Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2738/kQFDATsXYrdy4QJt7F5sn1Sy2EM.roa
File: kQFDATsXYrdy4QJt7F5sn1Sy2EM.roa (raw, json)
Hash identifier: XHI0J5/o5O5ceg1Z+ckCn+FaTtcIPko4W8gNfs++aKE=
Subject key identifier: 91:01:43:01:3B:17:62:B7:72:E1:02:6D:EC:5E:6C:9F:54:B2:D8:43
Certificate issuer: /CN=8E3E027142C633D56598418DF6DEBC01BDD8008C
Certificate serial: 12A0
Authority key identifier: 8E:3E:02:71:42:C6:33:D5:65:98:41:8D:F6:DE:BC:01:BD:D8:00:8C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jj4CcULGM9VlmEGN9t68Ab3YAIw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/kQFDATsXYrdy4QJt7F5sn1Sy2EM.roa
Signing time: Fri 17 Jan 2025 01:26:59 +0000
ROA not before: Fri 17 Jan 2025 01:26:59 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 137798
IP address blocks: 103.116.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4768 (0x12a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E3E027142C633D56598418DF6DEBC01BDD8008C
Validity
Not Before: Jan 17 01:26:59 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=910143013B1762B772E1026DEC5E6C9F54B2D843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e7:9b:0c:01:b7:b3:65:7c:49:a5:4b:66:41:
1b:b8:79:d0:85:79:10:ec:d9:d5:a2:e4:5e:31:c6:
ea:d5:80:60:61:20:d4:2d:80:44:d2:18:87:1f:9a:
39:2f:d7:ef:c4:e1:38:aa:ff:2c:c9:ff:4a:fd:8a:
9a:49:df:43:4d:f8:3b:2e:41:3c:eb:86:67:94:e6:
b6:46:b0:4f:ce:fa:93:94:4b:8a:9b:c9:42:49:ef:
88:85:ec:78:ca:bd:47:0b:64:e6:f1:5e:3c:fa:b9:
37:eb:87:06:50:52:c2:85:fd:f3:cc:92:65:f3:be:
5d:10:cd:71:d2:27:bc:5d:04:d6:d2:5b:54:6c:26:
cc:72:1e:dc:ee:e5:eb:a1:4b:04:80:38:70:8b:32:
84:7f:9e:b5:e7:9f:2f:0b:52:0a:38:2d:27:3b:94:
71:d8:5f:89:29:04:bf:8b:15:89:d2:aa:f4:98:9b:
e0:43:41:04:17:9e:1f:2f:4a:ad:42:19:e1:c2:74:
91:d7:ca:42:39:b1:fd:f6:39:8a:36:9a:02:09:90:
d8:fe:8a:6d:3e:fb:0b:28:e1:b1:0a:0c:1e:0b:23:
97:73:c2:32:59:12:b7:67:85:11:ed:1b:a6:8a:26:
c0:a1:01:f4:36:81:b4:25:0e:cb:da:43:88:93:b5:
fd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:01:43:01:3B:17:62:B7:72:E1:02:6D:EC:5E:6C:9F:54:B2:D8:43
X509v3 Authority Key Identifier:
keyid:8E:3E:02:71:42:C6:33:D5:65:98:41:8D:F6:DE:BC:01:BD:D8:00:8C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/jj4CcULGM9VlmEGN9t68Ab3YAIw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jj4CcULGM9VlmEGN9t68Ab3YAIw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/kQFDATsXYrdy4QJt7F5sn1Sy2EM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.92.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:58:ed:84:98:66:51:02:72:f0:c3:1b:0a:b8:87:c1:f1:93:
