Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2741/UJowLcJlZI70Jtg-ekk__7Zn__U.roa
File: UJowLcJlZI70Jtg-ekk__7Zn__U.roa (raw, json)
Hash identifier: dXXQNK99CBhQr7AAvwsWkEmCehZQZAHYN7WN1iWqJcA=
Subject key identifier: 50:9A:30:2D:C2:65:64:8E:F4:26:D8:3E:7A:49:3F:FF:B6:67:FF:F5
Certificate issuer: /CN=3C8625BACA079911E2B28299B4BD44FDCBFFF60C
Certificate serial: 0C79
Authority key identifier: 3C:86:25:BA:CA:07:99:11:E2:B2:82:99:B4:BD:44:FD:CB:FF:F6:0C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PIYlusoHmRHisoKZtL1E_cv_9gw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/UJowLcJlZI70Jtg-ekk__7Zn__U.roa
Signing time: Fri 17 Jan 2025 01:23:55 +0000
ROA not before: Fri 17 Jan 2025 01:23:55 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 21859
IP address blocks: 103.116.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3193 (0xc79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C8625BACA079911E2B28299B4BD44FDCBFFF60C
Validity
Not Before: Jan 17 01:23:55 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=509A302DC265648EF426D83E7A493FFFB667FFF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:80:26:68:1d:96:62:4c:34:3e:52:eb:78:48:
56:92:88:58:65:14:31:02:d5:a0:b3:a3:c1:2f:29:
99:99:13:12:52:68:0a:8d:a2:e4:dd:ae:47:ac:f6:
e6:d3:4b:f2:46:be:cb:b3:d2:cc:ba:6c:27:b6:2d:
36:02:8e:0b:8f:3e:f9:3f:47:cf:d5:01:e9:62:7e:
5d:d9:d9:de:38:f8:29:e6:a3:0c:e0:d5:8d:85:48:
b7:27:64:4c:94:1e:b5:1f:3c:e8:5e:7b:8a:07:99:
dd:2b:75:b9:23:54:03:62:be:9d:41:ff:71:4b:80:
c9:e6:c7:1a:6e:4a:22:a0:0b:c5:54:ee:95:b1:ed:
ce:33:a6:6a:2e:c5:62:bd:eb:ec:16:11:53:0e:30:
8c:78:08:9b:58:11:80:c2:c5:55:98:78:60:04:b7:
33:40:91:13:f8:a4:7c:f3:73:b2:bb:60:0b:59:57:
9b:f3:e0:cb:c7:da:80:fa:bc:14:74:53:58:97:60:
fb:70:b1:41:56:7d:54:ea:e0:a1:f9:60:c4:ea:bd:
7b:0c:ed:75:16:1a:b0:6f:88:77:d5:51:94:63:13:
6b:32:62:ce:a1:06:8e:a3:ed:3f:13:3e:16:80:9f:
2b:df:0d:7a:b1:7e:86:4b:c9:ce:b4:fd:45:08:58:
fd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9A:30:2D:C2:65:64:8E:F4:26:D8:3E:7A:49:3F:FF:B6:67:FF:F5
X509v3 Authority Key Identifier:
keyid:3C:86:25:BA:CA:07:99:11:E2:B2:82:99:B4:BD:44:FD:CB:FF:F6:0C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/PIYlusoHmRHisoKZtL1E_cv_9gw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/PIYlusoHmRHisoKZtL1E_cv_9gw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/UJowLcJlZI70Jtg-ekk__7Zn__U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.148.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:56:92:d4:dc:88:60:91:27:88:c6:c9:31:eb:4c:7b:b7:54:
01:c2:4f:e1:7e:ab:82:d8:dd:73:ec:10:44:a3:83:d0:ce:37:
2e:b1:db:0b:ce:52:53:84:f7:da:15:3c:ec:e1:c6:16:e1:b6:
d1:7c:d8:94:a8:c1:16:92:2a:ad:4d:52:6f:ab:50:bf:d8:97:
8a:b4:2e:7a:ec:a7:11:cc:6f:3a:f3:18:3e:2f:ef:a3:bc:a7:
c1:ad:87:c3:d6:59:e8:30:b4:c9:96:dc:bb:36:1c:6d:8d:04:
2d:62:cc:fa:b0:37:00:5c:45:84:e5:8d:15:e5:bc:c9:69:e1:
86:c5:ff:90:c2:08:33:05:bb:c9:93:ef:a0:75:a3:9d:86:8e:
2c:72:60:d7:ca:21:76:8b:1e:cc:0f:54:ce:e2:89:c4:59:7c:
9e:fa:36:aa:f6:b1:c3:2d:cd:d6:8a:cc:b7:e5:6b:dc:71:d6:
fa:dd:49:66:1f:0b:54:16:0e:31:f2:ae:80:38:00:e5:23:36:
c8:e6:34:a2:d9:cd:ce:8b:ed:06:4e:09:24:b7:b3:3a:00:69:
cb:61:97:20:07:8c:92:d0:7f:66:c9:6c:b5:37:96:23:42:ef:
1b:fb:b6:99:3d:e9:ac:16:33:05:8e:8e:4f:62:5d:2a:90:68:
4c:bb:ee:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:44:16 2025 by rpki-client