Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3040/kpr8N22lFBXQx4xmoPUdJeValKw.roa
File: kpr8N22lFBXQx4xmoPUdJeValKw.roa (raw, json)
Hash identifier: /GYPVj31gOc9aq6C3mRrAk9GWyhvMG5Er50AiD6VIrU=
Subject key identifier: 92:9A:FC:37:6D:A5:14:15:D0:C7:8C:66:A0:F5:1D:25:E5:5A:94:AC
Certificate issuer: /CN=03F075D9C6F18DC09BDA62B7087EA80DC5B711C5
Certificate serial: 1F76
Authority key identifier: 03:F0:75:D9:C6:F1:8D:C0:9B:DA:62:B7:08:7E:A8:0D:C5:B7:11:C5
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_B12cbxjcCb2mK3CH6oDcW3EcU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/kpr8N22lFBXQx4xmoPUdJeValKw.roa
Signing time: Fri 17 Jan 2025 01:29:11 +0000
ROA not before: Fri 17 Jan 2025 01:29:11 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 131484
IP address blocks: 103.159.122.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8054 (0x1f76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03F075D9C6F18DC09BDA62B7087EA80DC5B711C5
Validity
Not Before: Jan 17 01:29:11 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=929AFC376DA51415D0C78C66A0F51D25E55A94AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1a:98:e8:98:a2:3e:11:81:b8:54:70:7b:cc:
6e:37:1f:13:98:e9:9d:7b:c9:72:fb:b9:13:c3:2d:
0f:4a:1e:64:3c:8d:6d:e3:1a:9a:6f:43:e5:6a:7d:
98:54:91:b8:69:83:33:e0:ee:c8:7f:cb:35:17:5c:
0f:60:e2:31:9b:b8:7e:7f:30:a8:46:fe:95:1a:ba:
56:46:60:b7:8a:47:f2:20:2c:02:78:ee:e2:32:dc:
27:4f:b6:04:1d:36:61:3e:5b:73:95:06:a3:b0:66:
d7:8b:3c:9d:8e:c4:dc:dc:77:14:47:81:19:3b:a5:
bc:9c:71:28:81:45:fd:2e:67:50:54:16:70:bc:de:
48:30:5b:3f:62:7f:68:3e:11:92:86:6d:8e:b1:7c:
a2:0c:85:2a:9d:89:77:22:d1:4a:65:77:e8:f8:87:
19:08:09:91:0b:a2:bd:6d:8b:22:d6:09:0f:72:50:
54:67:ea:b3:5d:48:e5:e2:e5:bc:99:01:5f:45:e3:
d9:7d:fd:02:55:ee:22:70:70:35:9f:81:76:56:e4:
d4:fb:4f:74:da:f1:29:f4:a9:a6:f9:92:34:28:63:
56:ca:7b:e8:ae:9a:ce:19:8e:9d:0a:04:56:1a:82:
b2:bd:76:83:e6:f2:b3:74:16:17:8f:fd:d6:63:5c:
ff:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9A:FC:37:6D:A5:14:15:D0:C7:8C:66:A0:F5:1D:25:E5:5A:94:AC
X509v3 Authority Key Identifier:
keyid:03:F0:75:D9:C6:F1:8D:C0:9B:DA:62:B7:08:7E:A8:0D:C5:B7:11:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/A_B12cbxjcCb2mK3CH6oDcW3EcU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_B12cbxjcCb2mK3CH6oDcW3EcU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/kpr8N22lFBXQx4xmoPUdJeValKw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.122.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:cb:e3:aa:72:6f:22:46:04:2b:b3:c2:dc:0f:df:32:87:a8:
14:99:9d:b8:16:5a:37:29:d9:b4:a7:2d:e5:d1:1a:75:b6:22:
9d:fa:c6:f5:67:3f:0e:b0:10:8b:1c:7e:a0:e7:3c:7c:39:4d:
bf:bd:38:81:5f:50:b8:ee:78:f7:04:59:79:b6:64:c5:5a:4a:
4b:de:36:29:d7:a6:ec:26:01:02:73:65:3a:c4:23:a9:05:71:
71:a0:49:e9:95:1a:1d:69:12:5e:61:cf:96:cf:15:c5:8b:f3:
75:e8:fd:77:e9:0b:77:d7:06:88:47:b9:5d:8f:23:e2:62:d9:
8a:81:21:55:2a:bb:f6:bd:69:98:fa:b8:77:90:4e:f1:7f:5c:
6f:db:c5:cd:3e:7c:bd:04:7a:53:e5:25:de:9b:86:5e:d0:46:
57:38:b7:f8:a7:9e:95:b8:14:d9:4f:4f:be:27:11:85:fd:8e:
98:6d:ce:1d:37:c2:39:85:8d:d1:fa:4a:56:7a:cb:fa:ce:41:
4d:36:2a:14:7d:b9:fd:3f:77:90:54:5a:01:6c:bc:bb:af:1e:
40:b5:46:78:e1:30:60:86:0f:3e:77:4d:ae:19:d3:aa:15:bc:
74:27:30:5a:14:4e:ec:cd:d2:4f:85:ec:fc:e6:c2:2c:e2:ca:
d2:08:db:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:35:22 2025 by rpki-client