Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2618/mIQYWST3YcrwSleeIIEQP5ONM_o.roa
File: mIQYWST3YcrwSleeIIEQP5ONM_o.roa (raw, json)
Hash identifier: 31n9izE+ZdLBmMZX6Th/PuKHbVFQgdD/IB8DJzWO81M=
Subject key identifier: 98:84:18:59:24:F7:61:CA:F0:4A:57:9E:20:81:10:3F:93:8D:33:FA
Certificate issuer: /CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971
Certificate serial: 44D8
Authority key identifier: 01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/mIQYWST3YcrwSleeIIEQP5ONM_o.roa
Signing time: Wed 13 Mar 2024 01:21:27 +0000
ROA not before: Wed 13 Mar 2024 01:21:27 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 63603
IP address blocks: 103.102.196.0/24 maxlen: 24
103.102.197.0/24 maxlen: 24
103.102.198.0/24 maxlen: 24
103.102.199.0/24 maxlen: 24
163.53.44.0/24 maxlen: 24
163.53.45.0/24 maxlen: 24
163.53.46.0/24 maxlen: 24
163.53.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17624 (0x44d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971
Validity
Not Before: Mar 13 01:21:27 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9884185924F761CAF04A579E2081103F938D33FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b0:31:86:e0:fb:c0:a4:6d:2f:55:f0:f6:95:
0e:7f:bf:58:01:a5:16:11:2c:03:1b:c5:0f:fe:36:
a2:48:fc:42:33:5b:2d:9c:bd:75:24:5a:73:09:bb:
c5:df:8d:d7:40:f2:9c:cf:0f:74:5a:bd:fb:1f:d7:
98:e6:5e:4c:cb:6a:8f:99:81:58:3b:04:d6:65:1d:
87:1c:24:eb:9a:0e:c3:5c:b5:1c:e0:a3:89:ca:0f:
07:cc:8d:3e:d1:f7:f5:fc:c7:54:c6:c2:93:47:a3:
cc:d1:46:65:32:66:10:c3:65:cb:68:d5:9c:14:3c:
a5:33:b6:91:35:a6:ce:d7:e4:c3:e2:5d:f0:e6:2b:
3f:e6:6b:0d:cc:2e:f3:fe:bf:64:11:89:68:ae:bf:
b1:02:8a:a8:6e:40:99:e8:31:d1:8e:42:b4:4f:f7:
b4:37:d0:82:30:04:ee:8d:f5:fc:2f:4f:9f:6f:4c:
74:de:3b:65:4e:3c:78:b1:69:a8:a7:87:b1:f7:50:
33:98:fe:02:d0:4d:12:ac:b6:d2:0b:0d:fc:37:b3:
92:01:dd:58:9e:bc:90:1b:89:3e:17:49:3b:bd:1b:
79:94:57:d2:bb:ce:8e:07:8f:a9:10:22:35:86:bc:
69:0f:6c:41:00:3f:40:dc:ee:d8:6d:f2:62:e7:2b:
2d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:84:18:59:24:F7:61:CA:F0:4A:57:9E:20:81:10:3F:93:8D:33:FA
X509v3 Authority Key Identifier:
keyid:01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/mIQYWST3YcrwSleeIIEQP5ONM_o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.102.196.0/22
163.53.44.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:a1:4b:d9:1d:4f:58:9c:49:a6:c3:4f:b5:cf:7a:b2:9d:ad:
6a:5a:4a:a7:af:81:58:2f:94:f6:ce:5f:a0:ad:89:50:6f:c2:
a4:b6:76:d8:49:70:0f:6b:51:69:32:90:9e:bd:ab:cc:bd:1b:
5d:f8:0e:15:71:53:a1:1f:64:fa:7e:55:0f:7b:18:98:68:25:
e3:ef:95:f9:39:48:9a:82:f3:f7:6d:eb:7b:51:45:44:2f:99:
35:e9:17:7c:8b:5b:ed:31:b5:a6:eb:9b:11:b7:12:a7:32:60:
de:32:c4:fe:82:2b:8c:f0:a9:30:2e:43:96:ec:59:95:2b:40:
83:47:87:16:9a:99:32:7c:a3:c0:fe:e8:cb:a5:78:11:c9:fd:
16:3c:98:24:e9:73:85:15:88:9a:ca:7d:e9:e0:96:29:70:37:
f1:15:7e:22:08:af:63:b3:4b:a8:24:b6:5a:e3:93:f8:81:92:
e1:06:df:5f:b5:72:fe:9b:ae:86:40:a2:2f:f4:74:de:57:cf:
48:86:08:93:e1:d3:e9:58:91:22:4e:c8:c3:c7:bd:a2:8c:16:
27:a2:b5:fe:b1:f6:32:f7:04:e5:b2:36:83:10:80:c4:be:8e:
47:8e:6f:3d:65:e4:87:38:7b:66:85:49:ad:fd:3b:7a:82:63:
89:b3:7a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:25 2025 by rpki-client