Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2890/YChybX2-uPVVnqdSYmR5njJNPi8.roa
File: YChybX2-uPVVnqdSYmR5njJNPi8.roa (raw, json)
Hash identifier: Eoa/Wqb1zFLj0i5Y48PjM9Jp4VzTiVGXZggsf4eLD9A=
Subject key identifier: 60:28:72:6D:7D:BE:B8:F5:55:9E:A7:52:62:64:79:9E:32:4D:3E:2F
Certificate issuer: /CN=400353880B478D5B972A1204CF0651DE295F8ECA
Certificate serial: 129D
Authority key identifier: 40:03:53:88:0B:47:8D:5B:97:2A:12:04:CF:06:51:DE:29:5F:8E:CA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QANTiAtHjVuXKhIEzwZR3ilfjso.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2890/YChybX2-uPVVnqdSYmR5njJNPi8.roa
Signing time: Fri 17 Jan 2025 01:24:18 +0000
ROA not before: Fri 17 Jan 2025 01:24:18 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139021
IP address blocks: 103.139.2.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4765 (0x129d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400353880B478D5B972A1204CF0651DE295F8ECA
Validity
Not Before: Jan 17 01:24:18 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=6028726D7DBEB8F5559EA7526264799E324D3E2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:40:93:80:78:c5:06:c9:a1:50:c6:89:26:01:
5b:98:89:34:0c:7f:c6:7a:45:3d:98:58:03:27:b7:
88:1c:05:0a:58:45:5d:df:c6:43:0e:ef:84:92:f6:
42:7f:26:c8:8f:20:f4:a1:9e:2e:3b:ba:e4:6e:39:
9f:f0:45:fb:ee:95:98:83:42:2b:c2:d4:84:3e:e2:
c9:ef:ce:b9:42:09:09:95:d2:49:1c:31:0b:39:51:
46:98:04:87:83:a4:e6:06:e1:e2:d5:7f:d0:e8:7d:
99:0c:2b:d5:1b:66:67:97:33:a8:75:6b:22:ff:37:
c4:68:72:34:1e:6b:d6:86:df:e7:79:f3:28:88:33:
86:b5:e7:f2:87:b0:5d:4d:1d:68:23:2b:0c:6d:cc:
11:5b:1b:b3:2f:37:de:4a:94:9c:27:33:56:ab:fa:
85:79:df:3f:c5:b7:b6:f2:9e:55:71:d4:d1:bc:2d:
e7:a3:9f:5e:59:d7:b9:75:28:62:c5:19:df:c1:06:
08:59:a5:5a:a3:16:10:5f:a1:60:08:b5:34:a9:7f:
79:93:77:00:0a:bc:cf:bd:f6:17:cc:70:60:60:b9:
bb:2f:c4:17:7c:63:03:f3:59:7a:47:8e:58:32:1b:
2f:60:96:21:85:9b:d3:70:b6:19:af:72:f3:3b:ed:
8a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:28:72:6D:7D:BE:B8:F5:55:9E:A7:52:62:64:79:9E:32:4D:3E:2F
X509v3 Authority Key Identifier:
keyid:40:03:53:88:0B:47:8D:5B:97:2A:12:04:CF:06:51:DE:29:5F:8E:CA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2890/QANTiAtHjVuXKhIEzwZR3ilfjso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QANTiAtHjVuXKhIEzwZR3ilfjso.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2890/YChybX2-uPVVnqdSYmR5njJNPi8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.2.0/23
