Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2739/4uklLsPfoxE79Kxnm-BvKPP2ly8.roa
File: 4uklLsPfoxE79Kxnm-BvKPP2ly8.roa (raw, json)
Hash identifier: Lnp3SsoDEtTBxBYSvxm8pagjQwhoG+5G4qXTNmds4ho=
Subject key identifier: E2:E9:25:2E:C3:DF:A3:11:3B:F4:AC:67:9B:E0:6F:28:F3:F6:97:2F
Certificate issuer: /CN=65DA61BDCA2CC0F8CA95D24D3942BC087D8C92A6
Certificate serial: 1B8E
Authority key identifier: 65:DA:61:BD:CA:2C:C0:F8:CA:95:D2:4D:39:42:BC:08:7D:8C:92:A6
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZdphvcoswPjKldJNOUK8CH2MkqY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/4uklLsPfoxE79Kxnm-BvKPP2ly8.roa
Signing time: Fri 17 Jan 2025 01:28:28 +0000
ROA not before: Fri 17 Jan 2025 01:28:28 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 131482
IP address blocks: 103.116.120.0/22 maxlen: 24
103.116.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7054 (0x1b8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65DA61BDCA2CC0F8CA95D24D3942BC087D8C92A6
Validity
Not Before: Jan 17 01:28:28 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=E2E9252EC3DFA3113BF4AC679BE06F28F3F6972F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d1:6b:8a:2f:33:b4:23:a3:d8:68:35:55:d1:
5b:d5:7c:ac:b0:80:9b:ac:29:e8:ea:95:5a:4f:9f:
7b:14:d4:cc:6c:c0:b0:30:be:df:24:64:22:9c:8f:
49:5c:7b:84:ff:41:7f:84:08:5e:46:59:79:87:5e:
c9:f6:00:2d:27:8a:9e:13:9b:b1:12:e3:73:6f:8b:
05:f9:06:80:1e:b4:75:1a:fd:cb:39:48:2b:f8:3c:
f8:ca:bf:e0:47:36:aa:00:f8:cf:87:de:72:00:81:
68:ae:69:41:46:10:b8:c2:39:47:7e:60:50:af:c3:
9a:62:32:52:f3:a7:88:b3:b8:e5:b6:ee:1a:7d:04:
fb:60:e8:6f:d2:82:21:92:20:2d:88:6f:b1:ca:79:
84:9e:4a:eb:e9:7e:00:68:13:55:3d:e1:dc:7b:a6:
3a:79:fe:ae:bb:02:52:e5:55:e7:68:99:6f:c4:ea:
1e:af:37:c7:08:32:13:98:85:72:f7:b6:33:33:41:
f7:37:e1:7e:dd:c1:29:0f:dd:bc:0d:8d:bb:1b:1b:
de:1f:00:6b:66:48:7e:80:ba:14:a9:8e:53:0e:3d:
74:1c:40:57:28:5f:17:c4:df:20:cd:09:bc:b6:71:
e1:a2:27:0d:29:b7:51:b0:ae:0b:32:f0:51:5a:27:
96:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E9:25:2E:C3:DF:A3:11:3B:F4:AC:67:9B:E0:6F:28:F3:F6:97:2F
X509v3 Authority Key Identifier:
keyid:65:DA:61:BD:CA:2C:C0:F8:CA:95:D2:4D:39:42:BC:08:7D:8C:92:A6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/ZdphvcoswPjKldJNOUK8CH2MkqY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZdphvcoswPjKldJNOUK8CH2MkqY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/4uklLsPfoxE79Kxnm-BvKPP2ly8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.120.0/22
