Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/-Pj_Kwl8_sOZal6_RCHehRiKOa0.roa
File: -Pj_Kwl8_sOZal6_RCHehRiKOa0.roa (raw, json)
Hash identifier: NAz/w/3MrCPb6kKAdRlbZM3dvQ2Wcc7ilDmyFHAxL5g=
Subject key identifier: F8:F8:FF:2B:09:7C:FE:C3:99:6A:5E:BF:44:21:DE:85:18:8A:39:AD
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1862
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/-Pj_Kwl8_sOZal6_RCHehRiKOa0.roa
Signing time: Fri 17 Jan 2025 01:25:00 +0000
ROA not before: Fri 17 Jan 2025 01:25:00 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 13444
IP address blocks: 103.221.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6242 (0x1862)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:00 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=F8F8FF2B097CFEC3996A5EBF4421DE85188A39AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6b:2d:40:28:4c:b5:7b:18:01:a2:7e:1e:99:
d4:91:da:d6:f8:cf:98:74:8e:b4:5e:8a:d5:0a:c0:
22:b2:6b:db:89:65:f8:40:75:be:a3:b9:47:40:07:
0d:4d:12:d9:ab:37:29:2f:67:89:98:07:14:40:96:
c6:14:8a:23:92:d2:71:0d:0f:c0:93:6b:aa:cf:8a:
33:dc:f5:cc:4e:b9:1b:bf:a2:4b:c1:be:5e:fa:ee:
fc:bc:e3:cb:f4:2b:46:da:7f:1e:03:7e:88:25:35:
52:82:e4:2c:2f:ab:8c:b0:f1:cc:cf:5f:cb:08:95:
54:c6:b1:e8:47:8f:7e:7a:eb:e8:2c:e9:23:95:6d:
8b:b8:cf:be:f5:ce:ef:59:56:cd:d3:93:21:18:5c:
45:77:c5:6f:3b:ae:30:69:64:97:d3:fd:db:77:84:
17:62:bd:8f:ac:9d:68:80:79:1b:11:a9:17:70:46:
b1:05:5b:af:c8:c2:b3:4c:27:e7:cc:c6:3f:48:b3:
5b:7e:89:14:02:c6:03:88:c1:10:e8:a8:56:4f:b4:
d9:dd:16:d2:49:fd:4c:72:2b:53:d4:86:7a:c2:6a:
66:b9:99:8f:ca:83:58:a9:d4:16:02:75:8e:6f:66:
10:88:a5:a6:90:4b:06:46:df:88:08:44:7a:3d:9c:
50:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F8:FF:2B:09:7C:FE:C3:99:6A:5E:BF:44:21:DE:85:18:8A:39:AD
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/-Pj_Kwl8_sOZal6_RCHehRiKOa0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.40.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:0c:21:c1:db:2e:e1:8e:a6:7a:04:89:6c:b9:1c:ec:da:dc:
12:f0:0d:ea:e3:d2:57:a7:31:42:72:59:ad:2d:53:93:8f:ce:
e4:c4:32:39:fc:70:5a:2b:3f:01:49:0e:80:79:86:7b:05:2a:
c0:88:29:35:0e:59:ca:d0:19:f8:bf:70:e2:f1:21:f0:26:f5:
3e:05:2f:4f:0b:18:c7:25:b7:83:ca:b8:0b:83:56:69:53:f7:
dd:7b:1c:9f:c3:4d:7c:34:17:c3:1d:b5:89:95:4f:e5:1f:d9:
3c:37:95:57:e7:2e:ad:dd:b7:c3:d1:29:e2:ba:15:86:27:6e:
0d:17:b9:93:d6:fe:a7:5c:05:0e:8b:2d:93:e4:09:4c:61:51:
d1:79:67:2b:4a:99:02:47:2b:bc:11:4e:17:c7:3d:2e:30:5b:
c8:2d:46:fe:d2:46:bb:d8:6c:0b:d9:52:6f:8c:d8:e9:15:c0:
9b:29:39:5a:83:0c:87:b3:00:6c:7e:63:b7:9c:a2:98:f5:9e:
20:fd:04:96:7a:02:65:2f:f4:68:45:91:a8:94:23:e5:9a:41:
f9:95:fc:13:68:a2:77:8d:ac:5f:9c:ce:22:3f:3c:9c:e7:ff:
ce:45:53:c4:aa:13:de:cd:1c:73:dc:0c:02:df:0c:3e:b3:59:
96:da:bc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:39:34 2025 by rpki-client