Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2618/6-j7tWwgCHXAtn7kDXObctV_AbQ.roa
File: 6-j7tWwgCHXAtn7kDXObctV_AbQ.roa (raw, json)
Hash identifier: uiMHtKQFS0wX0O4bZaGARhmnsaywtAHQxXYoxy6HoOY=
Subject key identifier: EB:E8:FB:B5:6C:20:08:75:C0:B6:7E:E4:0D:73:9B:72:D5:7F:01:B4
Certificate issuer: /CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971
Certificate serial: 4C28
Authority key identifier: 01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/6-j7tWwgCHXAtn7kDXObctV_AbQ.roa
Signing time: Tue 25 Mar 2025 06:07:55 +0000
ROA not before: Tue 25 Mar 2025 06:07:55 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 63603
IP address blocks: 103.102.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19496 (0x4c28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971
Validity
Not Before: Mar 25 06:07:55 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=EBE8FBB56C200875C0B67EE40D739B72D57F01B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3f:bd:10:85:8d:e1:0e:63:c4:a7:22:d5:ae:
d2:41:1b:d4:b2:f5:6b:ac:59:04:92:04:be:20:1c:
79:91:b0:e3:f3:20:e3:3b:33:9e:a6:7d:a8:85:df:
f5:d1:51:e6:9b:04:cd:28:e3:40:c1:c6:4b:65:09:
e5:ea:f9:4b:36:cc:ed:61:79:ab:ac:c8:16:d8:f6:
3e:d0:14:d2:ca:dc:96:23:88:06:87:a8:30:1c:07:
07:0d:02:e1:f6:8b:08:a1:75:82:2e:e9:9b:9b:3b:
fe:42:08:b3:04:29:39:dd:26:06:4e:51:bc:f7:4f:
72:37:d2:80:26:81:a1:98:02:c9:7a:fe:f7:a7:78:
35:9f:0f:78:e8:55:c7:ed:03:c2:dd:d8:83:0a:3d:
04:bb:e7:6f:eb:4a:6d:cc:e7:1d:68:20:e4:f5:b9:
79:63:c3:3f:fe:9a:8b:24:fc:a3:7c:d5:dc:b6:01:
15:f8:4e:c1:05:3f:78:58:44:46:a9:63:7f:e3:33:
0e:fc:6e:bc:12:43:fd:b1:be:c6:10:76:70:61:ab:
5d:bc:a3:b0:f1:c1:15:06:58:02:cb:f9:4b:96:cb:
73:68:3b:5d:60:af:19:18:83:a9:5e:ee:f0:b8:fb:
b7:bc:63:ca:94:6b:bb:b5:cf:76:a8:13:14:09:16:
2e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E8:FB:B5:6C:20:08:75:C0:B6:7E:E4:0D:73:9B:72:D5:7F:01:B4
X509v3 Authority Key Identifier:
keyid:01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/6-j7tWwgCHXAtn7kDXObctV_AbQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.102.198.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:0a:d3:4c:78:60:87:dc:a7:a2:79:43:72:c0:e3:b5:ae:fb:
a4:47:ea:a7:a0:b8:05:e3:46:71:f8:6c:64:f1:86:a7:86:77:
84:06:95:79:6a:b4:f7:bb:9e:0f:c5:1d:84:d8:18:4c:6d:3e:
3a:b0:73:cd:cf:17:90:72:92:2b:16:23:e0:37:5a:40:63:ba:
aa:db:8a:73:08:2e:47:28:2d:46:af:08:91:91:a9:09:a6:c5:
9f:20:a4:0e:a9:3d:70:14:33:a7:20:b7:2d:d0:21:eb:3f:e7:
50:54:b7:eb:6e:85:2a:4a:f0:37:2d:8a:0e:4d:e2:9e:00:e6:
13:44:b3:65:7f:42:08:f9:07:99:65:44:3e:3e:f0:4e:bc:31:
9a:3f:dc:4d:73:a1:42:f3:1d:e2:09:b3:9e:c1:32:c5:28:e7:
6e:cb:89:cf:d5:f8:8f:ab:7a:3d:e8:92:2e:b2:ac:7a:4d:ac:
52:5b:f7:4f:1d:b8:64:95:62:ec:67:70:7e:17:b4:41:23:5f:
fc:15:d4:9a:28:2d:a0:46:94:79:2d:d8:14:98:87:68:01:f0:
78:6c:98:c5:1f:96:f9:e8:67:ff:b9:75:23:60:7b:85:6c:57:
6c:44:61:0d:8e:4a:13:28:01:e2:89:23:38:3b:4e:98:34:cd:
4a:ca:c7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:19 2025 by rpki-client