Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2967/RIRwhNEKIqLAlpAEtzjyMaePl20.roa
File: RIRwhNEKIqLAlpAEtzjyMaePl20.roa (raw, json)
Hash identifier: /9SsPAW8RVDCERMMp3ifS5mRdN9+eOC7Gb2JjXze0WM=
Subject key identifier: 44:84:70:84:D1:0A:22:A2:C0:96:90:04:B7:38:F2:31:A7:8F:97:6D
Certificate issuer: /CN=0AB6F528865292E198F98B68B72D98D130AF532E
Certificate serial: 12A0
Authority key identifier: 0A:B6:F5:28:86:52:92:E1:98:F9:8B:68:B7:2D:98:D1:30:AF:53:2E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Crb1KIZSkuGY-Ytoty2Y0TCvUy4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2967/RIRwhNEKIqLAlpAEtzjyMaePl20.roa
Signing time: Fri 17 Jan 2025 01:27:07 +0000
ROA not before: Fri 17 Jan 2025 01:27:07 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 398704
IP address blocks: 103.150.130.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4768 (0x12a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0AB6F528865292E198F98B68B72D98D130AF532E
Validity
Not Before: Jan 17 01:27:07 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=44847084D10A22A2C0969004B738F231A78F976D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:46:a8:32:f4:34:c7:5e:d3:5b:bc:12:d3:d0:
49:5f:b3:92:04:ea:09:88:98:a5:dc:bd:f4:42:21:
77:b1:7e:a3:0c:b5:28:20:8f:c7:2b:dc:eb:8c:a4:
02:45:43:c8:b4:ba:19:8c:89:05:03:f4:58:41:be:
52:82:9c:8a:cf:51:b0:82:02:60:4c:b4:62:a4:1e:
64:58:41:47:45:33:20:3a:b1:23:34:82:11:df:ba:
0e:e1:03:85:dd:73:8e:8c:ef:7e:2c:7e:2c:99:8a:
9a:56:65:3d:4f:48:39:a6:61:d5:f2:5d:5d:2d:be:
96:77:35:6b:11:a2:d7:cf:79:f0:a5:5e:60:bd:ab:
65:38:de:e1:a3:08:5f:cf:34:75:13:97:2f:47:88:
93:d2:3e:ab:32:38:a6:8d:89:6a:c5:81:0b:4e:47:
87:4c:e9:69:8d:f2:30:37:56:be:43:55:61:99:4a:
c7:11:17:90:1e:32:8d:8f:85:63:e6:7d:68:b7:04:
81:e4:3b:53:76:97:94:33:55:24:48:d4:6a:76:63:
d5:1d:cf:4e:98:fb:5c:ee:aa:65:6d:16:cd:0b:60:
d9:5f:91:60:62:45:6b:6a:73:71:1d:94:d8:4b:d0:
cf:7c:6c:cf:f3:be:7d:01:91:a3:33:f9:97:df:b8:
e6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:84:70:84:D1:0A:22:A2:C0:96:90:04:B7:38:F2:31:A7:8F:97:6D
X509v3 Authority Key Identifier:
keyid:0A:B6:F5:28:86:52:92:E1:98:F9:8B:68:B7:2D:98:D1:30:AF:53:2E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2967/Crb1KIZSkuGY-Ytoty2Y0TCvUy4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Crb1KIZSkuGY-Ytoty2Y0TCvUy4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2967/RIRwhNEKIqLAlpAEtzjyMaePl20.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.150.130.0/23
Signature Algorithm: sha256WithRSAEncryption
00:f1:47:26:6c:23:d7:43:b3:22:92:cf:ba:8f:e1:07:b0:30:
81:7a:83:02:38:fa:56:a3:e2:d5:c7:43:43:97:ae:24:56:c7:
60:5a:c8:f0:62:3c:69:03:2f:ba:39:fd:6b:bf:76:92:34:0b:
46:d6:e5:07:0c:71:b2:1f:3d:4c:92:e3:c6:3e:82:2a:a3:36:
fa:8e:e9:de:07:43:98:75:e8:a1:ff:57:9e:cc:f0:d2:81:b0:
39:23:9c:20:81:2f:68:c8:1b:49:10:26:c0:02:f4:d8:21:21:
ba:36:a0:4b:16:e3:eb:1c:40:6e:61:bf:93:0b:36:7f:b2:12:
b3:cd:41:40:61:6d:93:8d:e1:1e:79:cc:7f:55:69:92:e3:2f:
dc:c7:91:95:e9:34:c9:19:ee:ee:2d:b8:9b:0a:7a:a6:0e:d2:
f4:31:ca:0b:35:3b:e0:4f:cf:40:42:e7:b3:1d:bf:19:8a:95:
e3:8d:0d:b5:c4:fd:af:0d:6f:5a:aa:3c:7e:6b:db:c7:16:e6:
22:d1:a0:90:bb:98:9e:47:02:fc:f2:d4:cb:5d:2d:c4:fd:7d:
68:7e:63:cf:2f:e1:fa:0d:77:55:9f:b0:14:64:09:a8:4e:53:
46:1c:cf:22:3d:67:37:94:57:30:54:d7:a0:b7:09:da:8c:0e:
4e:01:f7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:23 2025 by rpki-client