Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2564/SfhRhUwxRQYhsLOpiAKyS2q9hsY.roa
File: SfhRhUwxRQYhsLOpiAKyS2q9hsY.roa (raw, json)
Hash identifier: Lssgwg/LDS2Gc0apDKaxQyM7zkkn1Wrj9+vmCV3/eVQ=
Subject key identifier: 49:F8:51:85:4C:31:45:06:21:B0:B3:A9:88:02:B2:4B:6A:BD:86:C6
Certificate issuer: /CN=6A21A11AAC4EAE0A630659B31A230B08D6B58177
Certificate serial: 1BD2
Authority key identifier: 6A:21:A1:1A:AC:4E:AE:0A:63:06:59:B3:1A:23:0B:08:D6:B5:81:77
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aiGhGqxOrgpjBlmzGiMLCNa1gXc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/SfhRhUwxRQYhsLOpiAKyS2q9hsY.roa
Signing time: Fri 17 Jan 2025 01:27:31 +0000
ROA not before: Fri 17 Jan 2025 01:27:31 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 131530
IP address blocks: 103.98.164.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7122 (0x1bd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A21A11AAC4EAE0A630659B31A230B08D6B58177
Validity
Not Before: Jan 17 01:27:31 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=49F851854C31450621B0B3A98802B24B6ABD86C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a2:eb:12:7c:e3:76:ab:f0:98:e6:c6:62:d1:
09:8c:07:69:59:76:e0:c7:3d:bc:c3:bf:64:a2:e7:
02:ce:cf:be:48:83:80:22:8b:d1:01:8e:12:a1:9f:
00:41:28:34:4e:a4:b0:73:e0:e0:3e:8a:63:4b:af:
9c:36:c0:5f:fd:b9:06:a4:4c:9d:1f:bf:32:8f:5a:
50:98:c1:fd:88:6e:1b:01:17:0e:fe:21:02:13:ae:
45:fb:a2:de:a7:fb:79:0a:d1:f0:9f:f5:2a:25:c0:
62:2d:5f:3e:60:55:44:49:cc:8b:60:38:cd:54:1e:
33:25:13:25:2a:02:fc:2f:83:33:1d:b5:6a:6e:34:
ce:f7:66:a6:82:7b:b8:96:62:34:19:8b:a5:86:54:
8a:a6:73:2d:86:d3:68:30:d4:c9:d0:94:b9:5d:18:
07:c0:9c:aa:69:34:50:84:a8:26:93:76:f2:98:bc:
2e:28:e6:ca:78:3a:00:5f:6c:1d:67:7f:ed:c7:2c:
0c:81:32:39:67:df:cc:cd:84:a2:38:8e:b0:e0:b2:
81:37:be:3c:a0:a9:4c:d1:7a:f4:bb:d7:66:3f:74:
c2:9c:6d:fc:20:74:0c:f8:2e:68:94:f1:0b:c9:6f:
02:dc:a9:28:26:36:b6:e9:0c:36:37:6f:44:f5:f4:
33:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F8:51:85:4C:31:45:06:21:B0:B3:A9:88:02:B2:4B:6A:BD:86:C6
X509v3 Authority Key Identifier:
keyid:6A:21:A1:1A:AC:4E:AE:0A:63:06:59:B3:1A:23:0B:08:D6:B5:81:77
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/aiGhGqxOrgpjBlmzGiMLCNa1gXc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aiGhGqxOrgpjBlmzGiMLCNa1gXc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/SfhRhUwxRQYhsLOpiAKyS2q9hsY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.98.164.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:28:c1:84:40:d9:1c:8e:29:a0:3b:5f:60:42:a1:7b:31:ea:
