Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2967/bOMTH2aEDNkEg4IOI1X3YY8_Mmo.roa
File: bOMTH2aEDNkEg4IOI1X3YY8_Mmo.roa (raw, json)
Hash identifier: GXxSuzFWnX9l4KG0PBTIq+NKZvnrfJQYZ9z0Hl0Rhc8=
Subject key identifier: 6C:E3:13:1F:66:84:0C:D9:04:83:82:0E:23:55:F7:61:8F:3F:32:6A
Certificate issuer: /CN=0AB6F528865292E198F98B68B72D98D130AF532E
Certificate serial: 12A1
Authority key identifier: 0A:B6:F5:28:86:52:92:E1:98:F9:8B:68:B7:2D:98:D1:30:AF:53:2E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Crb1KIZSkuGY-Ytoty2Y0TCvUy4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2967/bOMTH2aEDNkEg4IOI1X3YY8_Mmo.roa
Signing time: Fri 17 Jan 2025 01:27:08 +0000
ROA not before: Fri 17 Jan 2025 01:27:08 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 131530
IP address blocks: 103.150.130.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4769 (0x12a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0AB6F528865292E198F98B68B72D98D130AF532E
Validity
Not Before: Jan 17 01:27:08 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=6CE3131F66840CD90483820E2355F7618F3F326A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:48:65:57:6c:ef:05:8f:95:36:a6:3b:8b:9b:
72:60:0f:c0:83:89:0c:f2:df:4f:db:07:91:cb:43:
d3:9f:23:4c:7e:d8:ba:2d:04:12:c4:7b:df:d4:38:
35:20:d0:00:e6:3a:3d:91:fd:3d:0b:e1:55:18:40:
bc:8c:ea:80:df:6f:55:79:4b:d0:eb:90:5c:7e:f8:
ba:66:20:25:4f:62:b2:83:02:1a:0e:3b:48:e7:0b:
81:62:b3:20:87:de:e6:f1:42:a4:a9:d5:4e:ad:01:
e2:99:23:61:da:0a:d4:c8:2e:ea:46:d1:76:d4:1a:
fe:c2:72:ae:20:8b:96:3b:08:41:90:a2:73:b1:4c:
1f:59:2a:0c:47:34:d2:90:6f:93:f7:a9:9b:6a:ce:
02:25:7b:26:8b:61:45:a1:f2:33:9b:f7:30:7f:e9:
1a:71:2a:3b:d7:10:76:aa:86:ef:0a:f5:19:08:75:
00:17:39:07:5a:85:1c:ae:e8:69:21:c6:ae:98:2f:
50:29:a1:9c:89:57:61:05:36:29:3c:b2:a3:86:91:
0c:c4:13:5f:a9:e0:72:9c:07:c9:13:ae:5b:c0:16:
3e:0e:21:95:9f:2e:3a:67:25:e9:95:41:34:8b:92:
85:93:51:a5:1c:6e:7d:62:b3:12:dc:c9:73:ec:20:
52:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E3:13:1F:66:84:0C:D9:04:83:82:0E:23:55:F7:61:8F:3F:32:6A
X509v3 Authority Key Identifier:
keyid:0A:B6:F5:28:86:52:92:E1:98:F9:8B:68:B7:2D:98:D1:30:AF:53:2E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2967/Crb1KIZSkuGY-Ytoty2Y0TCvUy4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Crb1KIZSkuGY-Ytoty2Y0TCvUy4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2967/bOMTH2aEDNkEg4IOI1X3YY8_Mmo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.150.130.0/23
Signature Algorithm: sha256WithRSAEncryption
45:88:fc:3a:03:c0:4b:0b:ae:06:bc:74:cd:83:8c:4f:85:51:
44:80:22:f0:5d:f2:8d:04:12:3a:73:51:ee:40:b1:72:9d:86:
c5:f5:b4:62:0b:73:30:de:2e:fa:18:c4:9a:6e:59:4e:d4:87:
c4:42:06:c7:ca:c5:eb:3b:b3:ee:e3:dc:e9:76:5c:de:2e:b8:
83:b7:af:98:3c:4c:61:82:3b:25:72:e1:e1:ba:85:1a:e3:58:
95:10:f6:da:3e:89:23:33:61:6d:06:17:65:75:7f:0b:b5:12:
97:69:d2:41:bb:bd:33:11:c3:c9:86:a5:7d:75:68:36:03:33:
f1:6a:2b:f8:a2:9a:5b:c8:22:e4:df:83:47:6c:8f:89:87:aa:
11:1a:31:2a:00:3e:dc:71:dc:80:f6:3f:d7:ae:54:35:eb:21:
59:55:5d:a6:c0:52:dd:a3:fa:91:56:3f:cd:17:28:10:2a:e8:
49:f3:91:2c:36:81:4d:3d:14:dc:06:ff:4b:0b:c7:1c:7c:93:
80:6d:45:6e:25:60:04:ed:a2:f9:d9:2e:e3:cc:9e:53:46:c4:
fc:7a:bb:33:6b:3b:40:4c:b8:5d:51:75:ff:d5:26:dd:39:a0:
72:50:13:6c:c1:74:06:9a:0e:5a:1d:cf:8a:19:7f:6e:0f:3c:
dd:0f:49:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:33:25 2025 by rpki-client