Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2889/GRQWmU7kj2MtZz8P0rhABLNxJmo.roa
File: GRQWmU7kj2MtZz8P0rhABLNxJmo.roa (raw, json)
Hash identifier: xODLseQ5OuG7zJVn2IeWVbKpN/ynDTW7X462XK2DiW0=
Subject key identifier: 19:14:16:99:4E:E4:8F:63:2D:67:3F:0F:D2:B8:40:04:B3:71:26:6A
Certificate issuer: /CN=A93A86712684A72E5DF41F00AFA04C5F01A97735
Certificate serial: 1BCB
Authority key identifier: A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/GRQWmU7kj2MtZz8P0rhABLNxJmo.roa
Signing time: Fri 17 Jan 2025 01:27:35 +0000
ROA not before: Fri 17 Jan 2025 01:27:35 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.108.192.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.0.0/21 maxlen: 24
219.234.8.0/21 maxlen: 24
219.234.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7115 (0x1bcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A93A86712684A72E5DF41F00AFA04C5F01A97735
Validity
Not Before: Jan 17 01:27:35 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=191416994EE48F632D673F0FD2B84004B371266A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ee:07:11:f0:49:44:fe:8f:1b:5c:a9:95:00:
8b:44:c5:ea:79:8d:3b:9a:21:9b:cc:84:17:03:c4:
e1:f9:b4:38:92:2e:27:38:81:ab:20:26:89:03:10:
ad:3f:ec:45:ad:55:89:9f:af:cd:7c:36:38:d4:d2:
cf:30:74:d0:6b:87:d6:ae:b6:74:0b:4b:d3:f5:0b:
bc:7b:ce:13:64:c5:fa:f6:cb:1c:86:05:23:3d:0b:
2b:65:5b:42:cb:96:56:53:fb:6c:de:cb:95:75:4a:
44:59:9a:2c:a5:fe:fc:08:2a:d6:0a:0c:b6:90:04:
93:a5:54:bf:e3:cb:4a:43:0c:bc:cc:be:e2:67:56:
c0:4e:af:dd:04:28:0b:7c:96:3c:90:83:28:45:e1:
bf:33:a3:81:cf:91:57:08:a8:90:59:2c:b6:d6:3a:
9f:8f:e3:77:ab:00:d8:3d:ac:bb:0e:fc:7f:2a:20:
78:ff:1f:56:f0:fb:9d:15:66:d7:60:2a:80:6a:93:
5e:e8:c2:32:02:ec:51:66:38:ed:80:6a:7f:fe:eb:
09:62:66:c1:a3:e4:29:f8:58:25:2e:ef:e1:30:a1:
de:66:b9:fd:b9:46:62:ad:55:34:ab:3e:2d:72:8d:
74:7f:e1:c7:18:27:23:68:a2:20:f3:94:0f:06:b4:
cb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:14:16:99:4E:E4:8F:63:2D:67:3F:0F:D2:B8:40:04:B3:71:26:6A
X509v3 Authority Key Identifier:
keyid:A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/GRQWmU7kj2MtZz8P0rhABLNxJmo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.108.192.0/22
103.235.184.0/22
150.242.224.0/22
219.234.0.0/19
Signature Algorithm: sha256WithRSAEncryption
6b:21:74:23:06:39:5a:b9:6a:50:5f:98:b1:7d:ac:bf:46:5b:
9d:c4:92:b5:05:82:b4:5b:7d:ee:84:a8:46:af:1e:38:26:8d:
4f:6c:f3:36:52:a8:22:c4:2f:6c:59:64:1d:36:ab:60:89:27:
af:2a:c0:95:c5:ba:cc:a7:f1:a2:7f:de:2a:ec:76:51:90:20:
3e:d0:ab:bc:8f:6e:73:e5:aa:b4:42:7a:88:e6:ad:ac:0b:88:
d5:0a:f1:d7:c6:3a:71:e3:2b:b3:91:00:5f:18:98:bc:5b:83:
5f:f2:89:e5:01:cf:1f:64:db:4e:8e:eb:b6:0a:3a:05:db:52:
7f:d9:2e:3d:06:2a:a8:01:ac:2f:42:29:3d:87:5c:f2:c9:ab:
7d:81:06:ff:2b:a1:d2:69:80:6c:6d:85:e2:8c:c5:15:a2:fa:
ac:5b:1b:45:31:bb:22:9d:18:4f:b9:67:64:c0:2b:88:44:12:
cf:0a:76:02:4f:60:d2:ec:b9:24:09:c3:98:61:6b:e2:73:3b:
2e:70:91:73:64:d6:d5:e3:ef:7b:71:2e:de:01:5a:8f:f8:5f:
83:68:d5:df:eb:8c:ab:39:bb:44:7a:02:ff:89:b4:de:11:b9:
a6:23:78:08:c4:32:ea:8b:ba:69:fe:75:9d:dd:bf:b1:57:5b:
ab:86:8c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:55 2025 by rpki-client