Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2739/x9bpqLhAhX9qNX226VHCu7bO8F4.roa
File: x9bpqLhAhX9qNX226VHCu7bO8F4.roa (raw, json)
Hash identifier: RN0rk0sw5l70M2HAYil9zq4iBHqXzkq/SEDlRj6hoZM=
Subject key identifier: C7:D6:E9:A8:B8:40:85:7F:6A:35:7D:B6:E9:51:C2:BB:B6:CE:F0:5E
Certificate issuer: /CN=65DA61BDCA2CC0F8CA95D24D3942BC087D8C92A6
Certificate serial: 1B90
Authority key identifier: 65:DA:61:BD:CA:2C:C0:F8:CA:95:D2:4D:39:42:BC:08:7D:8C:92:A6
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZdphvcoswPjKldJNOUK8CH2MkqY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/x9bpqLhAhX9qNX226VHCu7bO8F4.roa
Signing time: Fri 17 Jan 2025 01:28:28 +0000
ROA not before: Fri 17 Jan 2025 01:28:28 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 137797
IP address blocks: 103.116.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7056 (0x1b90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65DA61BDCA2CC0F8CA95D24D3942BC087D8C92A6
Validity
Not Before: Jan 17 01:28:28 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C7D6E9A8B840857F6A357DB6E951C2BBB6CEF05E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c6:d5:6c:77:19:4d:a9:a9:29:97:86:5b:4b:
3b:42:9c:0c:e6:a7:a0:df:3e:0d:f5:f4:06:bb:40:
80:9b:42:7b:1c:c1:bc:88:3c:ba:13:39:b0:bc:e6:
81:4d:3e:7b:ca:05:6a:a1:2c:a1:bc:48:d3:0e:78:
57:a6:8e:9f:29:8b:5d:e0:4d:37:a4:24:79:82:5c:
fb:70:f8:95:0c:ac:1a:64:c5:0e:1d:83:40:98:e1:
bd:7e:46:f8:a0:a6:85:47:1e:df:3e:be:6c:bd:fb:
e1:00:f7:39:2f:c4:77:fe:69:bb:bc:08:fd:94:6d:
5b:20:ae:aa:d7:be:fe:b0:84:6a:e0:5b:94:00:d8:
7c:5c:78:9a:14:39:6f:f9:23:a7:7d:43:81:60:1a:
8a:5d:c6:c0:a0:0d:2b:c0:e7:d0:6c:f0:82:7c:ec:
ed:cf:6f:3d:cd:c8:3f:6d:c5:75:48:70:35:45:2b:
8c:4e:66:17:de:6b:5e:b4:c1:56:4b:c5:69:b8:d4:
05:d6:d6:ec:91:fa:c9:13:0a:02:73:a2:c0:d7:17:
36:20:02:c1:a5:7a:ae:e8:55:b8:6d:48:b7:61:a4:
23:8f:e5:b8:52:3a:e0:0c:bf:7f:af:86:ed:5f:a6:
5b:43:36:90:2d:14:e0:05:36:c1:77:37:b3:05:34:
4f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D6:E9:A8:B8:40:85:7F:6A:35:7D:B6:E9:51:C2:BB:B6:CE:F0:5E
X509v3 Authority Key Identifier:
keyid:65:DA:61:BD:CA:2C:C0:F8:CA:95:D2:4D:39:42:BC:08:7D:8C:92:A6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/ZdphvcoswPjKldJNOUK8CH2MkqY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZdphvcoswPjKldJNOUK8CH2MkqY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/x9bpqLhAhX9qNX226VHCu7bO8F4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:e2:42:4c:6a:14:54:22:2e:1a:94:60:50:be:0b:66:6a:8d:
a2:3e:bf:0c:2c:5c:49:e8:fb:10:ab:c5:68:a5:31:d8:cc:b2:
c8:34:e6:e3:d1:a6:4a:dc:50:2d:31:58:27:ad:aa:69:c4:8c:
91:e4:bb:d8:df:09:ef:81:79:a3:d1:4d:1c:33:17:67:10:5a:
25:9d:61:be:7b:69:40:fd:36:cb:01:12:01:21:48:10:74:78:
dc:ef:1c:94:78:8e:f9:77:f3:e0:22:af:cb:39:b7:4f:38:52:
48:9a:4f:97:3f:ff:44:32:82:cf:99:02:e8:9b:8b:4a:2b:f2:
52:bb:d7:74:c8:d5:1f:d2:7c:52:ab:72:55:c3:32:75:3a:0d:
a1:e1:a1:e2:d9:5a:7a:8d:47:77:1e:81:b7:39:82:b3:27:d0:
32:b2:da:35:b8:f3:3d:10:a7:d2:d1:9e:3b:88:21:13:aa:1f:
1c:04:93:cb:81:01:80:53:7d:4f:66:97:f8:39:31:a9:23:78:
79:1c:ae:3c:9e:5f:eb:ae:60:17:3b:94:9c:9b:5b:2d:f9:40:
98:f8:32:f8:e4:d1:85:01:90:51:e2:54:09:97:2f:ff:0f:96:
93:28:be:45:8f:e3:37:41:90:fa:ea:40:a1:1e:47:7a:e0:4a:
8d:69:80:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:45:04 2025 by rpki-client