Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/Y1woYdOpGX5OGmPhqTLlMR7njrQ.roa
File: Y1woYdOpGX5OGmPhqTLlMR7njrQ.roa (raw, json)
Hash identifier: cGDwyTNziDsVh+5e17ASE5/JoO9F/zoyHp6sGFVvBrg=
Subject key identifier: 63:5C:28:61:D3:A9:19:7E:4E:1A:63:E1:A9:32:E5:31:1E:E7:8E:B4
Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Certificate serial: 0336
Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/Y1woYdOpGX5OGmPhqTLlMR7njrQ.roa
Signing time: Thu 12 Jan 2023 01:55:15 +0000
ROA not before: Thu 12 Jan 2023 01:55:15 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 4134
IP address blocks: 103.79.228.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 822 (0x336)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Validity
Not Before: Jan 12 01:55:15 2023 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=635C2861D3A9197E4E1A63E1A932E5311EE78EB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0b:0d:ba:e4:ec:18:c1:2e:29:44:d5:00:f2:
35:f2:64:71:1a:29:ce:41:2a:4a:59:87:be:d9:08:
d5:43:05:26:65:ca:5f:c9:90:f6:81:6e:b4:48:27:
bc:c7:40:2a:bc:bd:93:6c:ba:6f:04:34:de:aa:72:
cc:61:08:52:60:cb:d8:e9:02:66:96:ee:1c:fc:d3:
22:a5:30:10:af:83:b5:ca:7c:4d:83:f8:85:9a:c8:
5d:c6:c6:75:96:f7:83:20:b7:88:ea:66:1e:89:63:
47:b8:69:b3:60:bb:90:4e:3a:54:ed:d2:a2:19:30:
07:75:62:71:a6:15:b6:38:f3:94:80:e3:88:08:47:
50:2d:d4:8e:cf:84:18:18:dd:27:bf:97:b7:9e:84:
74:9c:ac:72:31:22:4a:ab:6a:c6:ca:fc:b0:75:11:
ca:78:fe:3c:d7:04:bf:b6:d6:8e:da:7f:ed:95:d2:
9c:91:86:49:f2:10:d8:cb:3d:f5:19:c8:33:f2:5b:
d3:40:e1:83:c0:40:a5:06:0b:4c:fb:0e:83:63:13:
da:8d:ed:89:cc:9c:cc:90:5f:4e:36:84:e4:c7:a5:
7f:09:86:2c:39:ac:dc:f2:d4:bc:cc:c2:3e:91:43:
1f:61:25:b8:ad:af:c6:43:c7:75:e7:aa:e4:fc:a8:
88:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:5C:28:61:D3:A9:19:7E:4E:1A:63:E1:A9:32:E5:31:1E:E7:8E:B4
X509v3 Authority Key Identifier:
keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/Y1woYdOpGX5OGmPhqTLlMR7njrQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.228.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:27:06:a8:0f:fb:01:2f:7b:eb:a8:4f:55:52:f4:c4:57:4b:
9c:15:12:8b:cf:2d:ca:b4:64:a2:45:7b:d2:fd:fc:37:c9:10:
69:63:b9:2a:5e:12:2e:e4:ab:30:d5:eb:c6:7f:5c:a9:75:8b:
17:33:ff:3c:f0:1c:f7:03:bd:da:b7:89:cb:a4:03:b3:c9:64:
7a:1e:93:27:e7:53:69:86:12:79:84:40:19:9a:44:3a:0f:cd:
2c:53:17:8f:e6:90:db:ae:9a:30:fc:1e:56:c9:f5:f9:38:24:
d0:58:f4:b9:5f:3f:8c:2e:8d:51:63:2b:34:95:ae:25:63:22:
5b:d3:98:8d:3c:ca:bb:eb:9a:e0:9d:4b:1b:4b:e4:c5:0a:ed:
2b:93:45:f3:eb:a7:9b:db:b6:87:33:bf:75:b8:63:8d:52:d3:
80:a8:fb:28:8b:d3:54:fa:d2:8b:a9:29:de:b6:bd:06:75:d6:
94:14:2a:05:56:bc:cf:bd:41:a2:17:82:7c:32:26:a7:5a:0b:
34:53:a9:38:17:0d:2f:61:0b:cc:c0:74:34:62:e7:32:72:e3:
79:e2:f6:09:30:e1:2d:b3:60:e3:b2:ff:4f:9b:cb:1b:82:0f:
06:ec:b9:8e:b4:58:bf:22:93:15:79:a8:0d:85:5e:d5:c7:30:
2e:3b:aa:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:38 2025 by rpki-client