maxlen: 24
103.45.133.0/24 maxlen: 24
103.45.134.0/24 maxlen: 24
103.45.135.0/24 maxlen: 24
103.45.136.0/24 maxlen: 24
103.45.137.0/24 maxlen: 24
103.45.138.0/24 maxlen: 24
103.45.139.0/24 maxlen: 24
103.45.140.0/24 maxlen: 24
103.45.141.0/24 maxlen: 24
103.45.142.0/24 maxlen: 24
103.45.143.0/24 maxlen: 24
103.45.144.0/24 maxlen: 24
103.45.145.0/24 maxlen: 24
103.45.146.0/24 maxlen: 24
103.45.147.0/24 maxlen: 24
103.45.148.0/24 maxlen: 24
103.45.149.0/24 maxlen: 24
103.45.150.0/24 maxlen: 24
103.45.151.0/24 maxlen: 24
103.45.152.0/24 maxlen: 24
103.45.153.0/24 maxlen: 24
103.45.154.0/24 maxlen: 24
103.45.155.0/24 maxlen: 24
103.45.156.0/24 maxlen: 24
103.45.157.0/24 maxlen: 24
103.45.158.0/24 maxlen: 24
103.45.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5685 (0x1635)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Validity
Not Before: Jan 13 07:26:39 2023 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=D8AC544EFD3E2B50DCAC93B93ED3E32A1866B0DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:28:b5:b4:75:07:12:7d:21:26:82:8d:f7:21:
91:07:2a:d0:bf:c8:4c:65:5d:bc:cb:77:4f:3d:34:
36:88:36:b8:d1:f2:80:68:ad:06:78:6e:95:ff:fa:
9c:7e:0e:02:c2:6d:9b:47:55:0c:9c:8b:7e:a7:f0:
b5:d2:3b:a6:92:a7:4f:f3:7d:65:06:d4:7e:a1:8e:
8d:a5:20:76:74:30:15:88:d5:a2:57:87:ae:4b:7b:
82:c2:0f:a5:89:1a:b6:76:df:8c:7b:c8:d9:b3:49:
bc:71:fa:85:37:f4:e8:60:07:1a:42:ad:d5:2f:6f:
7c:20:33:37:dd:c4:5a:9b:f4:19:4f:1b:a1:81:89:
93:2d:a1:66:5b:89:12:5b:a3:22:55:11:f4:61:a0:
d1:c8:53:a3:c5:54:95:7c:82:45:99:2f:1b:37:02:
8a:07:d7:34:3b:29:e3:9b:95:e0:89:28:cb:17:8e:
7c:06:95:01:74:25:d0:2c:fa:2a:99:11:5b:1b:65:
8f:b2:4f:db:e2:5d:a6:30:30:79:b1:c7:a5:c2:96:
dd:81:8f:4c:f6:f7:cc:77:4c:42:e4:43:35:4a:09:
6b:0b:83:83:c2:46:6d:2b:58:a3:31:dd:ca:75:c1:
b6:b0:40:35:99:55:58:0d:d5:2e:a3:4a:72:c2:bb:
18:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AC:54:4E:FD:3E:2B:50:DC:AC:93:B9:3E:D3:E3:2A:18:66:B0:DE
X509v3 Authority Key Identifier:
keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/2KxUTv0-K1DcrJO5PtPjKhhmsN4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.45.96.0-103.45.159.255
Signature Algorithm: sha256WithRSAEncryption
48:33:bf:6f:2a:b5:d3:d5:03:5f:10:7f:eb:b3:b4:a8:14:cf:
c0:36:91:27:d4:3c:0b:6d:93:82:0b:1b:40:c5:60:8b:00:14:
91:bb:c5:e9:bd:28:16:ee:a7:5c:cf:01:42:ec:6a:d4:63:22:
62:28:f2:95:ce:71:a3:ad:a9:7c:27:f5:ad:24:90:ac:4b:90:
83:05:55:5d:a1:a0:82:85:2d:c7:9e:26:f7:75:7d:14:03:29:
70:51:20:24:a3:a0:3a:ae:1e:f7:43:2d:10:40:3b:84:64:22:
a9:ef:da:4d:0f:fc:e0:16:ae:d5:c7:c4:e4:ed:54:e2:ef:7c:
8a:d1:77:27:32:cb:04:5f:72:f9:ea:bc:4a:0e:41:c9:66:6a:
3b:5a:40:dc:1e:a6:2c:ce:cf:e8:de:28:52:db:d3:4b:21:95:
1c:04:a4:76:b3:a1:3d:a8:c3:ad:01:7a:ef:4e:c8:a1:9d:2c:
67:bb:e1:aa:62:07:bb:36:f6:9b:fe:ea:4f:03:3a:7f:6c:87:
23:e0:79:e5:5e:5a:87:37:02:c4:df:b5:8f:9d:f3:0b:34:11:
4d:c5:9a:67:51:64:87:f4:fb:89:4f:53:27:a0:c8:03:15:fa:
01:62:41:06:56:50:73:79:f7:79:a8:49:0f:8b:1a:b8:99:db:
3a:03:78:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org