Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2618/bXCVl_Rt9Qwo1r_KmdASpQ9VahM.roa
File: bXCVl_Rt9Qwo1r_KmdASpQ9VahM.roa (raw, json)
Hash identifier: xtQlmLqtQ63byLuWgrA2xCBy3ppDECnR21PXQmwQuis=
Subject key identifier: 6D:70:95:97:F4:6D:F5:0C:28:D6:BF:CA:99:D0:12:A5:0F:55:6A:13
Certificate issuer: /CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971
Certificate serial: 4AD4
Authority key identifier: 01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/bXCVl_Rt9Qwo1r_KmdASpQ9VahM.roa
Signing time: Fri 17 Jan 2025 01:26:26 +0000
ROA not before: Fri 17 Jan 2025 01:26:26 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 63603
IP address blocks: 103.102.196.0/24 maxlen: 24
103.102.197.0/24 maxlen: 24
103.102.198.0/24 maxlen: 24
103.102.199.0/24 maxlen: 24
163.53.44.0/24 maxlen: 24
163.53.45.0/24 maxlen: 24
163.53.46.0/24 maxlen: 24
163.53.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19156 (0x4ad4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971
Validity
Not Before: Jan 17 01:26:26 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=6D709597F46DF50C28D6BFCA99D012A50F556A13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:89:8a:e2:fb:81:da:69:68:c2:42:b5:33:8f:
a6:66:96:70:e0:ad:0e:e9:a8:26:f4:a4:ba:62:a6:
5e:72:68:5c:50:26:0b:4f:e9:88:04:c2:40:4e:1d:
96:b2:5f:db:1c:e8:7d:a9:01:52:f8:2d:d1:de:11:
21:d5:f8:a7:0d:2b:be:fc:89:14:92:d4:29:75:ab:
8f:d0:78:76:e6:0e:57:de:0f:2b:c4:e7:4c:b9:df:
d4:2f:b1:dd:b5:2a:bd:50:cb:80:f1:c9:d8:ec:8f:
3b:f5:27:67:57:f4:03:6c:e8:50:61:b7:e3:0e:21:
d8:60:37:5b:7c:60:aa:14:c8:98:47:ce:d3:ac:67:
23:fc:31:04:c3:33:cc:aa:52:e6:bd:ee:6a:1a:7e:
c9:64:eb:8e:f3:f5:39:3d:4f:62:17:93:7b:41:50:
91:17:02:b0:bc:91:bb:cf:af:48:37:af:e3:f1:02:
75:a4:68:80:3c:c4:d1:52:e7:37:05:c2:8d:14:bf:
15:af:b1:59:84:f8:3b:f9:57:ae:35:ee:ad:0c:59:
bb:b0:7b:e7:b7:d3:6a:c4:f1:a8:d1:d6:ea:09:78:
4a:9c:89:a7:4c:3e:a9:7f:40:67:5c:f5:e0:f8:3c:
f5:fc:d6:a0:5a:dd:e4:b1:9e:e5:49:5d:7b:fc:a5:
c9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:70:95:97:F4:6D:F5:0C:28:D6:BF:CA:99:D0:12:A5:0F:55:6A:13
X509v3 Authority Key Identifier:
keyid:01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/bXCVl_Rt9Qwo1r_KmdASpQ9VahM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.102.196.0/22
163.53.44.0/22
Signature Algorithm: sha256WithRSAEncryption
09:6e:66:ad:41:5c:7f:58:08:dd:67:49:3e:e6:9a:ce:70:bb:
19:4a:44:5f:ae:0e:f1:58:a2:f8:db:5c:46:9b:a4:53:56:55:
fd:50:9b:b8:bd:35:d3:5b:e1:93:ae:46:62:f1:e3:15:e9:fe:
99:8d:7c:e6:d8:ef:03:23:c1:90:60:6c:bf:f1:c7:dc:4e:3a:
ef:df:95:9f:ca:f0:7a:c4:1a:87:91:d0:87:fa:8b:02:25:b8:
40:4a:b4:0a:e2:02:04:fd:7f:f7:c2:aa:fd:10:3b:0c:e1:3e:
86:8d:9d:c0:c0:e4:64:10:19:24:ed:8c:3e:9d:52:14:60:8c:
98:3f:84:66:f9:e8:db:8c:5f:e1:56:aa:30:5d:29:75:b7:7c:
d9:b7:d7:c5:a0:e9:46:50:5c:14:a5:ac:4e:41:99:68:67:31:
7f:a0:aa:3f:f7:70:60:7c:d0:ad:02:48:d3:3c:a3:64:ba:b9:
7e:17:de:f8:ce:4c:3c:fb:3a:c2:00:c8:ef:18:51:8f:86:7c:
8f:7d:b2:c6:f5:2b:69:11:39:fa:d7:2c:0e:8c:9a:8d:ee:c5:
42:55:e5:6e:0a:e7:5f:b0:5d:79:2d:f2:f0:31:6d:0b:a1:02:
3d:14:35:f9:11:6d:3a:f7:c5:9d:3c:e3:f3:d0:9c:eb:f1:38:
86:e2:ed:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:45 2025 by rpki-client