Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2716/mUPlYHvzC2Qg-oc5E4_6b01HZpQ.roa
File: mUPlYHvzC2Qg-oc5E4_6b01HZpQ.roa (raw, json)
Hash identifier: q+hoj8rdnq8y2L+mxUUYCqa2/TNuaG171FDNNkJXop4=
Subject key identifier: 99:43:E5:60:7B:F3:0B:64:20:FA:87:39:13:8F:FA:6F:4D:47:66:94
Certificate issuer: /CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Certificate serial: 0144
Authority key identifier: 39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/mUPlYHvzC2Qg-oc5E4_6b01HZpQ.roa
Signing time: Fri 30 May 2025 16:02:24 +0000
ROA not before: Fri 30 May 2025 16:02:24 +0000
ROA not after: Wed 15 Apr 2026 09:08:30 +0000
asID: 216047
IP address blocks: 103.216.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 324 (0x144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39EE852FE138CDEDC5B42D11A34295D109AD4925
Validity
Not Before: May 30 16:02:24 2025 GMT
Not After : Apr 15 09:08:30 2026 GMT
Subject: CN=9943E5607BF30B6420FA8739138FFA6F4D476694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e6:bb:05:5c:fc:17:0e:c0:f1:99:aa:83:e6:
31:81:37:02:4e:99:9e:ac:19:ac:c5:99:85:05:8a:
25:58:f2:2d:53:b7:75:c8:3f:7b:7a:b3:d8:8d:8c:
79:c2:7e:86:93:36:79:c6:fb:22:78:3f:bc:5b:29:
dd:78:2a:cd:d1:4b:1a:6e:bb:d4:31:8b:8d:dc:1b:
5d:3d:2a:72:48:16:8e:e0:88:0e:c2:c2:17:77:bb:
01:ea:4b:cd:4e:3d:1a:ba:71:8b:00:be:2c:a5:b9:
f6:b8:65:0c:bc:7d:5a:d0:b6:3f:1b:69:57:dc:b3:
7f:65:b6:4c:64:c2:83:f9:91:1f:27:ed:53:1a:fc:
0f:e1:b7:b9:90:e8:a8:3e:98:0d:68:b0:e8:48:8b:
21:17:ef:55:f6:a7:8e:01:2f:55:90:a1:6b:e9:f8:
ce:26:88:c6:9f:2c:24:d9:3b:ed:31:0b:7c:b9:20:
6b:68:a0:5a:7c:1b:ef:d2:ab:46:26:8a:81:24:b9:
c0:7c:1b:89:b0:9a:69:06:d7:1a:29:df:cc:64:01:
30:50:b0:d9:36:af:50:1e:23:48:cf:1e:f2:dc:69:
10:cc:b1:48:1a:0b:7c:f1:a9:9e:cb:22:2c:46:d4:
80:35:c7:bc:ae:52:a4:76:df:8e:1c:ad:2e:c8:b8:
7f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:43:E5:60:7B:F3:0B:64:20:FA:87:39:13:8F:FA:6F:4D:47:66:94
X509v3 Authority Key Identifier:
keyid:39:EE:85:2F:E1:38:CD:ED:C5:B4:2D:11:A3:42:95:D1:09:AD:49:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Oe6FL-E4ze3FtC0Ro0KV0QmtSSU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2716/mUPlYHvzC2Qg-oc5E4_6b01HZpQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.216.228.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:c2:05:52:27:da:99:a0:a2:f2:12:4f:f1:d3:4f:e2:ba:13:
55:56:be:39:ce:44:03:b4:52:f3:4d:6d:9a:25:57:ef:03:2d:
17:89:60:25:cc:a6:d6:bc:eb:3b:39:4d:c8:4f:6a:ac:bb:6a:
7c:e0:63:fb:90:8c:ff:07:19:23:f6:ae:55:e7:ca:a2:02:1e:
2e:b7:6a:3e:60:f5:0e:f5:c6:af:c4:70:19:5d:9d:0e:ca:d5:
b5:39:c2:48:d3:0b:49:9a:f1:0a:18:2b:d7:e2:19:33:32:02:
10:ed:0c:b7:d3:5d:9f:e3:1d:65:00:2a:77:02:6d:f2:99:f1:
14:ad:3d:c5:7f:39:20:e9:fe:b5:de:93:ce:e6:46:df:e6:4d:
5b:e7:02:67:d4:1f:90:ae:b3:b2:66:24:cc:4b:e9:43:ee:c6:
83:9d:ea:fa:a9:5c:f8:b8:54:fa:db:e1:4c:93:12:8e:c4:95:
67:e5:f4:d6:d8:b5:38:ea:46:0c:ec:18:65:14:72:5f:b7:d9:
ae:58:da:fd:d7:83:58:3b:0f:b8:39:17:1b:22:78:51:5c:08:
bf:a1:59:d4:a7:a4:eb:a9:7e:66:02:4c:db:61:e5:97:a8:b2:
29:0a:15:82:95:64:8f:94:49:68:bf:ae:4a:81:92:2d:b1:89:
a3:2d:0f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:53:26 2025 by rpki-client