Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2639/vRo9vgL-xjdBRH0vTw2uYBwgSXw.roa
File: vRo9vgL-xjdBRH0vTw2uYBwgSXw.roa (raw, json)
Hash identifier: tCVuBUyEUM57dgnufusnZUsvqrjJxRpLl47S9uhlG5Q=
Subject key identifier: BD:1A:3D:BE:02:FE:C6:37:41:44:7D:2F:4F:0D:AE:60:1C:20:49:7C
Certificate issuer: /CN=262CFF5632E4BCD10211BFA08B63F49FC9469F03
Certificate serial: 20FF
Authority key identifier: 26:2C:FF:56:32:E4:BC:D1:02:11:BF:A0:8B:63:F4:9F:C9:46:9F:03
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Jiz_VjLkvNECEb-gi2P0n8lGnwM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/vRo9vgL-xjdBRH0vTw2uYBwgSXw.roa
Signing time: Fri 21 Mar 2025 03:28:27 +0000
ROA not before: Fri 21 Mar 2025 03:28:27 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 24424
IP address blocks: 103.104.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8447 (0x20ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=262CFF5632E4BCD10211BFA08B63F49FC9469F03
Validity
Not Before: Mar 21 03:28:27 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=BD1A3DBE02FEC63741447D2F4F0DAE601C20497C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cf:6e:7a:18:89:49:76:c2:67:c8:21:d2:d9:
09:35:fa:4f:06:a3:cd:a9:5f:5d:5a:bb:c6:58:3c:
d8:54:af:4e:47:42:1d:12:fb:be:55:23:98:55:3b:
3f:3a:4d:59:7b:1b:8e:96:2e:e3:79:13:7f:e6:b8:
2a:81:1d:1a:45:37:63:fb:4d:1f:82:b1:b5:2b:ed:
d8:5c:fe:98:1c:af:d2:36:35:10:c4:b0:b9:23:1d:
48:09:27:96:8e:55:45:91:1d:f2:b0:ed:db:64:86:
92:02:da:6c:97:dd:55:c4:77:36:db:2e:d8:c6:32:
cc:91:7a:96:bd:40:9f:e1:65:63:85:dd:96:d4:60:
ae:8c:28:1f:6d:7c:56:81:da:e1:cc:1d:f3:95:11:
6c:28:34:b1:19:95:4a:1e:53:33:48:3b:67:9b:b3:
45:2b:70:52:09:f3:90:dd:7e:1d:48:e3:64:51:ba:
37:b6:b2:63:7e:7e:7d:49:13:ab:f0:40:a7:56:a9:
d4:a7:fe:1d:89:ea:c3:24:d5:34:66:3d:93:88:94:
19:75:aa:f4:ea:c6:03:30:40:de:19:18:29:e1:f4:
ca:6e:b0:2b:40:3c:f4:d5:4f:81:f9:2f:d7:70:d1:
27:c2:f2:5a:7b:47:b8:4e:4c:98:88:86:a6:92:89:
02:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1A:3D:BE:02:FE:C6:37:41:44:7D:2F:4F:0D:AE:60:1C:20:49:7C
X509v3 Authority Key Identifier:
keyid:26:2C:FF:56:32:E4:BC:D1:02:11:BF:A0:8B:63:F4:9F:C9:46:9F:03
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/Jiz_VjLkvNECEb-gi2P0n8lGnwM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Jiz_VjLkvNECEb-gi2P0n8lGnwM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/vRo9vgL-xjdBRH0vTw2uYBwgSXw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.152.0/22
