Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2898/TFHfVA751cHS7jHgiJVox534jDc.roa
File: TFHfVA751cHS7jHgiJVox534jDc.roa (raw, json)
Hash identifier: 6uhr4XPAMsXDZRhUd2yY0O3csi02n5IkElZ1806zd3s=
Subject key identifier: 4C:51:DF:54:0E:F9:D5:C1:D2:EE:31:E0:88:95:68:C7:9D:F8:8C:37
Certificate issuer: /CN=2F39D6C238893451A06EB34C52D77ABC18906BE0
Certificate serial: 1BCC
Authority key identifier: 2F:39:D6:C2:38:89:34:51:A0:6E:B3:4C:52:D7:7A:BC:18:90:6B:E0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LznWwjiJNFGgbrNMUtd6vBiQa-A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/TFHfVA751cHS7jHgiJVox534jDc.roa
Signing time: Fri 17 Jan 2025 01:26:36 +0000
ROA not before: Fri 17 Jan 2025 01:26:36 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 17621
IP address blocks: 103.140.14.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7116 (0x1bcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F39D6C238893451A06EB34C52D77ABC18906BE0
Validity
Not Before: Jan 17 01:26:36 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=4C51DF540EF9D5C1D2EE31E0889568C79DF88C37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:53:70:e4:39:b3:9d:fe:d4:91:6c:72:30:65:
88:8d:dc:48:0d:22:47:ed:1c:7e:34:3e:a5:32:bf:
13:63:61:da:0c:dc:b1:f1:0e:d6:c6:90:31:55:1a:
84:26:d3:9f:ca:15:0c:0a:8f:a9:d3:8e:de:76:f3:
13:3a:b3:fb:f4:1f:be:94:c6:a6:e0:ac:80:81:55:
44:48:eb:ff:7e:1d:7b:78:a6:8d:bf:71:0c:bf:14:
c8:83:53:f0:25:d9:c5:c6:44:0d:2c:c3:0c:7c:ca:
8d:06:85:54:0f:37:f8:c4:e2:8a:f1:d5:21:35:73:
fc:07:c2:d5:80:92:f8:ad:03:88:6e:e2:30:ec:81:
4e:f4:19:0d:9d:5e:d2:fb:d0:d9:18:16:b1:0e:33:
bc:fc:4a:5b:e2:af:22:bf:1a:05:69:39:e1:be:83:
fe:9b:56:ae:58:cd:50:1e:e4:0a:d7:49:e9:1f:8c:
31:5f:0b:b4:8b:1a:b2:0c:86:c0:db:4c:83:20:73:
e5:14:03:83:ef:53:5a:bd:90:15:3b:f9:91:7c:74:
34:3c:a7:8d:b3:cc:c0:21:f5:56:b5:74:98:41:bf:
91:2e:0f:d7:d2:b3:cd:26:17:fa:a8:0d:60:0f:50:
97:c4:27:67:f7:3d:e1:ac:c8:e1:f5:68:7f:95:71:
af:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:51:DF:54:0E:F9:D5:C1:D2:EE:31:E0:88:95:68:C7:9D:F8:8C:37
X509v3 Authority Key Identifier:
keyid:2F:39:D6:C2:38:89:34:51:A0:6E:B3:4C:52:D7:7A:BC:18:90:6B:E0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/LznWwjiJNFGgbrNMUtd6vBiQa-A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LznWwjiJNFGgbrNMUtd6vBiQa-A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/TFHfVA751cHS7jHgiJVox534jDc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.140.14.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:bf:de:84:f1:d0:1a:db:60:a6:44:fb:5f:bc:67:21:de:17:
38:16:40:b9:21:bd:0d:d3:02:dc:45:3a:cd:54:1d:f0:56:dd:
b8:d2:a5:dd:2a:2e:c8:66:84:ee:60:0c:c2:85:fe:12:61:bf:
c2:c8:74:95:20:b5:b6:57:0f:66:22:cd:58:a7:ad:22:65:0f:
4d:ee:1e:33:26:d3:fd:ce:32:a9:83:9d:88:5c:28:c4:b2:73:
98:b7:1e:3c:a7:d8:65:e3:dc:ce:f2:13:d6:35:03:80:5c:4b:
48:c4:0d:37:3d:3b:b5:74:89:a7:00:bd:a6:ae:fe:6d:f8:26:
67:42:32:48:43:9b:66:c1:d4:c5:19:dc:4e:75:23:30:2e:31:
dc:2f:4b:e8:7a:35:c8:7b:9d:ca:3b:ac:10:14:b9:fd:2f:7d:
25:18:26:f6:bb:49:86:0d:81:02:8e:82:1d:61:13:0a:4a:59:
04:32:48:ad:1a:c6:ff:59:5f:3e:01:9b:37:e0:c2:0c:21:7b:
b8:5c:99:34:67:a5:b7:7e:d4:a5:6f:d6:ae:eb:da:09:69:df:
fb:44:a7:15:4f:da:0e:30:a3:07:82:c9:81:e6:99:e8:6e:f4:
75:b5:26:a9:d7:8c:75:99:e5:dd:98:22:f6:4e:99:89:3f:52:
c9:39:d3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:33:56 2025 by rpki-client