Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/kxWqc6KKV0USCF-EEDrH_J6Nci4.roa
File: kxWqc6KKV0USCF-EEDrH_J6Nci4.roa (raw, json)
Hash identifier: RZHQnRlwyH7ECosbA0dTszqzsx5ZZP/YdjvupDcRoV8=
Subject key identifier: 93:15:AA:73:A2:8A:57:45:12:08:5F:84:10:3A:C7:FC:9E:8D:72:2E
Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Certificate serial: 24
Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/kxWqc6KKV0USCF-EEDrH_J6Nci4.roa
Signing time: Thu 17 Apr 2025 11:31:20 +0000
ROA not before: Thu 17 Apr 2025 11:31:20 +0000
ROA not after: Wed 15 Apr 2026 09:08:30 +0000
asID: 55933
IP address blocks: 103.132.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Validity
Not Before: Apr 17 11:31:20 2025 GMT
Not After : Apr 15 09:08:30 2026 GMT
Subject: CN=9315AA73A28A574512085F84103AC7FC9E8D722E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:1a:05:c3:85:78:78:41:7c:dc:2e:39:1a:93:
9d:c4:0e:d3:58:36:22:ae:77:3f:73:fb:84:04:36:
12:31:6b:ea:3d:25:1a:6c:a7:d1:fc:90:c8:7d:d0:
4d:38:79:81:51:58:67:b8:65:d4:37:63:d6:f1:62:
ee:dd:b4:09:a7:26:52:87:9d:3e:e9:0b:08:51:5a:
03:c0:07:20:c6:4f:6a:16:90:58:d5:93:3c:9d:70:
fe:12:d3:8e:a7:c0:a6:d3:f9:67:3d:f6:c0:a8:46:
c9:66:0a:55:38:ac:7a:0c:4e:b7:f4:41:8b:a7:f9:
db:32:f3:2b:0b:c9:a8:48:1b:ee:a4:a8:a8:f3:1f:
ff:85:94:91:58:9d:02:ff:0f:46:de:d0:88:fd:a2:
01:3f:d0:bb:a5:fb:df:d4:58:52:d9:18:9c:28:cf:
31:61:46:19:a2:77:5f:5b:e8:52:43:fd:d7:26:ab:
0c:de:5b:a1:25:8a:a0:b9:5e:80:41:6d:f6:13:63:
e0:47:18:24:52:16:73:a3:9c:7c:51:82:82:32:0a:
26:bb:a9:db:e6:6b:52:9d:ba:87:24:74:60:55:a3:
21:e1:73:05:e9:48:30:1b:89:77:60:23:44:1b:4a:
14:57:ff:7c:c5:37:9e:74:0a:8c:94:04:b3:6f:96:
e4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:15:AA:73:A2:8A:57:45:12:08:5F:84:10:3A:C7:FC:9E:8D:72:2E
X509v3 Authority Key Identifier:
keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/kxWqc6KKV0USCF-EEDrH_J6Nci4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.132.160.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:61:5a:08:05:38:10:db:f3:bc:c0:af:77:52:0a:ff:eb:ca:
02:2c:c3:1e:c3:e8:aa:0d:32:76:77:e9:9c:18:4d:a7:d3:81:
be:d8:84:cc:5a:48:c5:14:be:46:ed:69:e4:8c:c8:c2:64:2a:
d8:d7:b5:dd:bf:ae:c6:69:a3:9b:f8:b2:33:46:9d:88:3b:11:
a3:1d:1a:13:3c:92:36:d9:26:ce:c3:e8:82:95:20:ee:a7:b8:
fa:a0:5b:d1:49:ee:7c:8f:d3:b8:6f:a2:8a:80:b3:75:68:9d:
a4:68:9e:50:99:51:9c:4f:2e:28:df:6a:84:18:96:3f:a5:99:
bf:94:b4:26:ff:26:73:16:cf:ef:75:10:8a:5e:43:cd:87:c6:
dc:c1:8b:1d:ac:d4:01:f3:83:e3:44:47:b4:39:02:46:73:7f:
d5:c3:9c:d3:02:63:9a:2a:85:84:1e:c5:ad:a6:d1:e1:18:fd:
53:09:b0:3c:30:ca:a0:5f:3b:82:32:05:f0:92:11:f2:52:fc:
2e:33:31:d0:80:51:6e:0b:f9:53:33:92:bd:68:81:72:f4:33:
bd:e4:86:d4:77:7a:30:ec:13:6c:15:5d:5b:a5:cd:f8:96:37:
1d:60:bf:6d:1e:c2:fc:79:ae:b5:48:81:c5:40:45:27:da:22:
0a:ee:26:02
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgIBJDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzOUVF
ODUyRkUxMzhDREVEQzVCNDJEMTFBMzQyOTVEMTA5QUQ0OTI1MB4XDTI1MDQxNzEx
MzEyMFoXDTI2MDQxNTA5MDgzMFowMzExMC8GA1UEAxMoOTMxNUFBNzNBMjhBNTc0
NTEyMDg1Rjg0MTAzQUM3RkM5RThENzIyRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAO8aBcOFeHhBfNwuORqTncQO01g2Iq53P3P7hAQ2EjFr6j0lGmyn
0fyQyH3QTTh5gVFYZ7hl1Ddj1vFi7t20CacmUoedPukLCFFaA8AHIMZPahaQWNWT
PJ1w/hLTjqfAptP5Zz32wKhGyWYKVTisegxOt/RBi6f52zLzKwvJqEgb7qSoqPMf
/4WUkVidAv8PRt7QiP2iAT/Qu6X739RYUtkYnCjPMWFGGaJ3X1voUkP91yarDN5b
oSWKoLlegEFt9hNj4EcYJFIWc6OcfFGCgjIKJrup2+ZrUp26hyR0YFWjIeFzBelI
MBuJd2AjRBtKFFf/fMU3nnQKjJQEs2+W5KcCAwEAAaOCAfMwggHvMB0GA1UdDgQW
BBSTFapzoopXRRIIX4QQOsf8no1yLjAfBgNVHSMEGDAWgBQ57oUv4TjN7cW0LRGj
QpXRCa1JJTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNzE2
L09lNkZMLUU0emUzRnRDMFJvMEtWMFFtdFNTVS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvT2U2RkwtRTR6ZTNGdEMwUm8wS1YwUW10U1NVLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcxNi9reFdxYzZLS1YwVVND
Ri1FRURySF9KNk5jaTQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQCZ4SgMA0GCSqGSIb3DQEBCwUAA4IBAQC2YVoIBTgQ2/O8wK93Ugr/68oCLMMe
w+iqDTJ2d+mcGE2n04G+2ITMWkjFFL5G7WnkjMjCZCrY17Xdv67GaaOb+LIzRp2I
OxGjHRoTPJI22SbOw+iClSDup7j6oFvRSe58j9O4b6KKgLN1aJ2kaJ5QmVGcTy4o
32qEGJY/pZm/lLQm/yZzFs/vdRCKXkPNh8bcwYsdrNQB84PjREe0OQJGc3/Vw5zT
AmOaKoWEHsWtptHhGP1TCbA8MMqgXzuCMgXwkhHyUvwuMzHQgFFuC/lTM5K9aIFy
9DO95IbUd3ow7BNsFV1bpc34ljcdYL9tHsL8ea61SIHFQEUn2iIK7iYC
-----END CERTIFICATE-----
Generated at Thu Jun 5 20:05:24 2025 by rpki-client