Signature Algorithm: sha256WithRSAEncryption
27:8f:94:15:7d:aa:6c:7a:7c:1f:40:f1:7e:d4:d1:7a:b2:08:
9f:19:6b:2e:57:d9:45:9f:22:d8:48:cb:bc:6e:a8:f1:43:6c:
a5:e7:b0:71:5b:a4:01:4f:da:bf:3f:a8:c4:33:78:46:ce:b5:
70:ac:0f:4e:ce:75:af:c3:2e:63:46:52:44:31:1b:b8:8e:f1:
e0:30:22:91:69:f0:f0:9a:8a:4f:2e:db:db:12:28:f2:40:be:
2b:87:c0:13:59:bd:70:73:1d:3f:50:ec:15:67:c3:4c:bf:e5:
fd:ff:31:b7:20:03:58:29:ba:64:fe:cf:0a:18:a3:91:10:bd:
03:5c:b3:33:43:fb:87:57:c6:35:12:ec:2d:c8:c2:5f:37:0b:
74:aa:9c:71:1e:62:ee:5d:80:63:3f:0f:44:4b:d1:f9:74:c5:
d9:ef:a9:3b:1a:1b:a0:db:c4:18:e7:91:a5:c3:61:0f:11:2c:
92:d8:00:7a:1e:a5:15:62:99:14:66:c8:87:b8:59:12:f3:00:
d0:ab:ac:d3:82:f3:1b:4c:dc:92:81:d0:ca:f1:5e:32:27:7d:
41:aa:13:b2:7d:0d:60:62:53:34:83:13:b0:44:b6:51:ff:92:
d9:7b:95:d7:08:18:76:c9:ee:76:14:39:06:59:bc:1a:74:db:
40:be:b9:ad
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICIP8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjYy
Q0ZGNTYzMkU0QkNEMTAyMTFCRkEwOEI2M0Y0OUZDOTQ2OUYwMzAeFw0yNTAzMjEw
MzI4MjdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEJEMUEzREJFMDJGRUM2
Mzc0MTQ0N0QyRjRGMERBRTYwMUMyMDQ5N0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCsz256GIlJdsJnyCHS2Qk1+k8Go82pX11au8ZYPNhUr05HQh0S
+75VI5hVOz86TVl7G46WLuN5E3/muCqBHRpFN2P7TR+CsbUr7dhc/pgcr9I2NRDE
sLkjHUgJJ5aOVUWRHfKw7dtkhpIC2myX3VXEdzbbLtjGMsyRepa9QJ/hZWOF3ZbU
YK6MKB9tfFaB2uHMHfOVEWwoNLEZlUoeUzNIO2ebs0UrcFIJ85Ddfh1I42RRuje2
smN+fn1JE6vwQKdWqdSn/h2J6sMk1TRmPZOIlBl1qvTqxgMwQN4ZGCnh9MpusCtA
PPTVT4H5L9dw0SfC8lp7R7hOTJiIhqaSiQJFAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUvRo9vgL+xjdBRH0vTw2uYBwgSXwwHwYDVR0jBBgwFoAUJiz/VjLkvNECEb+g
i2P0n8lGnwMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYz
OS9KaXpfVmpMa3ZORUNFYi1naTJQMG44bEdud00uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0ppel9Wakxrdk5FQ0ViLWdpMlAwbjhsR253TS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2MzkvdlJvOXZnTC14amRC
UkgwdlR3MnVZQndnU1h3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmdomDANBgkqhkiG9w0BAQsFAAOCAQEAJ4+UFX2qbHp8H0DxftTRerIInxlr
LlfZRZ8i2EjLvG6o8UNspeewcVukAU/avz+oxDN4Rs61cKwPTs51r8MuY0ZSRDEb
uI7x4DAikWnw8JqKTy7b2xIo8kC+K4fAE1m9cHMdP1DsFWfDTL/l/f8xtyADWCm6
ZP7PChijkRC9A1yzM0P7h1fGNRLsLcjCXzcLdKqccR5i7l2AYz8PREvR+XTF2e+p
OxoboNvEGOeRpcNhDxEsktgAeh6lFWKZFGbIh7hZEvMA0Kus04LzG0zckoHQyvFe
Mid9QaoTsn0NYGJTNIMTsES2Uf+S2XuV1wgYdsnudhQ5Blm8GnTbQL65rQ==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:39:42 2025 by rpki-client