Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2898/1KJu3RUkX2y3at4dAauLpki5K60.roa
File: 1KJu3RUkX2y3at4dAauLpki5K60.roa (raw, json)
Hash identifier: QnDPOm9ULMqQf6YLk+9iBWJU7exNlmtbsgO2a9Cx69g=
Subject key identifier: D4:A2:6E:DD:15:24:5F:6C:B7:6A:DE:1D:01:AB:8B:A6:48:B9:2B:AD
Certificate issuer: /CN=2F39D6C238893451A06EB34C52D77ABC18906BE0
Certificate serial: 15D1
Authority key identifier: 2F:39:D6:C2:38:89:34:51:A0:6E:B3:4C:52:D7:7A:BC:18:90:6B:E0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LznWwjiJNFGgbrNMUtd6vBiQa-A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/1KJu3RUkX2y3at4dAauLpki5K60.roa
Signing time: Wed 13 Mar 2024 01:21:42 +0000
ROA not before: Wed 13 Mar 2024 01:21:42 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 139091
IP address blocks: 103.140.14.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5585 (0x15d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F39D6C238893451A06EB34C52D77ABC18906BE0
Validity
Not Before: Mar 13 01:21:42 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D4A26EDD15245F6CB76ADE1D01AB8BA648B92BAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8a:fc:5b:93:d9:d2:36:c2:ea:e2:a1:f9:66:
4c:3a:6e:4d:03:ec:1c:a1:22:db:98:be:d8:c7:24:
27:b5:39:07:00:73:2e:d0:72:77:4c:b4:cd:d4:47:
4f:ac:f3:2d:e4:46:20:5b:fe:f4:71:47:5b:a1:ad:
2a:a3:db:46:98:61:e3:c6:96:20:59:13:f6:fe:ba:
26:63:f0:fc:0e:bb:e9:62:3f:ef:41:bd:9d:83:4e:
37:25:6c:b7:93:8f:66:27:4b:48:0d:a9:a4:12:df:
c4:88:d3:c0:52:84:f7:ae:c0:c5:d0:51:1d:7f:50:
a0:e9:c4:7b:89:78:b2:47:80:e9:b0:da:b4:4a:f4:
d5:1c:7d:07:2c:e4:17:67:46:66:3a:72:1d:4e:6a:
e7:21:e7:b1:ea:21:47:7c:db:58:46:fd:05:99:8f:
21:62:2b:43:51:c2:5c:c1:78:4c:40:ee:c8:1c:cc:
42:cf:8d:d7:d5:77:d2:a1:33:01:2a:f8:24:ca:7a:
57:e3:36:f8:57:78:ae:41:96:1f:6d:7e:b6:d6:f2:
d0:dc:d4:f3:fd:0a:5b:23:4c:d8:68:39:6b:38:d0:
03:a5:fd:41:56:56:33:e6:6c:91:74:79:59:2f:89:
04:dc:43:c8:e4:44:74:82:9d:4f:af:b1:dc:9c:1c:
ab:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A2:6E:DD:15:24:5F:6C:B7:6A:DE:1D:01:AB:8B:A6:48:B9:2B:AD
X509v3 Authority Key Identifier:
keyid:2F:39:D6:C2:38:89:34:51:A0:6E:B3:4C:52:D7:7A:BC:18:90:6B:E0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/LznWwjiJNFGgbrNMUtd6vBiQa-A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LznWwjiJNFGgbrNMUtd6vBiQa-A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/1KJu3RUkX2y3at4dAauLpki5K60.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.140.14.0/23
Signature Algorithm: sha256WithRSAEncryption
68:f3:a5:d6:8a:91:47:c5:42:38:1b:ee:28:3a:18:e5:16:f2:
70:fc:61:1a:9d:9b:02:90:3a:93:fc:dc:cc:ab:58:ed:a3:d5:
1e:48:15:94:61:fb:1c:b8:5e:9c:78:bf:78:68:bd:00:ce:19:
22:c0:70:1a:f0:5f:15:50:f2:54:b6:db:7e:d3:63:be:46:be:
cf:68:a3:12:a5:ce:74:a3:74:7f:c1:09:97:11:7c:0a:f3:96:
12:bc:54:74:f8:59:cd:40:5c:bc:ce:2e:e5:0b:7a:d4:9b:ff:
b7:7e:41:95:d8:bd:c9:1d:25:e6:19:f2:44:a8:75:50:3b:5c:
3c:36:5f:40:2c:8a:4b:ea:0c:4a:9e:d7:ca:13:11:b6:8b:d1:
ff:22:37:c6:37:e6:1a:68:94:77:8d:c1:2e:28:8b:66:15:e5:
ba:0e:b2:c4:ce:f2:29:17:58:1a:d8:b6:e7:5b:6f:4e:4e:24:
ef:01:2e:f6:04:ff:b6:c2:90:af:2d:73:0a:87:45:6c:9e:f2:
7c:b4:63:06:46:72:8f:c2:e1:8b:ad:3d:b4:6f:32:cd:4d:c0:
81:df:75:ae:3d:59:a1:a9:1c:6e:42:e3:27:67:6d:07:4c:31:
2a:db:48:d2:73:1b:49:34:db:1e:d4:e9:ce:8a:83:fa:b7:5a:
ae:7e:2b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:39:50 2025 by rpki-client