Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3238/jHn4wbtBBL_NI2yHT-HejHu5DR8.roa
File: jHn4wbtBBL_NI2yHT-HejHu5DR8.roa (raw, json)
Hash identifier: MVwJ+ea07YYJ+ojjvSV6NaIkYGlp6i5oCdATarZYHHw=
Subject key identifier: 8C:79:F8:C1:BB:41:04:BF:CD:23:6C:87:4F:E1:DE:8C:7B:B9:0D:1F
Certificate issuer: /CN=F36B8B6B982D7BFFF5247DA648EF673F7716EF08
Certificate serial: 0B15
Authority key identifier: F3:6B:8B:6B:98:2D:7B:FF:F5:24:7D:A6:48:EF:67:3F:77:16:EF:08
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/82uLa5gte__1JH2mSO9nP3cW7wg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3238/jHn4wbtBBL_NI2yHT-HejHu5DR8.roa
Signing time: Fri 21 Mar 2025 03:30:54 +0000
ROA not before: Fri 21 Mar 2025 03:30:54 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 4837
IP address blocks: 103.21.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2837 (0xb15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B8B6B982D7BFFF5247DA648EF673F7716EF08
Validity
Not Before: Mar 21 03:30:54 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=8C79F8C1BB4104BFCD236C874FE1DE8C7BB90D1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:30:df:72:95:2f:bd:7f:d9:31:b5:7b:b4:c2:
28:d9:8b:51:a1:a2:dd:f4:1e:6c:a6:fe:ef:fd:1e:
96:6a:80:9c:c2:24:ff:5f:87:6c:3e:43:7a:d0:ca:
de:a4:95:eb:43:67:f0:0d:70:62:cd:b0:21:da:2b:
96:eb:d6:6e:df:46:a5:da:f6:d9:ea:6e:a9:ae:30:
20:8e:79:7a:83:0e:df:02:2a:f2:9f:7a:a3:ad:8e:
e6:3c:aa:f6:2f:d1:80:83:cb:3e:89:66:da:9d:39:
55:e3:7b:69:09:99:42:c1:8a:31:cb:83:ed:01:5e:
46:a6:8c:f9:0f:29:af:b9:ef:39:86:ab:39:7a:03:
c1:6a:8b:f5:78:2d:22:72:4a:a1:c4:34:4b:d2:9f:
47:32:0e:4f:7f:2a:af:3a:0c:84:23:6b:98:6d:bb:
f2:60:11:d6:9f:6f:81:66:cd:67:4a:78:3a:ca:b3:
54:5b:2b:1c:0a:58:4c:a8:ec:df:5d:eb:10:d3:2f:
b1:18:f2:95:63:08:eb:ec:0c:ae:bf:28:55:1c:5e:
ff:ea:e7:88:ac:d7:b6:70:4d:3d:85:cd:3d:ee:14:
3d:5b:68:3f:81:99:ce:b1:3f:f7:5f:80:9a:8a:8d:
f0:c9:b3:f0:c0:0c:c8:d7:d0:fa:4c:09:f7:14:55:
cb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:79:F8:C1:BB:41:04:BF:CD:23:6C:87:4F:E1:DE:8C:7B:B9:0D:1F
X509v3 Authority Key Identifier:
keyid:F3:6B:8B:6B:98:2D:7B:FF:F5:24:7D:A6:48:EF:67:3F:77:16:EF:08
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3238/82uLa5gte__1JH2mSO9nP3cW7wg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/82uLa5gte__1JH2mSO9nP3cW7wg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3238/jHn4wbtBBL_NI2yHT-HejHu5DR8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.21.103.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:5f:f9:16:bb:23:04:04:f3:38:c1:e2:35:ac:8b:4d:40:df:
3a:2d:fb:93:25:4e:0b:70:c0:ab:cc:f4:d6:3f:24:9d:a0:7e:
f2:84:a9:30:60:18:fc:f6:e1:27:8c:37:55:f5:bc:81:3d:25:
00:2b:ae:3e:70:de:b5:46:3e:4b:ef:e4:4a:f9:9a:e2:b9:b7:
e6:93:d2:db:23:c8:54:51:9f:4e:47:de:44:51:5f:5e:05:ec:
b1:1c:3b:d1:85:62:ed:92:07:00:83:4c:58:95:a4:15:fe:72:
9f:88:47:01:c1:f0:79:47:d4:b6:a1:27:69:07:35:4c:a5:9e:
6b:40:60:b1:d1:9e:f8:f5:de:c3:1c:1b:dd:b2:c1:69:86:21:
81:81:3d:e6:88:ae:ae:f8:58:cc:83:ff:04:6c:a5:db:8b:09:
d3:9e:c1:95:e4:de:22:49:5f:6d:4e:0e:45:bf:8a:55:43:26:
64:13:36:98:84:c2:6a:fa:d8:fb:b3:3a:43:00:71:1f:ab:93:
79:f5:6e:63:48:11:5e:8d:e8:63:7f:ff:89:fc:bc:06:33:0f:
6b:f4:33:8d:f6:55:a2:b2:09:1d:97:11:c8:ae:61:5c:5d:1d:
25:9f:12:51:e0:aa:67:bd:64:ce:10:0a:5e:5f:9b:ce:96:52:
d7:97:7a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:25 2025 by rpki-client