Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2537/0c9Dpd_fmCCojb9ROkhUQPHsCMc.roa
File: 0c9Dpd_fmCCojb9ROkhUQPHsCMc.roa (raw, json)
Hash identifier: NLo7OOzXP2h0U/Nq2VInDVYM7g3dQTjbCRAd2XCOTUU=
Subject key identifier: D1:CF:43:A5:DF:DF:98:20:A8:8D:BF:51:3A:48:54:40:F1:EC:08:C7
Certificate issuer: /CN=7B5DC95599BE4DE454A99C0C25753D1E00C7414F
Certificate serial: 079D
Authority key identifier: 7B:5D:C9:55:99:BE:4D:E4:54:A9:9C:0C:25:75:3D:1E:00:C7:41:4F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/e13JVZm-TeRUqZwMJXU9HgDHQU8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/0c9Dpd_fmCCojb9ROkhUQPHsCMc.roa
Signing time: Fri 17 Jan 2025 01:23:23 +0000
ROA not before: Fri 17 Jan 2025 01:23:23 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 152092
IP address blocks: 103.97.56.0/24 maxlen: 24
103.97.57.0/24 maxlen: 24
103.97.58.0/24 maxlen: 24
103.97.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1949 (0x79d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B5DC95599BE4DE454A99C0C25753D1E00C7414F
Validity
Not Before: Jan 17 01:23:23 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=D1CF43A5DFDF9820A88DBF513A485440F1EC08C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:32:bf:1d:1a:e7:5a:32:10:56:4d:a4:8b:59:
26:6d:1a:62:9d:ad:65:18:7a:a5:f1:5a:e6:29:0d:
0e:f9:5a:93:70:2e:93:da:a6:6f:fa:65:d2:4b:65:
e9:5d:3c:fc:fa:4b:32:f0:b4:0f:1d:e9:20:a7:d9:
73:b1:a0:47:41:83:52:37:8e:01:3a:d1:74:6e:f8:
e1:3f:d3:de:b0:05:14:23:55:7f:ab:23:54:1d:6f:
a4:a3:f4:29:4e:38:42:a0:b5:c2:c0:64:49:bb:30:
ac:d9:d1:79:3f:70:eb:6f:60:64:f0:c9:7d:d0:d1:
7a:38:f4:8f:40:d0:12:19:87:f8:b3:73:e6:33:93:
f2:4c:c4:e1:e0:60:ae:da:fb:22:5c:c4:a3:ce:9d:
cf:d2:3a:e9:c8:94:aa:4a:87:58:ac:dd:91:b3:01:
00:1d:5d:10:99:cc:2e:eb:21:f8:20:36:6f:b9:45:
29:56:05:18:5b:0f:c4:c8:d7:6c:58:f8:cc:aa:fb:
69:51:52:35:79:b8:70:82:bb:35:6f:7c:6a:ce:8f:
98:27:f1:43:9d:38:b5:83:98:28:90:32:be:b3:0c:
9c:bd:4d:59:f5:63:3e:7b:33:c6:6b:dd:18:1e:27:
54:20:33:29:61:1b:15:85:9f:fe:fd:82:27:85:ec:
31:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CF:43:A5:DF:DF:98:20:A8:8D:BF:51:3A:48:54:40:F1:EC:08:C7
X509v3 Authority Key Identifier:
keyid:7B:5D:C9:55:99:BE:4D:E4:54:A9:9C:0C:25:75:3D:1E:00:C7:41:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/e13JVZm-TeRUqZwMJXU9HgDHQU8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/e13JVZm-TeRUqZwMJXU9HgDHQU8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/0c9Dpd_fmCCojb9ROkhUQPHsCMc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.97.56.0/22
Signature Algorithm: sha256WithRSAEncryption
97:4b:b4:2c:32:90:a6:21:d8:f4:3b:8e:e1:d3:6d:a9:cc:98:
f0:96:b6:06:68:3a:d6:9e:77:d4:b6:82:3b:30:8d:4e:78:17:
88:5f:6f:39:6c:6c:c1:eb:f0:a9:f5:a8:55:2c:96:c1:99:b9:
f6:46:76:26:b5:cb:53:5b:08:5f:e2:f1:f0:6a:5a:c9:6c:f2:
60:c9:9b:f1:ca:ec:2f:39:ef:a0:f3:b6:76:39:c6:5a:76:2e:
7f:53:14:7e:0f:a3:c0:47:3b:f8:9f:d8:5c:2f:4f:bf:6d:ab:
5c:a1:e4:3e:68:a8:18:1a:2a:e4:fd:a9:cb:18:e8:7a:e6:f6:
9c:ea:41:cc:32:bb:88:17:2c:87:ed:60:54:fd:d2:b3:c2:2f:
8b:09:e2:dc:1a:dc:4b:82:c3:96:95:6c:20:c4:ed:87:28:d9:
2b:52:f0:1f:f5:de:27:4b:ab:92:e7:60:a0:f7:5b:a3:31:ab:
e2:b8:04:d8:ec:7f:0c:40:92:61:db:88:9b:dd:b0:72:b8:dd:
ac:f3:39:35:09:7f:88:07:9e:88:01:4d:ff:4e:76:fb:73:55:
4a:65:ce:17:21:a7:39:ac:6d:60:ef:84:8b:91:69:eb:aa:04:
73:c0:ef:5f:b6:54:82:bf:99:46:26:b1:b7:73:42:96:47:11:
d3:fa:71:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 17:35:27 2025 by rpki-client