Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2618/krfPRDv5zvWiFPpV7weQFS6h0CE.roa
File: krfPRDv5zvWiFPpV7weQFS6h0CE.roa (raw, json)
Hash identifier: WxYdudw0s2KRXFRCIr7gzkMY53glRPq6Szdw3Ohh65I=
Subject key identifier: 92:B7:CF:44:3B:F9:CE:F5:A2:14:FA:55:EF:07:90:15:2E:A1:D0:21
Certificate issuer: /CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971
Certificate serial: 4C2A
Authority key identifier: 01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/krfPRDv5zvWiFPpV7weQFS6h0CE.roa
Signing time: Tue 25 Mar 2025 06:07:55 +0000
ROA not before: Tue 25 Mar 2025 06:07:55 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 63603
IP address blocks: 103.102.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19498 (0x4c2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971
Validity
Not Before: Mar 25 06:07:55 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=92B7CF443BF9CEF5A214FA55EF0790152EA1D021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:17:91:45:2c:07:24:b4:af:c4:37:8e:f4:29:
b2:2a:91:c1:11:48:02:18:ab:4b:b6:12:66:ca:ac:
a0:18:7c:20:75:0f:84:8d:17:c8:3f:31:63:dd:bf:
ae:37:36:39:97:fe:ed:ef:e8:38:28:49:71:ce:d8:
3b:8b:f4:06:47:31:50:2e:c8:1b:6c:8b:a9:29:6d:
9a:71:3b:b2:d3:26:fa:74:73:56:9a:b7:2e:80:8e:
60:af:b8:50:48:1a:2b:7d:cc:7d:b8:54:99:b7:f0:
75:27:80:21:88:38:33:39:0b:28:02:00:7f:77:9c:
26:df:4c:55:11:63:36:3f:9a:a9:6e:ce:b3:ee:5f:
3b:6d:9a:e5:b5:e6:a8:fc:ea:b3:d6:fa:e3:d9:ef:
e8:0a:b3:91:45:24:6f:fb:ac:86:55:6e:cd:8b:4b:
f9:34:97:49:87:a4:01:4d:e8:fd:bc:fe:f0:ad:75:
db:68:3c:5b:a2:26:a4:ef:fa:d9:e1:1e:8c:93:de:
3c:a9:1b:3a:94:4b:34:66:73:03:af:b1:b8:68:55:
07:ed:5c:07:af:ae:af:a0:36:df:65:a4:d4:f6:ce:
4d:0e:a8:8e:91:fb:e5:3a:84:68:4d:42:b0:26:d2:
a9:8f:e0:d2:13:6a:f4:cb:cf:d0:1a:a8:13:21:cc:
9a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B7:CF:44:3B:F9:CE:F5:A2:14:FA:55:EF:07:90:15:2E:A1:D0:21
X509v3 Authority Key Identifier:
keyid:01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/krfPRDv5zvWiFPpV7weQFS6h0CE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.102.197.0/24
Signature Algorithm: sha256WithRSAEncryption
82:42:df:f9:58:5f:9a:57:ad:ed:69:7c:b0:c1:04:a1:23:b7:
60:1c:f6:a1:59:1e:ae:a7:88:78:24:5a:86:a8:b5:5d:66:58:
13:25:0e:2f:52:9b:0c:13:00:ac:75:4c:0c:4b:30:02:ec:ba:
8d:e1:0e:90:08:08:9a:b9:16:51:af:02:f2:ac:35:8e:b5:9a:
5a:9d:79:b4:58:b3:16:f7:40:0d:e3:13:f1:21:8e:02:84:fb:
d5:7d:a6:91:9e:75:45:49:ea:18:bc:5c:85:b8:ad:f3:ec:be:
58:e9:ae:29:26:e5:b7:88:6c:78:98:5d:9c:73:09:9d:b2:a3:
a3:64:bf:ed:c0:28:8f:5c:0b:a5:8b:0a:07:45:c2:3c:ed:1b:
25:42:45:40:1b:12:e7:23:60:47:9f:24:d7:9a:58:8d:68:3d:
03:75:4f:b9:93:b7:a3:6a:b7:a0:62:67:bb:7d:63:cf:79:24:
f0:a5:f0:23:9e:62:e9:47:92:94:94:97:50:91:2b:dc:49:8c:
92:4a:3a:d6:43:9b:bb:35:b1:d8:51:db:58:bf:d8:35:05:de:
bd:72:42:60:ad:4e:e6:90:11:19:6d:df:33:2e:02:38:c2:23:
c4:ee:fd:7a:e1:28:17:8f:1d:7d:07:83:fd:b4:a7:aa:41:be:
a2:eb:7c:28
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICTCowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDEz
NjA0MUEyRjUzRjI2QjQyMEQ2QkQ0RkQwRTlDMkQ3NzMyMDk3MTAeFw0yNTAzMjUw
NjA3NTVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDkyQjdDRjQ0M0JGOUNF
RjVBMjE0RkE1NUVGMDc5MDE1MkVBMUQwMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHF5FFLAcktK/EN470KbIqkcERSAIYq0u2EmbKrKAYfCB1D4SN
F8g/MWPdv643NjmX/u3v6DgoSXHO2DuL9AZHMVAuyBtsi6kpbZpxO7LTJvp0c1aa
ty6AjmCvuFBIGit9zH24VJm38HUngCGIODM5CygCAH93nCbfTFURYzY/mqluzrPu
XzttmuW15qj86rPW+uPZ7+gKs5FFJG/7rIZVbs2LS/k0l0mHpAFN6P28/vCtddto
PFuiJqTv+tnhHoyT3jypGzqUSzRmcwOvsbhoVQftXAevrq+gNt9lpNT2zk0OqI6R
++U6hGhNQrAm0qmP4NITavTLz9AaqBMhzJqTAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUkrfPRDv5zvWiFPpV7weQFS6h0CEwHwYDVR0jBBgwFoAUATYEGi9T8mtCDWvU
/Q6cLXcyCXEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYx
OC9BVFlFR2k5VDhtdENEV3ZVX1E2Y0xYY3lDWEUuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0FUWUVHaTlUOG10Q0RXdlVfUTZjTFhjeUNYRS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2MTgva3JmUFJEdjV6dldp
RlBwVjd3ZVFGUzZoMENFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGdmxTANBgkqhkiG9w0BAQsFAAOCAQEAgkLf+Vhfmlet7Wl8sMEEoSO3YBz2
oVkerqeIeCRahqi1XWZYEyUOL1KbDBMArHVMDEswAuy6jeEOkAgImrkWUa8C8qw1
jrWaWp15tFizFvdADeMT8SGOAoT71X2mkZ51RUnqGLxchbit8+y+WOmuKSblt4hs
eJhdnHMJnbKjo2S/7cAoj1wLpYsKB0XCPO0bJUJFQBsS5yNgR58k15pYjWg9A3VP
uZO3o2q3oGJnu31jz3kk8KXwI55i6UeSlJSXUJEr3EmMkko61kObuzWx2FHbWL/Y
NQXevXJCYK1O5pARGW3fMy4COMIjxO79euEoF48dfQeD/bSnqkG+out8KA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:17:16 2025 by rpki-client