Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/40/b8PfpXVzD2EuBiMlzhgmZ5dV2nQ.roa
File: b8PfpXVzD2EuBiMlzhgmZ5dV2nQ.roa (raw, json)
Hash identifier: Iy75CL3PVv5S8h/Dm3h2nw3zYHbj+HlVQ/XL65AIV/o=
Subject key identifier: 6F:C3:DF:A5:75:73:0F:61:2E:06:23:25:CE:18:26:67:97:55:DA:74
Certificate issuer: /CN=AECCCCB79DFE6C466CCADB39896710ECAC37B847
Certificate serial: 1374
Authority key identifier: AE:CC:CC:B7:9D:FE:6C:46:6C:CA:DB:39:89:67:10:EC:AC:37:B8:47
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rszMt53-bEZsyts5iWcQ7Kw3uEc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/b8PfpXVzD2EuBiMlzhgmZ5dV2nQ.roa
Signing time: Sat 11 May 2024 07:48:02 +0000
ROA not before: Sat 11 May 2024 07:48:02 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 17429
IP address blocks: 43.247.236.0/22 maxlen: 24
103.238.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4980 (0x1374)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AECCCCB79DFE6C466CCADB39896710ECAC37B847
Validity
Not Before: May 11 07:48:02 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6FC3DFA575730F612E062325CE1826679755DA74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a9:86:5b:a1:76:20:1c:d0:13:3a:9d:e6:7f:
07:30:64:23:dc:98:9b:34:20:da:73:94:79:95:75:
ce:35:cc:67:24:71:9c:97:6f:8d:3c:39:fe:68:06:
14:0f:d8:fb:b0:8c:f8:e9:50:9e:31:6e:40:62:19:
9c:1c:25:1c:f9:b7:df:af:d2:37:17:a1:96:24:e6:
05:a2:e1:7d:a8:cb:5e:13:af:5f:e7:30:60:b0:f4:
29:23:c1:15:1c:64:bc:75:05:9a:78:ae:95:eb:07:
10:66:bc:31:87:99:20:6a:d1:ec:91:24:e1:ef:d7:
8f:e6:c2:6b:c7:fc:f7:0a:ce:64:ad:08:d4:13:44:
50:06:46:af:7f:e2:de:2f:47:84:ec:56:ba:7c:5c:
65:bc:92:13:e6:cf:33:d2:52:9f:b8:b7:bb:cb:c2:
da:90:d7:46:98:54:90:24:f0:26:9b:37:3d:ab:3d:
c2:73:5c:cc:e5:bf:3a:78:0d:68:81:a3:a4:49:b1:
78:ed:7f:5c:7e:b4:57:69:d0:04:9b:a0:24:91:f4:
98:8c:96:1e:0e:fe:e7:4f:a0:07:ac:76:ec:64:34:
be:eb:39:4a:7d:7b:d8:6b:6e:2f:85:67:3c:ce:0c:
72:7a:84:69:f9:4d:7e:d0:c6:97:e4:80:84:17:db:
5e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C3:DF:A5:75:73:0F:61:2E:06:23:25:CE:18:26:67:97:55:DA:74
X509v3 Authority Key Identifier:
keyid:AE:CC:CC:B7:9D:FE:6C:46:6C:CA:DB:39:89:67:10:EC:AC:37:B8:47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/rszMt53-bEZsyts5iWcQ7Kw3uEc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/rszMt53-bEZsyts5iWcQ7Kw3uEc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/40/b8PfpXVzD2EuBiMlzhgmZ5dV2nQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.247.236.0/22
