Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2741/jZYYEWocgaa7kE62wHrtcbhmeqg.roa
File: jZYYEWocgaa7kE62wHrtcbhmeqg.roa (raw, json)
Hash identifier: imxvfDsgpwHiKGk2ShLZNPp9PfRPBN6EzLl65EE3xwI=
Subject key identifier: 8D:96:18:11:6A:1C:81:A6:BB:90:4E:B6:C0:7A:ED:71:B8:66:7A:A8
Certificate issuer: /CN=FAD6B43C09D0490A0DF7F891DF9F63B520CF210F
Certificate serial: 0DB6
Authority key identifier: FA:D6:B4:3C:09:D0:49:0A:0D:F7:F8:91:DF:9F:63:B5:20:CF:21:0F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-ta0PAnQSQoN9_iR359jtSDPIQ8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/jZYYEWocgaa7kE62wHrtcbhmeqg.roa
Signing time: Fri 21 Mar 2025 03:27:39 +0000
ROA not before: Fri 21 Mar 2025 03:27:39 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 21859
IP address blocks: 103.116.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3510 (0xdb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FAD6B43C09D0490A0DF7F891DF9F63B520CF210F
Validity
Not Before: Mar 21 03:27:39 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=8D9618116A1C81A6BB904EB6C07AED71B8667AA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3b:bc:22:92:cb:bb:61:76:7d:cf:4c:47:19:
f1:3e:fa:74:b7:69:4a:a9:5f:38:25:61:fa:c2:a8:
af:a7:52:8f:bb:f4:f2:6b:5e:9b:f8:ff:26:45:65:
7b:1f:73:5a:89:ae:82:64:22:2d:c2:9b:2a:64:4d:
6c:95:8b:5c:c2:10:b0:2a:ee:b2:8f:8b:ca:2e:f8:
02:17:fb:23:b0:47:61:60:1c:13:b7:ca:74:6c:35:
76:de:55:4b:0c:dd:8e:01:c9:2a:dc:b8:47:3b:62:
f1:15:37:1f:19:4b:94:f8:a3:b9:7b:30:76:27:1b:
74:a1:4e:b6:df:37:99:c1:79:a7:c2:8f:9f:92:3f:
7e:51:b2:ac:59:8b:7f:68:e6:f3:67:0f:3c:80:de:
c4:c0:12:22:c2:07:be:d4:a7:f6:cb:ee:87:40:d8:
a1:93:6a:8b:ab:be:fb:c4:48:09:1c:33:85:c2:44:
17:a7:44:9a:76:39:1d:09:0b:e1:aa:2d:a8:84:eb:
07:49:e3:a9:09:f4:08:6f:1e:01:18:07:ec:7e:fb:
cd:05:cb:2d:b4:e2:74:b4:b4:e9:ad:28:21:e6:6c:
84:2b:e2:ef:40:c9:af:d8:3d:53:64:ae:0c:80:7a:
9d:22:ad:a2:83:52:c7:b0:47:9a:9c:4d:1e:95:ad:
db:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:96:18:11:6A:1C:81:A6:BB:90:4E:B6:C0:7A:ED:71:B8:66:7A:A8
X509v3 Authority Key Identifier:
keyid:FA:D6:B4:3C:09:D0:49:0A:0D:F7:F8:91:DF:9F:63:B5:20:CF:21:0F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/-ta0PAnQSQoN9_iR359jtSDPIQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-ta0PAnQSQoN9_iR359jtSDPIQ8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2741/jZYYEWocgaa7kE62wHrtcbhmeqg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.148.0/24
Signature Algorithm: sha256WithRSAEncryption
96:f4:ec:67:82:84:af:9d:9d:57:bf:41:8a:f2:ab:d5:0f:e2:
55:c9:60:68:e5:d3:74:1f:75:ad:62:23:fa:ad:07:cf:9a:a5:
a3:b6:aa:e3:a3:de:a0:81:df:24:25:4c:40:86:05:42:bf:e4:
ea:39:14:e3:e3:a2:00:45:99:c2:68:00:fc:4a:1e:3b:ac:d0:
75:56:01:7d:95:34:3c:34:79:32:9c:23:2f:e4:71:5d:26:d1:
33:af:e9:a3:31:58:63:70:72:39:6e:83:0c:7d:73:d4:1b:6b:
d9:d3:b7:8f:38:6a:4e:38:da:10:df:1b:74:ac:04:e2:fb:a4:
87:91:ae:0c:aa:17:a7:40:18:b2:5f:04:74:ab:de:44:74:64:
d4:53:9f:14:59:03:9a:08:1d:d4:c6:3d:7f:14:8a:cf:26:59:
57:22:6b:75:82:49:6a:14:5a:ea:7a:7f:81:94:b7:ab:65:1d:
20:ab:fc:33:ce:64:2c:84:d1:0f:a6:0d:12:0f:79:dd:92:c1:
d1:a9:e7:13:b2:b4:9f:50:a7:7f:c7:73:05:ce:ff:68:7f:0b:
90:2e:1d:49:d4:f8:db:4d:ca:43:44:7f:5a:37:48:e6:d8:cf:
06:86:c9:9b:0f:d2:1a:de:a7:6a:2c:82:e6:24:5b:8c:8d:cc:
ac:cf:67:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:42:51 2025 by rpki-client