Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2823/0DGlmhMzGOmVPtV7XfDqzQDic2E.roa
File: 0DGlmhMzGOmVPtV7XfDqzQDic2E.roa (raw, json)
Hash identifier: 067K5NmjQjkU7dH/jzobDc1zLfZ9xuRvdm/K3Ct0DmE=
Subject key identifier: D0:31:A5:9A:13:33:18:E9:95:3E:D5:7B:5D:F0:EA:CD:00:E2:73:61
Certificate issuer: /CN=6647DAB6455116964FAC00012CCC83174D4E46E1
Certificate serial: 129F
Authority key identifier: 66:47:DA:B6:45:51:16:96:4F:AC:00:01:2C:CC:83:17:4D:4E:46:E1
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZkfatkVRFpZPrAABLMyDF01ORuE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2823/0DGlmhMzGOmVPtV7XfDqzQDic2E.roa
Signing time: Fri 17 Jan 2025 01:26:57 +0000
ROA not before: Fri 17 Jan 2025 01:26:57 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 137730
IP address blocks: 103.124.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4767 (0x129f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6647DAB6455116964FAC00012CCC83174D4E46E1
Validity
Not Before: Jan 17 01:26:57 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=D031A59A133318E9953ED57B5DF0EACD00E27361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9b:23:c2:b7:6e:92:f4:d2:b5:50:bc:13:8a:
d6:b2:1d:e1:49:ea:ba:a2:7e:8c:6f:55:35:7e:e9:
9f:29:4a:bb:6e:9d:41:d6:f4:0d:79:8e:bf:33:3e:
3d:73:11:04:5c:02:eb:2d:6c:75:29:3c:4b:9b:42:
72:af:9e:f9:ad:6a:69:d8:07:aa:8e:05:42:ca:b9:
0a:6f:34:63:23:c3:35:91:f4:96:44:df:69:f8:d3:
6a:84:c5:30:e6:f7:1b:9e:4c:db:9d:b4:9e:ac:c2:
86:4b:cb:ad:f3:b4:11:e4:5e:cc:c0:88:1b:48:af:
e1:bd:2c:7c:fa:39:87:fe:2b:cf:ea:c6:5a:f1:89:
01:db:60:39:73:13:59:98:a3:5d:b9:f3:81:eb:b0:
df:57:ad:ce:ee:b1:9a:a8:15:01:6a:15:ba:a4:fb:
dc:85:8f:4a:87:d9:47:6d:f1:be:73:c6:c3:57:9a:
d6:06:58:c7:1f:24:7d:4c:4d:04:2d:65:6d:35:3d:
ce:4a:15:7a:1f:7e:7d:63:1f:d8:96:5a:28:55:21:
29:1e:51:7d:0a:0d:62:17:37:30:d5:16:9f:39:e8:
07:f2:72:0e:43:e8:79:19:c3:1d:73:5f:82:6c:4c:
e7:f3:96:ff:df:d8:19:05:9c:f2:15:60:96:ea:c6:
e3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:31:A5:9A:13:33:18:E9:95:3E:D5:7B:5D:F0:EA:CD:00:E2:73:61
X509v3 Authority Key Identifier:
keyid:66:47:DA:B6:45:51:16:96:4F:AC:00:01:2C:CC:83:17:4D:4E:46:E1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2823/ZkfatkVRFpZPrAABLMyDF01ORuE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZkfatkVRFpZPrAABLMyDF01ORuE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2823/0DGlmhMzGOmVPtV7XfDqzQDic2E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.124.48.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:35:ce:1e:f0:04:4a:a9:04:57:ca:ca:93:9f:05:79:6d:4f:
8c:ad:df:05:db:69:dc:ff:e2:bb:ec:8e:81:a0:55:b0:80:5a:
41:0a:59:ee:e1:90:41:00:35:3d:54:e6:45:2c:f2:58:cb:9a:
64:80:1f:42:bc:d1:10:1f:45:3f:ba:63:a0:68:07:fc:3e:82:
4f:ba:ba:1c:33:62:bf:f8:79:41:a9:89:01:ac:a0:b9:11:eb:
24:31:d6:01:90:d6:1a:bc:ce:db:7f:bf:8e:dc:86:0a:2f:47:
66:04:9d:1f:94:b8:5d:6e:82:26:57:00:0e:8d:4f:3e:16:b6:
15:49:dd:48:3b:73:d5:82:17:ef:d1:9b:8a:1f:db:ca:81:6a:
34:53:a3:7f:8d:f0:db:f4:c6:1c:04:49:51:d9:08:e9:b5:55:
3e:2a:62:2e:ee:17:85:7d:3d:c7:8e:95:d0:07:42:a2:9b:81:
1d:0d:f6:02:12:70:d1:e5:df:2b:67:3d:8e:61:4f:b8:78:b6:
3d:75:86:e6:5f:1e:43:60:b6:f1:c4:56:ce:f6:35:2d:29:9a:
d2:86:5a:5e:22:24:f5:6b:37:99:57:33:e0:f2:4b:b8:4e:b7:
be:65:6d:80:c6:c4:0a:d7:c0:8b:49:e3:b6:08:e1:65:cf:85:
ac:d8:aa:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:11:53 2025 by rpki-client