Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/6MvcjDXvdtdozwjcGoeBbRruj8g.roa
File: 6MvcjDXvdtdozwjcGoeBbRruj8g.roa (raw, json)
Hash identifier: 7IpftXVpSU6GE1w/hCNu+lVfJkUd1FdJ9zqSE3bN+yM=
Subject key identifier: E8:CB:DC:8C:35:EF:76:D7:68:CF:08:DC:1A:87:81:6D:1A:EE:8F:C8
Certificate issuer: /CN=02605E38FE471260DDE7ACE69743E2F3D4F2F0C6
Certificate serial: 08
Authority key identifier: 02:60:5E:38:FE:47:12:60:DD:E7:AC:E6:97:43:E2:F3:D4:F2:F0:C6
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AmBeOP5HEmDd56zml0Pi89Ty8MY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/6MvcjDXvdtdozwjcGoeBbRruj8g.roa
Signing time: Thu 27 May 2021 05:05:31 +0000
ROA not before: Thu 27 May 2021 05:05:31 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 4816
IP address blocks: 103.39.232.0/22 maxlen: 22
103.44.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02605E38FE471260DDE7ACE69743E2F3D4F2F0C6
Validity
Not Before: May 27 05:05:31 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=E8CBDC8C35EF76D768CF08DC1A87816D1AEE8FC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:39:a4:c6:9c:38:ae:60:63:f6:df:34:53:33:
cb:b7:c4:f3:d5:df:2e:c0:c8:2e:25:a3:bd:71:ac:
da:cb:d2:1c:68:53:15:9b:b9:f0:39:07:13:f1:fc:
65:9b:ab:dd:c1:91:70:e2:55:c6:e5:cb:44:1a:11:
ac:b1:66:bd:92:86:29:2d:a8:b3:ec:47:59:34:8b:
39:64:4b:c6:26:11:63:60:71:d3:f7:48:a2:ba:77:
fd:b1:6a:33:63:89:01:54:60:60:66:9b:05:08:4a:
b2:db:ab:67:2a:1a:dd:ca:01:01:36:b3:24:d8:61:
99:0f:01:19:a5:92:b9:88:f1:e9:13:c7:f8:1b:df:
8b:e0:58:e0:53:bc:21:73:28:af:71:a1:4b:a3:92:
c5:4b:16:64:17:81:59:22:99:91:8b:94:62:b7:61:
3b:02:a8:e5:31:cb:30:e1:cf:df:9d:7c:30:bb:93:
2e:db:29:9d:4d:73:60:6b:53:43:53:51:c8:d6:d9:
f1:12:a3:b8:42:47:29:85:6f:0c:b1:a3:77:96:7c:
42:73:da:a7:f8:07:23:e1:1f:a6:7f:03:09:11:45:
2a:fe:41:1a:4f:89:8e:ee:58:5b:4c:cf:ee:33:03:
ac:c3:c4:70:79:36:55:4b:8f:fa:a7:db:35:b5:7e:
27:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CB:DC:8C:35:EF:76:D7:68:CF:08:DC:1A:87:81:6D:1A:EE:8F:C8
X509v3 Authority Key Identifier:
keyid:02:60:5E:38:FE:47:12:60:DD:E7:AC:E6:97:43:E2:F3:D4:F2:F0:C6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/AmBeOP5HEmDd56zml0Pi89Ty8MY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AmBeOP5HEmDd56zml0Pi89Ty8MY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/6MvcjDXvdtdozwjcGoeBbRruj8g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.39.232.0/22
103.44.236.0/22
Signature Algorithm: sha256WithRSAEncryption
04:ae:a1:d4:6e:45:0b:0a:24:f6:af:1a:aa:17:2b:93:41:18:
ba:25:b6:d6:e9:2d:05:66:14:2f:3a:c9:54:10:f1:a9:ca:90:
28:1f:c6:07:e6:39:d3:ba:24:8a:d4:e7:df:f8:74:b8:f4:b2:
93:44:ec:ee:02:0e:51:00:0d:76:44:4b:f0:31:a3:37:b3:6f:
21:df:73:56:15:d5:65:d5:66:07:b4:f1:98:30:1a:45:92:7e:
8a:30:e0:a2:47:dc:ca:08:d3:13:5b:be:54:5b:f4:e8:1f:e1:
46:76:11:73:13:a9:c3:ad:4e:3d:3e:f8:51:22:30:cb:71:b5:
27:26:89:53:b1:27:e3:78:ce:fe:d3:60:5c:a4:81:d7:07:f0:
88:5b:9a:91:26:46:42:ec:ac:0f:3f:47:ac:85:3b:2d:46:22:
55:1c:d5:9c:8a:24:1f:1d:ec:bc:5c:a9:5b:67:25:8b:6c:68:
cf:0f:05:28:ea:37:11:8e:19:f9:ec:a2:0c:04:35:a1:4b:6a:
7a:3f:ff:21:a4:4c:69:8a:45:21:87:e9:5e:f7:6a:06:7f:4d:
02:9c:25:e0:43:25:f5:61:e3:4f:94:7d:a4:a4:c6:fe:0e:51:
f9:e7:b1:48:eb:05:4b:36:33:a4:71:c8:41:cf:27:e3:e8:8f:
ca:7a:a3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:45:04 2025 by rpki-client