Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2618/fjW9kpn-jSDef962IrBiDPJFxcI.roa
File: fjW9kpn-jSDef962IrBiDPJFxcI.roa (raw, json)
Hash identifier: 8/JUM4FE6l44cxvaJlc7MWmB3UMokrNBqRDkPsNPTLM=
Subject key identifier: 7E:35:BD:92:99:FE:8D:20:DE:7F:DE:B6:22:B0:62:0C:F2:45:C5:C2
Certificate issuer: /CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971
Certificate serial: 4C27
Authority key identifier: 01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/fjW9kpn-jSDef962IrBiDPJFxcI.roa
Signing time: Tue 25 Mar 2025 06:07:54 +0000
ROA not before: Tue 25 Mar 2025 06:07:54 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 63603
IP address blocks: 103.102.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19495 (0x4c27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971
Validity
Not Before: Mar 25 06:07:54 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=7E35BD9299FE8D20DE7FDEB622B0620CF245C5C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:17:58:f2:92:8f:26:2a:68:b0:61:7c:3d:3c:
74:6c:2e:14:e4:2d:d5:1e:75:dd:e1:42:02:6c:39:
f4:5f:77:8a:61:d7:a4:f2:66:97:56:57:de:0f:ea:
ee:24:a3:b6:8f:a6:24:05:ff:8a:8b:0d:dc:70:30:
a5:e8:3f:dc:28:a7:5e:55:a8:fe:7d:46:f0:97:b5:
ba:66:fa:91:db:bb:06:eb:c6:27:52:40:41:9f:ef:
e4:b2:25:06:ef:58:8c:86:f7:da:a9:a2:9c:5e:33:
bb:56:1f:95:27:55:e3:48:c7:6e:d9:a0:15:d8:92:
a4:18:91:f3:21:a7:ef:d0:52:3c:f7:2b:10:3c:a3:
17:e7:95:d4:17:82:5c:83:8c:db:0c:f7:77:da:ff:
4e:4f:68:82:c9:8c:0c:dc:11:69:32:fe:cc:3a:a3:
25:af:0b:b7:03:72:5f:dd:11:8c:08:c7:ac:35:04:
30:e5:64:b0:c5:2b:27:f5:62:a8:df:da:13:cc:08:
93:67:2a:e6:de:e7:f1:70:45:9f:88:95:fe:45:60:
48:36:79:37:87:97:51:72:eb:28:82:09:86:57:af:
7f:00:d9:23:24:ec:9e:cf:b0:4b:8b:1d:aa:e7:ec:
76:bb:59:32:e9:99:d5:8d:30:c5:3b:9d:9a:c7:9c:
78:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:35:BD:92:99:FE:8D:20:DE:7F:DE:B6:22:B0:62:0C:F2:45:C5:C2
X509v3 Authority Key Identifier:
keyid:01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/fjW9kpn-jSDef962IrBiDPJFxcI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.102.199.0/24
Signature Algorithm: sha256WithRSAEncryption
73:af:65:ba:af:23:83:65:3a:8c:83:a5:62:9e:42:25:d2:23:
e1:4c:4c:08:00:7d:4c:05:20:d2:2e:ff:de:e1:f0:20:00:fa:
67:2e:7d:a7:25:60:25:26:12:11:98:dc:d9:bd:7c:2e:1d:69:
48:52:bd:7a:c5:bd:13:49:66:b6:c4:89:87:37:0f:ef:e6:05:
05:37:e5:04:bc:d4:d5:5b:99:30:55:01:83:61:f9:07:83:35:
d1:cd:90:6a:b3:8c:d4:7a:c5:f8:2a:49:65:b3:91:44:2d:0f:
d5:20:b6:31:62:e1:55:f8:82:1e:cd:9a:38:7b:b9:33:66:8f:
6a:9f:00:34:2b:43:87:92:3a:18:79:2d:d8:1e:97:19:98:0f:
d4:80:d2:c3:24:82:14:c7:8e:64:dc:64:a8:0e:05:c7:97:e3:
dc:0a:4e:91:23:eb:65:5a:be:f7:07:a2:49:5e:c3:df:00:2d:
e1:42:82:3f:4e:c4:9d:8b:29:ab:35:43:8d:8c:7f:d9:b1:0f:
73:22:1f:3c:b8:40:f3:02:7b:4a:fb:0f:49:1e:13:72:10:7c:
16:52:b4:e6:cb:63:c5:b9:74:91:f6:fa:2d:30:8b:ca:3e:43:
38:0c:ac:94:a6:68:9e:ce:d5:d8:19:70:be:e8:5e:57:b2:74:
6f:a7:ce:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:36:34 2025 by rpki-client