f5:66:e1:8a:ad:ce:8c:f7:5c:4f:c4:00:8a:5c:8b:76:70:bf:
20:06:6e:d8:9c:58:ee:f7:3d:31:f4:e4:e6:74:89:23:aa:3f:
21:a4:65:b3:a9:f2:98:1a:1f:b1:3a:63:9e:eb:2a:3f:9b:bd:
c1:f8:71:59:d3:c2:39:c0:fb:64:d6:6e:7d:04:d1:9d:51:dc:
c4:a1:80:63:77:d9:f0:90:48:d1:40:23:7f:a5:0a:81:e1:ed:
9d:29:71:d4:a7:1d:c9:f0:79:c8:35:fc:3c:dc:f9:b6:7e:d5:
10:43:2d:32:7d:c8:97:54:73:c7:8a:01:ca:f2:04:53:eb:82:
71:aa:8e:ee:86:de:6e:36:62:b8:98:15:97:ad:e9:d4:be:e4:
71:85:43:f1:3a:e6:86:75:50:d1:24:08:66:fa:15:03:c7:46:
98:8c:91:e9:9a:09:b6:6e:09:49:af:32:f6:d4:45:f6:fa:dc:
d5:dd:11:fd:e1:d0:9f:93:63:7d:14:83:f5:e5:82:06:fd:20:
61:a1:f6:59:b9:cd:9a:58:e3:74:40:b8:87:af:f3:c4:b0:7d:
bf:a9:78:37:c1:2b:df:03:8d:c6:5d:1a:c4:e6:bd:53:de:c1:
c3:4f:d5:e6
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICEqAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEUz
RTAyNzE0MkM2MzNENTY1OTg0MThERjZERUJDMDFCREQ4MDA4QzAeFw0yNTAxMTcw
MTI2NTlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDkxMDE0MzAxM0IxNzYy
Qjc3MkUxMDI2REVDNUU2QzlGNTRCMkQ4NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/55sMAbezZXxJpUtmQRu4edCFeRDs2dWi5F4xxurVgGBhINQt
gETSGIcfmjkv1+/E4Tiq/yzJ/0r9ippJ30NN+DsuQTzrhmeU5rZGsE/O+pOUS4qb
yUJJ74iF7HjKvUcLZObxXjz6uTfrhwZQUsKF/fPMkmXzvl0QzXHSJ7xdBNbSW1Rs
JsxyHtzu5euhSwSAOHCLMoR/nrXnny8LUgo4LSc7lHHYX4kpBL+LFYnSqvSYm+BD
QQQXnh8vSq1CGeHCdJHXykI5sf32OYo2mgIJkNj+im0++wso4bEKDB4LI5dzwjJZ
ErdnhRHtG6aKJsChAfQ2gbQlDsvaQ4iTtf2BAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUkQFDATsXYrdy4QJt7F5sn1Sy2EMwHwYDVR0jBBgwFoAUjj4CcULGM9VlmEGN
9t68Ab3YAIwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcz
OC9qajRDY1VMR005VmxtRUdOOXQ2OEFiM1lBSXcuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2pqNENjVUxHTTlWbG1FR045dDY4QWIzWUFJdy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3Mzgva1FGREFUc1hZcmR5
NFFKdDdGNXNuMVN5MkVNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGd0XDANBgkqhkiG9w0BAQsFAAOCAQEAtljthJhmUQJy8MMbCriHwfGT9Wbh
iq3OjPdcT8QAilyLdnC/IAZu2JxY7vc9MfTk5nSJI6o/IaRls6nymBofsTpjnusq
P5u9wfhxWdPCOcD7ZNZufQTRnVHcxKGAY3fZ8JBI0UAjf6UKgeHtnSlx1KcdyfB5
yDX8PNz5tn7VEEMtMn3Il1Rzx4oByvIEU+uCcaqO7obebjZiuJgVl63p1L7kcYVD
8TrmhnVQ0SQIZvoVA8dGmIyR6ZoJtm4JSa8y9tRF9vrc1d0R/eHQn5NjfRSD9eWC
Bv0gYaH2WbnNmljjdEC4h6/zxLB9v6l4N8Er3wONxl0axOa9U97Bw0/V5g==
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:34:37 2025 by rpki-client