Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/a4wr4cw4zjk-eN0SY1wX0lNr7jI.roa
File: a4wr4cw4zjk-eN0SY1wX0lNr7jI.roa (raw, json)
Hash identifier: xA+P2dj0ZtFZahyRPzb3UdnTYJbqEP0TfQhLuHW+eFI=
Subject key identifier: 6B:8C:2B:E1:CC:38:CE:39:3E:78:DD:12:63:5C:17:D2:53:6B:EE:32
Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Certificate serial: 05
Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/a4wr4cw4zjk-eN0SY1wX0lNr7jI.roa
Signing time: Wed 03 Aug 2022 05:53:57 +0000
ROA not before: Wed 03 Aug 2022 05:53:57 +0000
ROA not after: Thu 03 Aug 2023 05:46:02 +0000
asID: 211392
IP address blocks: 103.79.228.0/24 maxlen: 24
103.79.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Validity
Not Before: Aug 3 05:53:57 2022 GMT
Not After : Aug 3 05:46:02 2023 GMT
Subject: CN=6B8C2BE1CC38CE393E78DD12635C17D2536BEE32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1e:f8:4f:b9:16:eb:02:e4:c2:eb:d7:ad:e1:
91:2e:99:88:68:a4:dd:c2:22:fe:3f:0c:5c:f3:1e:
3c:61:a1:1a:49:fb:00:00:ec:d6:27:c8:aa:15:9c:
36:34:96:e9:6b:f3:83:bd:5b:00:27:69:7d:2e:c4:
71:36:0e:27:2a:b1:7b:7e:6d:3a:b8:f7:fa:ca:96:
f0:4a:6b:90:91:98:a9:59:4b:0e:89:12:98:e0:be:
5e:c1:d1:70:d9:fa:58:2d:e0:e3:08:af:36:ac:c4:
2f:2a:89:f2:c9:c7:e0:84:24:a8:e2:fa:d3:66:bc:
80:50:dd:98:5b:ee:e9:72:87:3c:47:b9:57:69:54:
9d:71:45:ef:43:22:f9:86:6d:8a:ea:0d:d6:c7:b8:
20:ca:7f:43:e3:fa:5f:58:45:7e:b0:3b:13:22:72:
81:36:68:c1:67:63:5a:12:90:02:0f:8a:15:58:18:
9d:02:55:8d:3e:38:ff:83:42:03:9c:61:73:6b:5e:
69:ec:1a:76:ad:c6:86:58:5b:85:d4:f7:51:a4:66:
c4:5c:7a:66:27:d7:3a:92:52:8e:8d:7d:04:ff:db:
0c:33:b0:b2:81:4e:f0:09:b7:78:ca:3a:29:a4:62:
4b:15:01:17:fb:28:31:38:78:90:46:cd:9b:9a:65:
b0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8C:2B:E1:CC:38:CE:39:3E:78:DD:12:63:5C:17:D2:53:6B:EE:32
X509v3 Authority Key Identifier:
keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/a4wr4cw4zjk-eN0SY1wX0lNr7jI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.228.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:df:e5:38:03:56:a6:d7:fa:1a:05:7c:e8:37:b8:28:6e:92:
44:b0:d9:93:18:b8:18:a7:5d:d8:e4:95:65:6e:3a:62:d2:39:
8a:5f:eb:09:a2:0b:74:eb:fd:41:af:b4:6a:25:3c:8a:8c:c1:
48:07:f3:59:ea:f1:b7:ee:21:62:ca:55:12:07:4d:15:95:89:
6b:1b:d1:d5:28:7d:7d:4f:87:5d:17:11:39:76:31:58:08:2a:
0c:ce:a3:3e:6e:28:aa:31:5a:dd:4b:49:29:66:96:06:4a:4c:
4d:0a:3d:cf:67:87:25:b3:e1:e7:54:c6:46:ff:ec:97:00:f3:
44:b3:ff:df:d1:f9:46:a0:88:2d:70:eb:94:46:a1:e1:d0:a4:
10:25:6a:55:68:1e:39:30:9c:47:a6:6c:da:77:e4:dd:71:cd:
08:08:44:2c:23:a1:49:ea:ab:b5:76:71:30:63:22:f9:4a:7f:
21:00:30:09:df:81:7a:62:7e:21:6e:7a:a2:ca:da:a2:d2:e1:
1a:95:65:9f:c1:c2:74:e4:3c:98:2a:81:ad:fe:35:fa:be:8f:
7a:b1:46:cd:0c:66:1b:c6:f0:71:b9:d0:b2:a7:c0:62:65:18:
57:c1:85:37:7d:8f:5a:0f:4b:13:01:f9:36:08:b2:f5:46:58:
a9:25:cb:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:35:16 2025 by rpki-client