d1:12:76:a1:03:c1:2d:b3:40:3c:f2:c2:d9:b7:eb:7f:9f:2e:
26:2d:c7:76:a3:8d:1b:03:5a:de:06:0b:43:cd:ac:b6:16:83:
68:03:21:d5:98:15:ca:90:18:1c:d8:c2:4f:21:87:20:9a:10:
6d:63:c4:05:9c:98:27:b7:48:78:c4:4a:86:79:50:4d:42:c8:
6a:9f:58:44:72:75:26:37:e4:cd:1d:a5:3f:bb:55:65:f3:56:
a4:d5:4d:44:9f:4c:25:65:19:f1:8b:3e:bb:51:fa:03:f6:ca:
a7:a6:2a:87:62:60:ef:dd:7c:70:bb:41:18:fa:7d:80:a5:ab:
c5:2a:ee:a5:b2:f2:5c:e7:77:f1:c1:6b:35:89:de:b1:1b:c4:
00:f4:80:c8:10:35:d0:fd:51:a5:6c:31:ab:91:d3:03:91:5e:
72:af:1d:2d:21:ab:ee:c6:3f:fa:45:24:14:75:2f:bc:ef:f1:
23:ca:e0:63:d1:ec:99:33:b6:34:4a:a1:c2:6d:fd:7a:8b:7b:
b9:58:69:1d:b6:e0:b4:83:1c:19:2d:9d:37:ff:57:ab:7a:48:
8e:87:e4:b1:be:bf:b7:3d:39:02:31:3b:b0:88:f0:84:29:01:
f9:e2:a5:b1
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICG9IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkEy
MUExMUFBQzRFQUUwQTYzMDY1OUIzMUEyMzBCMDhENkI1ODE3NzAeFw0yNTAxMTcw
MTI3MzFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDQ5Rjg1MTg1NEMzMTQ1
MDYyMUIwQjNBOTg4MDJCMjRCNkFCRDg2QzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXousSfON2q/CY5sZi0QmMB2lZduDHPbzDv2Si5wLOz75Ig4Ai
i9EBjhKhnwBBKDROpLBz4OA+imNLr5w2wF/9uQakTJ0fvzKPWlCYwf2IbhsBFw7+
IQITrkX7ot6n+3kK0fCf9SolwGItXz5gVURJzItgOM1UHjMlEyUqAvwvgzMdtWpu
NM73ZqaCe7iWYjQZi6WGVIqmcy2G02gw1MnQlLldGAfAnKppNFCEqCaTdvKYvC4o
5sp4OgBfbB1nf+3HLAyBMjln38zNhKI4jrDgsoE3vjygqUzRevS712Y/dMKcbfwg
dAz4LmiU8QvJbwLcqSgmNrbpDDY3b0T19DPrAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUSfhRhUwxRQYhsLOpiAKyS2q9hsYwHwYDVR0jBBgwFoAUaiGhGqxOrgpjBlmz
GiMLCNa1gXcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjU2
NC9haUdoR3F4T3JncGpCbG16R2lNTENOYTFnWGMuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2FpR2hHcXhPcmdwakJsbXpHaU1MQ05hMWdYYy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1NjQvU2ZoUmhVd3hSUVlo
c0xPcGlBS3lTMnE5aHNZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmdipDANBgkqhkiG9w0BAQsFAAOCAQEAiijBhEDZHI4poDtfYEKhezHq0RJ2
oQPBLbNAPPLC2bfrf58uJi3HdqONGwNa3gYLQ82sthaDaAMh1ZgVypAYHNjCTyGH
IJoQbWPEBZyYJ7dIeMRKhnlQTULIap9YRHJ1JjfkzR2lP7tVZfNWpNVNRJ9MJWUZ
8Ys+u1H6A/bKp6Yqh2Jg7918cLtBGPp9gKWrxSrupbLyXOd38cFrNYnesRvEAPSA
yBA10P1RpWwxq5HTA5Fecq8dLSGr7sY/+kUkFHUvvO/xI8rgY9HsmTO2NEqhwm39
eot7uVhpHbbgtIMcGS2dN/9Xq3pIjofksb6/tz05AjE7sIjwhCkB+eKlsQ==
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:44 2025 by rpki-client