Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/-iq9Exxs54claD8d9I595ayuVWE.roa
File: -iq9Exxs54claD8d9I595ayuVWE.roa (raw, json)
Hash identifier: p+ZlOHsMTimwiYnN/2yGW7wYB5GRNU5wulm9lhqh9UI=
Subject key identifier: FA:2A:BD:13:1C:6C:E7:87:25:68:3F:1D:F4:8E:7D:E5:AC:AE:55:61
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1812
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/-iq9Exxs54claD8d9I595ayuVWE.roa
Signing time: Fri 17 Jan 2025 01:24:32 +0000
ROA not before: Fri 17 Jan 2025 01:24:32 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139259
IP address blocks: 103.221.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6162 (0x1812)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:24:32 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=FA2ABD131C6CE78725683F1DF48E7DE5ACAE5561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:81:42:0e:a2:83:92:95:e1:33:2f:3b:ed:a9:
83:1b:69:01:7c:bc:0c:73:b8:70:0b:90:be:74:60:
fb:c3:0e:84:67:34:f9:af:87:30:71:43:3f:41:3b:
2a:eb:f4:26:66:ef:e3:ab:3c:e9:d0:2e:02:ae:14:
5e:71:fc:87:a7:a5:67:15:e5:d5:f5:4a:9d:20:a5:
13:3d:51:ed:9a:67:ec:27:28:a7:9f:8c:dc:c9:1a:
18:08:67:7d:0d:8e:a7:9f:3c:1d:ea:8b:f7:2c:39:
a2:9c:e2:9e:74:33:86:d0:fb:30:a3:cb:3e:f8:0e:
60:1b:25:bc:bc:3d:f3:97:71:2c:9b:ad:e7:cf:3b:
13:d7:fd:45:97:9c:93:c7:fb:f4:b2:4b:92:11:7e:
e5:64:b9:9f:81:48:03:6c:8a:82:2f:15:e6:3a:d7:
ef:02:60:d2:44:ea:53:b3:39:36:00:14:7b:1d:82:
5e:05:4c:73:28:27:cd:8e:fd:51:02:9c:73:2e:6d:
9a:9f:87:d8:20:08:59:52:17:cc:5e:54:ed:3c:c1:
fa:89:48:ff:7b:9f:35:e9:2c:34:56:9a:ef:fd:4b:
b3:69:75:92:17:46:ec:c2:e6:76:34:8d:80:ad:37:
62:2e:e1:34:34:c3:06:1d:fc:ba:06:4e:56:db:c0:
d8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:2A:BD:13:1C:6C:E7:87:25:68:3F:1D:F4:8E:7D:E5:AC:AE:55:61
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/-iq9Exxs54claD8d9I595ayuVWE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.7.0/24
Signature Algorithm: sha256WithRSAEncryption
04:53:a4:22:bd:5d:d3:43:e3:c5:1e:85:fb:71:01:82:26:79:
7e:39:e1:29:96:c1:ca:77:f3:42:71:ee:3e:6d:eb:0f:8b:81:
10:6b:63:36:66:47:ef:ee:3a:01:7c:5e:f4:9a:0b:59:d1:d7:
07:8e:a3:80:d2:80:f3:aa:a2:a9:0f:66:7f:13:38:cc:f4:5f:
ac:78:62:1c:97:15:de:3a:25:16:77:f1:d2:de:3d:38:13:34:
1f:98:94:2c:40:db:20:45:e3:29:84:19:8f:38:25:78:f7:55:
aa:64:c8:f8:fe:ad:5e:51:b9:3e:3f:ce:64:b0:7b:47:57:d3:
1f:e1:3c:77:1d:7f:4f:b5:01:50:7f:6b:fe:3d:b5:1c:c7:f5:
32:e7:3a:4e:be:2f:13:4e:9f:39:a9:a3:dc:c6:b4:96:41:22:
6b:bb:d8:56:5c:07:fb:30:db:9f:b2:94:25:d0:f2:33:fb:59:
f7:46:cb:8f:35:aa:f0:a2:65:6b:54:bd:2f:1e:58:12:72:30:
fd:9d:55:94:c9:84:ce:5c:5a:ec:57:94:94:c4:f7:9e:8d:9d:
05:5e:b2:40:02:72:33:8a:47:c3:b7:24:bb:f9:35:78:48:27:
4a:e2:bd:99:22:60:70:c4:4d:c1:1a:eb:90:ed:e5:22:f8:8c:
f1:49:71:1c
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICGBIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC
NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw
MTI0MzJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEZBMkFCRDEzMUM2Q0U3
ODcyNTY4M0YxREY0OEU3REU1QUNBRTU1NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/gUIOooOSleEzLzvtqYMbaQF8vAxzuHALkL50YPvDDoRnNPmv
hzBxQz9BOyrr9CZm7+OrPOnQLgKuFF5x/IenpWcV5dX1Sp0gpRM9Ue2aZ+wnKKef
jNzJGhgIZ30NjqefPB3qi/csOaKc4p50M4bQ+zCjyz74DmAbJby8PfOXcSybrefP
OxPX/UWXnJPH+/SyS5IRfuVkuZ+BSANsioIvFeY61+8CYNJE6lOzOTYAFHsdgl4F
THMoJ82O/VECnHMubZqfh9ggCFlSF8xeVO08wfqJSP97nzXpLDRWmu/9S7NpdZIX
RuzC5nY0jYCtN2Iu4TQ0wwYd/LoGTlbbwNiNAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU+iq9Exxs54claD8d9I595ayuVWEwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c
9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3
L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3Ly1pcTlFeHhzNTRjbGFE
OGQ5STU5NWF5dVZXRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABn3QcwDQYJKoZIhvcNAQELBQADggEBAARTpCK9XdND48UehftxAYImeX454SmW
wcp380Jx7j5t6w+LgRBrYzZmR+/uOgF8XvSaC1nR1weOo4DSgPOqoqkPZn8TOMz0
X6x4YhyXFd46JRZ38dLePTgTNB+YlCxA2yBF4ymEGY84JXj3VapkyPj+rV5RuT4/
zmSwe0dX0x/hPHcdf0+1AVB/a/49tRzH9TLnOk6+LxNOnzmpo9zGtJZBImu72FZc
B/sw25+ylCXQ8jP7WfdGy481qvCiZWtUvS8eWBJyMP2dVZTJhM5cWuxXlJTE956N
nQVeskACcjOKR8O3JLv5NXhIJ0rivZkiYHDETcEa65Dt5SL4jPFJcRw=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:31 2025 by rpki-client