Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2537/qv7jmQZZzsvvxaso_WqyEH6osTk.roa
File: qv7jmQZZzsvvxaso_WqyEH6osTk.roa (raw, json)
Hash identifier: e3Xk5CPCwhadVOiQcNYD2/43mnX1RtmEaogikQg6AT0=
Subject key identifier: AA:FE:E3:99:06:59:CE:CB:EF:C5:AB:28:FD:6A:B2:10:7E:A8:B1:39
Certificate issuer: /CN=7B5DC95599BE4DE454A99C0C25753D1E00C7414F
Certificate serial: 079B
Authority key identifier: 7B:5D:C9:55:99:BE:4D:E4:54:A9:9C:0C:25:75:3D:1E:00:C7:41:4F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/e13JVZm-TeRUqZwMJXU9HgDHQU8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/qv7jmQZZzsvvxaso_WqyEH6osTk.roa
Signing time: Fri 17 Jan 2025 01:23:22 +0000
ROA not before: Fri 17 Jan 2025 01:23:22 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 152092
IP address blocks: 103.97.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1947 (0x79b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B5DC95599BE4DE454A99C0C25753D1E00C7414F
Validity
Not Before: Jan 17 01:23:22 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=AAFEE3990659CECBEFC5AB28FD6AB2107EA8B139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b0:b8:88:14:7b:61:21:10:de:c2:88:8a:aa:
13:e4:f0:28:02:7f:29:be:10:53:9f:88:ec:3f:b6:
c7:5d:98:fb:37:5a:0f:b4:e5:7e:f5:9e:77:ec:31:
27:9e:de:93:64:0f:da:94:b7:ff:1e:71:0d:6a:3d:
25:d1:13:7a:fb:16:de:98:33:f7:23:51:8c:05:11:
d7:1c:f6:75:14:e8:cf:bc:ed:1a:ba:14:47:83:2e:
cb:89:89:d5:1e:35:8c:16:e6:e0:dc:cd:8a:44:89:
cd:2a:3c:fb:4b:39:ed:35:32:9a:a4:5a:68:42:34:
20:7f:65:a2:0b:85:86:1d:24:4e:73:34:72:96:4c:
82:9c:31:f7:84:87:66:4c:de:99:e9:a0:df:2f:45:
8c:54:13:f8:84:11:23:9f:75:78:49:3e:5a:f6:49:
fe:ab:de:f0:d7:fe:f7:f7:09:4f:09:cd:2b:74:39:
99:c4:53:a1:5e:29:8c:00:78:33:95:6d:26:ad:51:
c7:31:c3:6e:9b:19:42:6a:6f:9a:f2:00:6d:c5:e7:
c9:cf:60:55:09:e2:4d:0f:e2:d9:d6:13:b0:f3:58:
96:14:60:bf:9c:1e:87:74:7a:3e:b3:51:d5:94:5b:
b3:34:df:e0:16:41:6e:e1:52:15:76:26:c2:bc:80:
fd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FE:E3:99:06:59:CE:CB:EF:C5:AB:28:FD:6A:B2:10:7E:A8:B1:39
X509v3 Authority Key Identifier:
keyid:7B:5D:C9:55:99:BE:4D:E4:54:A9:9C:0C:25:75:3D:1E:00:C7:41:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/e13JVZm-TeRUqZwMJXU9HgDHQU8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/e13JVZm-TeRUqZwMJXU9HgDHQU8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/qv7jmQZZzsvvxaso_WqyEH6osTk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.97.56.0/22
Signature Algorithm: sha256WithRSAEncryption
31:ac:6d:ce:1b:8c:1b:da:46:f1:b2:21:13:4a:32:da:db:5d:
83:0e:6d:58:3b:e7:8c:b1:15:42:a4:88:93:88:62:9f:b8:f9:
cd:52:8e:dc:4c:76:40:f9:80:03:5f:bf:08:f6:34:2e:ee:2e:
7b:8c:34:b7:74:9e:87:47:de:c9:d7:09:1b:af:56:e1:2c:91:
27:ba:c3:a7:82:49:69:ae:0e:60:72:41:03:09:71:0a:90:db:
01:b2:1b:82:ee:03:54:ff:b1:92:16:b0:11:b0:ed:19:9f:bc:
6d:9b:9d:0b:c7:bc:e5:ed:28:23:f6:a9:19:73:7e:5f:7e:ee:
a7:02:40:13:99:60:0e:67:43:40:72:33:89:10:cd:c6:14:d2:
40:11:c9:67:1f:09:c3:8e:64:97:23:6d:9a:a0:6a:9a:3c:5c:
b5:1a:04:56:0b:a6:88:80:ea:7d:1d:c8:20:15:e3:99:63:6b:
f7:f8:53:fa:31:6b:1a:19:a8:8b:d1:95:7f:88:19:ca:36:8a:
69:d8:36:8d:d0:11:39:a3:b9:79:2f:e8:96:6c:51:15:43:4b:
73:21:4b:8b:fa:08:ed:d8:5d:8f:b5:87:af:62:98:90:57:e5:
3a:7d:e8:ba:1e:55:39:41:7b:0c:33:65:61:ea:4b:7d:49:64:
f1:ba:8b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:47:16 2025 by rpki-client