Signature Algorithm: sha256WithRSAEncryption
73:3e:7d:21:61:36:06:73:a8:71:82:f5:f8:d5:df:74:bc:0c:
32:07:8d:7f:cf:de:7b:79:92:f4:5f:03:0a:c3:82:17:98:44:
e5:03:d8:cf:82:9a:75:fe:c9:c9:66:1c:fd:7f:58:4b:c7:1a:
79:81:3a:f3:72:d4:c8:06:0b:1f:64:0e:2e:90:de:78:22:95:
84:0c:8d:cb:a0:80:1b:09:e2:1b:e5:1f:ab:a9:9f:47:9b:45:
bd:62:17:da:ba:4a:fe:b7:8d:e9:c1:36:f0:2f:af:7f:80:35:
f0:74:48:80:98:02:0f:69:c6:f9:49:e4:50:7f:ad:26:20:57:
81:ab:62:57:78:c8:a4:0c:11:b8:3f:58:6a:09:60:a5:c9:34:
b7:7a:6c:c5:35:f5:b1:6c:4e:64:50:b4:20:22:61:9b:c4:e0:
a4:36:8a:60:31:f2:27:c6:59:5c:6b:72:11:b2:c1:ea:3c:ac:
09:76:06:2d:9b:fa:a8:73:a5:2d:5d:07:c6:90:4c:cb:5f:b1:
1e:78:a0:04:b5:db:0f:82:0e:51:6a:7b:6c:94:78:38:1c:6c:
5e:83:d1:b7:5e:2e:b2:a4:65:1c:5b:0f:77:34:84:46:20:f4:
d8:3d:8e:57:27:b3:55:66:e5:eb:d0:37:60:31:94:6b:8e:00:
e8:96:d1:ac
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICEp0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDAw
MzUzODgwQjQ3OEQ1Qjk3MkExMjA0Q0YwNjUxREUyOTVGOEVDQTAeFw0yNTAxMTcw
MTI0MThaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDYwMjg3MjZEN0RCRUI4
RjU1NTlFQTc1MjYyNjQ3OTlFMzI0RDNFMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNQJOAeMUGyaFQxokmAVuYiTQMf8Z6RT2YWAMnt4gcBQpYRV3f
xkMO74SS9kJ/JsiPIPShni47uuRuOZ/wRfvulZiDQivC1IQ+4snvzrlCCQmV0kkc
MQs5UUaYBIeDpOYG4eLVf9DofZkMK9UbZmeXM6h1ayL/N8RocjQea9aG3+d58yiI
M4a15/KHsF1NHWgjKwxtzBFbG7MvN95KlJwnM1ar+oV53z/Ft7bynlVx1NG8Leej
n15Z17l1KGLFGd/BBghZpVqjFhBfoWAItTSpf3mTdwAKvM+99hfMcGBgubsvxBd8
YwPzWXpHjlgyGy9gliGFm9NwthmvcvM77Yo3AgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUYChybX2+uPVVnqdSYmR5njJNPi8wHwYDVR0jBBgwFoAUQANTiAtHjVuXKhIE
zwZR3ilfjsowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjg5
MC9RQU5UaUF0SGpWdVhLaElFendaUjNpbGZqc28uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1FBTlRpQXRIalZ1WEtoSUV6d1pSM2lsZmpzby5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4OTAvWUNoeWJYMi11UFZW
bnFkU1ltUjVuakpOUGk4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAWeLAjANBgkqhkiG9w0BAQsFAAOCAQEAcz59IWE2BnOocYL1+NXfdLwMMgeN
f8/ee3mS9F8DCsOCF5hE5QPYz4Kadf7JyWYc/X9YS8caeYE683LUyAYLH2QOLpDe
eCKVhAyNy6CAGwniG+Ufq6mfR5tFvWIX2rpK/reN6cE28C+vf4A18HRIgJgCD2nG
+UnkUH+tJiBXgatiV3jIpAwRuD9Yaglgpck0t3psxTX1sWxOZFC0ICJhm8TgpDaK
YDHyJ8ZZXGtyEbLB6jysCXYGLZv6qHOlLV0HxpBMy1+xHnigBLXbD4IOUWp7bJR4
OBxsXoPRt14usqRlHFsPdzSERiD02D2OVyezVWbl69A3YDGUa44A6JbRrA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:27:36 2025 by rpki-client