103.238.48.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:a3:87:fe:83:6b:d7:e6:6d:28:ab:4d:5b:96:fa:57:3c:52:
55:74:ea:50:26:cc:15:b4:20:a7:c4:af:9f:d9:59:b9:48:42:
60:97:0b:ea:93:f0:d7:30:12:c6:ae:14:e2:69:a0:7e:c9:80:
f6:76:82:06:27:da:b6:87:f4:8b:da:b0:27:33:cf:2d:27:1c:
87:8c:e3:a6:ae:a6:76:a6:5e:12:ee:86:dc:0b:61:60:f6:36:
ca:18:ab:37:57:db:86:5d:47:bb:14:70:98:1b:47:44:cc:82:
7e:af:04:94:ec:59:82:76:1d:0f:ba:8b:4b:5a:9a:f4:84:c9:
b8:32:6b:43:8f:c7:06:63:2c:af:e6:c5:47:b7:35:f2:91:c3:
a6:44:e9:56:fe:fb:96:85:4d:de:b6:66:86:6b:1c:f2:91:b8:
08:f0:f8:1a:4a:61:cd:07:d7:da:ff:7f:b5:85:1b:10:82:d9:
76:6c:77:4f:1a:c3:ae:af:64:da:ea:7a:f3:1b:82:b4:b6:bd:
08:b0:77:43:6a:61:07:1c:37:8b:f3:ee:60:05:1c:96:3b:ad:
da:aa:38:d7:fc:59:d8:3d:b5:22:6e:82:af:0c:f0:30:17:6b:
26:2c:c8:ca:75:ca:a6:2f:fd:7e:6b:67:df:1f:bf:97:b5:9f:
b1:f5:c1:f3
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgICE3QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUVD
Q0NDQjc5REZFNkM0NjZDQ0FEQjM5ODk2NzEwRUNBQzM3Qjg0NzAeFw0yNDA1MTEw
NzQ4MDJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDZGQzNERkE1NzU3MzBG
NjEyRTA2MjMyNUNFMTgyNjY3OTc1NURBNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvqYZboXYgHNATOp3mfwcwZCPcmJs0INpzlHmVdc41zGckcZyX
b408Of5oBhQP2PuwjPjpUJ4xbkBiGZwcJRz5t9+v0jcXoZYk5gWi4X2oy14Tr1/n
MGCw9CkjwRUcZLx1BZp4rpXrBxBmvDGHmSBq0eyRJOHv14/mwmvH/PcKzmStCNQT
RFAGRq9/4t4vR4TsVrp8XGW8khPmzzPSUp+4t7vLwtqQ10aYVJAk8CabNz2rPcJz
XMzlvzp4DWiBo6RJsXjtf1x+tFdp0ASboCSR9JiMlh4O/udPoAesduxkNL7rOUp9
e9hrbi+FZzzODHJ6hGn5TX7QxpfkgIQX217HAgMBAAGjggH1MIIB8TAdBgNVHQ4E
FgQUb8PfpXVzD2EuBiMlzhgmZ5dV2nQwHwYDVR0jBBgwFoAUrszMt53+bEZsyts5
iWcQ7Kw3uEcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDAv
cnN6TXQ1My1iRVpzeXRzNWlXY1E3S3czdUVjLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9yc3pNdDUzLWJFWnN5dHM1aVdjUTdLdzN1RWMuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC80MC9iOFBmcFhWekQyRXVCaU1s
emhnbVo1ZFYyblEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQC
K/fsAwQCZ+4wMA0GCSqGSIb3DQEBCwUAA4IBAQCpo4f+g2vX5m0oq01blvpXPFJV
dOpQJswVtCCnxK+f2Vm5SEJglwvqk/DXMBLGrhTiaaB+yYD2doIGJ9q2h/SL2rAn
M88tJxyHjOOmrqZ2pl4S7obcC2Fg9jbKGKs3V9uGXUe7FHCYG0dEzIJ+rwSU7FmC
dh0PuotLWpr0hMm4MmtDj8cGYyyv5sVHtzXykcOmROlW/vuWhU3etmaGaxzykbgI
8PgaSmHNB9fa/3+1hRsQgtl2bHdPGsOur2Ta6nrzG4K0tr0IsHdDamEHHDeL8+5g
BRyWO63aqjjX/FnYPbUiboKvDPAwF2smLMjKdcqmL/1+a2ffH7+XtZ+x9cHz
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:36:48 2025 by rpki-client