Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2816/ptSlZNNHAGY5Lcs7GOqLYgn97k0.roa
File: ptSlZNNHAGY5Lcs7GOqLYgn97k0.roa (raw, json)
Hash identifier: GcwT+hZSarbhRdiY1h8Jkwre/Kdlz10lVaxkFCeWxG8=
Subject key identifier: A6:D4:A5:64:D3:47:00:66:39:2D:CB:3B:18:EA:8B:62:09:FD:EE:4D
Certificate issuer: /CN=857BE9F90A5B737CA00E8E04B62C26E142D4A3BA
Certificate serial: 129B
Authority key identifier: 85:7B:E9:F9:0A:5B:73:7C:A0:0E:8E:04:B6:2C:26:E1:42:D4:A3:BA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hXvp-Qpbc3ygDo4Etiwm4ULUo7o.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2816/ptSlZNNHAGY5Lcs7GOqLYgn97k0.roa
Signing time: Fri 17 Jan 2025 01:27:13 +0000
ROA not before: Fri 17 Jan 2025 01:27:13 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 137768
IP address blocks: 103.131.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4763 (0x129b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=857BE9F90A5B737CA00E8E04B62C26E142D4A3BA
Validity
Not Before: Jan 17 01:27:13 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=A6D4A564D3470066392DCB3B18EA8B6209FDEE4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:37:7f:f3:0f:43:b5:19:7d:83:a7:58:64:aa:
5a:68:83:00:01:bb:3b:c7:97:81:1c:47:e5:77:b9:
7c:db:58:f2:fa:15:8d:80:72:63:b0:ef:aa:3e:98:
1b:9b:81:ce:33:2e:d8:db:25:97:f4:cc:94:53:93:
93:d7:3b:fa:dd:c9:5b:85:9a:66:fc:ca:81:43:21:
01:d3:9e:48:4e:3b:2d:03:8e:64:bd:2f:d0:ef:7f:
de:c2:7c:fd:7a:7f:a6:e8:e2:71:a2:ff:b7:11:69:
a2:6f:a9:a2:fc:d4:1c:61:db:36:a9:e6:06:81:e8:
2c:be:bb:c0:29:80:6d:23:44:66:d6:b1:32:ce:b9:
4c:a0:ad:c3:9a:f3:ab:73:22:28:8c:8f:51:92:e9:
92:4e:b3:14:40:22:c2:f7:cb:37:cd:c2:6e:b4:8a:
3c:14:bd:9d:4e:a7:f6:b2:e5:ef:42:a0:e0:54:f9:
c8:a3:f9:1d:e2:e1:2d:40:b6:94:d7:47:5d:2f:55:
7d:96:b7:f7:23:3b:17:ac:94:73:cc:a9:77:a6:29:
3f:c1:7c:66:bf:3a:8e:00:5f:e3:73:af:4d:1a:6b:
51:b5:d1:6e:1b:0c:ba:10:21:31:6d:96:38:21:f3:
4a:0f:28:8b:3d:32:5d:94:d3:03:72:e8:a2:e3:c8:
6b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D4:A5:64:D3:47:00:66:39:2D:CB:3B:18:EA:8B:62:09:FD:EE:4D
X509v3 Authority Key Identifier:
keyid:85:7B:E9:F9:0A:5B:73:7C:A0:0E:8E:04:B6:2C:26:E1:42:D4:A3:BA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2816/hXvp-Qpbc3ygDo4Etiwm4ULUo7o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hXvp-Qpbc3ygDo4Etiwm4ULUo7o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2816/ptSlZNNHAGY5Lcs7GOqLYgn97k0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.131.36.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:af:94:4b:ee:47:13:3a:66:53:57:c8:72:b9:ba:ed:15:b5:
dd:48:09:55:f8:b5:55:62:b4:8a:99:aa:c7:c8:05:87:45:fb:
4e:2c:50:7e:e4:ce:ba:93:6e:6d:91:52:58:40:d1:85:74:c0:
5e:55:fa:2a:dc:e6:49:82:07:3d:57:10:37:2e:26:21:f5:7f:
b7:ac:60:d6:26:f9:25:73:78:4e:eb:fd:8e:b1:66:09:bc:d5:
9e:ab:ca:d7:6d:23:c8:c1:2b:5a:d0:2c:64:7e:2b:be:5d:39:
88:30:92:53:2a:da:16:9f:6e:7c:bf:95:f6:cc:67:8d:97:0b:
aa:f4:b1:eb:3b:de:4f:83:ed:a2:bd:2a:66:ac:cc:49:d1:d5:
5b:9b:9f:f4:5f:ae:e8:97:c3:d2:6e:86:9d:57:29:8c:94:0e:
94:7d:ca:9c:43:a9:59:68:00:c0:59:78:d8:5a:d7:c9:3b:1f:
54:ca:32:b2:3f:52:00:09:e5:58:3b:25:cb:e8:48:9c:1d:f0:
00:06:b9:ea:29:eb:ea:f5:66:1d:36:a5:10:19:60:57:5d:77:
fb:61:93:f0:25:44:a9:82:c2:e0:d5:36:fe:a1:00:6c:7b:2a:
03:1c:87:fb:a9:73:02:e8:28:2e:39:0b:3e:fb:35:10:f9:b4:
91:17:9b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:37:20 2025 by rpki-client