Signature Algorithm: sha256WithRSAEncryption
06:c6:32:bd:bb:78:03:bb:25:c5:3a:89:e6:69:25:44:64:2e:
c0:e0:52:2f:bd:67:18:64:55:92:3d:b3:2b:98:f4:d3:3e:cd:
02:a6:01:6a:27:f6:f8:93:18:8a:97:06:d3:39:c6:96:e9:ed:
a0:b7:43:9a:c6:21:83:29:92:d9:95:e5:18:fa:b2:e8:f4:1a:
9d:34:36:4b:c0:78:b2:6a:15:a3:34:7c:b5:84:8a:43:e8:47:
3e:24:db:a5:2f:49:b7:1b:cc:e6:dd:a8:7f:4a:9a:01:55:49:
89:cf:c6:ec:da:88:f0:1c:53:97:b1:77:b3:18:32:4c:2b:30:
62:a3:16:22:56:94:3e:07:92:4c:d4:c9:41:dc:55:87:f4:1f:
25:43:87:81:77:f5:5e:17:ca:93:17:c7:3a:0e:0a:2a:b4:5c:
06:52:53:e2:b9:55:2d:80:40:bf:02:35:f6:4b:e9:6a:6c:35:
19:ed:fe:a9:21:40:e8:9c:ea:a0:ef:55:da:95:9a:49:7b:5a:
63:34:c0:57:52:53:d1:35:27:26:18:d1:1b:a4:e0:54:aa:be:
98:97:69:bc:6d:b5:79:98:39:f7:45:ad:28:e4:19:21:19:9a:
44:8d:4a:08:fd:91:53:5f:1c:15:cf:bd:4e:7b:fe:07:f0:78:
99:4a:67:1d
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICG44wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjVE
QTYxQkRDQTJDQzBGOENBOTVEMjREMzk0MkJDMDg3RDhDOTJBNjAeFw0yNTAxMTcw
MTI4MjhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEUyRTkyNTJFQzNERkEz
MTEzQkY0QUM2NzlCRTA2RjI4RjNGNjk3MkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC50WuKLzO0I6PYaDVV0VvVfKywgJusKejqlVpPn3sU1MxswLAw
vt8kZCKcj0lce4T/QX+ECF5GWXmHXsn2AC0nip4Tm7ES43NviwX5BoAetHUa/cs5
SCv4PPjKv+BHNqoA+M+H3nIAgWiuaUFGELjCOUd+YFCvw5piMlLzp4izuOW27hp9
BPtg6G/SgiGSIC2Ib7HKeYSeSuvpfgBoE1U94dx7pjp5/q67AlLlVedomW/E6h6v
N8cIMhOYhXL3tjMzQfc34X7dwSkP3bwNjbsbG94fAGtmSH6AuhSpjlMOPXQcQFco
XxfE3yDNCby2ceGiJw0pt1Gwrgsy8FFaJ5bRAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQU4uklLsPfoxE79Kxnm+BvKPP2ly8wHwYDVR0jBBgwFoAUZdphvcoswPjKldJN
OUK8CH2MkqYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcz
OS9aZHBodmNvc3dQaktsZEpOT1VLOENIMk1rcVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1pkcGh2Y29zd1BqS2xkSk5PVUs4Q0gyTWtxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3MzkvNHVrbExzUGZveEU3
OUt4bm0tQnZLUFAybHk4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmd0eDANBgkqhkiG9w0BAQsFAAOCAQEABsYyvbt4A7slxTqJ5mklRGQuwOBS
L71nGGRVkj2zK5j00z7NAqYBaif2+JMYipcG0znGluntoLdDmsYhgymS2ZXlGPqy
6PQanTQ2S8B4smoVozR8tYSKQ+hHPiTbpS9JtxvM5t2of0qaAVVJic/G7NqI8BxT
l7F3sxgyTCswYqMWIlaUPgeSTNTJQdxVh/QfJUOHgXf1XhfKkxfHOg4KKrRcBlJT
4rlVLYBAvwI19kvpamw1Ge3+qSFA6JzqoO9V2pWaSXtaYzTAV1JT0TUnJhjRG6Tg
VKq+mJdpvG21eZg590WtKOQZIRmaRI1KCP2RU18cFc+9Tnv+B/B4mUpnHQ==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:42 2025 by rpki-client