Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/3Jt8Shy40KYAMNf3dIAe6VcncXE.roa
File: 3Jt8Shy40KYAMNf3dIAe6VcncXE.roa (raw, json)
Hash identifier: GxlOFrogJZU3P61b7HSI9WnkYomH7tohg44luzIGQbk=
Subject key identifier: DC:9B:7C:4A:1C:B8:D0:A6:00:30:D7:F7:74:80:1E:E9:57:27:71:71
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1828
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/3Jt8Shy40KYAMNf3dIAe6VcncXE.roa
Signing time: Fri 17 Jan 2025 01:24:41 +0000
ROA not before: Fri 17 Jan 2025 01:24:41 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 13444
IP address blocks: 103.221.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6184 (0x1828)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:24:41 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=DC9B7C4A1CB8D0A60030D7F774801EE957277171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:82:73:33:77:d7:01:69:f5:98:8c:72:2c:a2:
46:f0:17:ba:f0:60:c3:19:b1:47:ef:84:9a:c1:2c:
19:81:08:90:14:a3:d0:ec:35:7f:55:03:dc:05:73:
cf:a8:9e:48:42:a5:d2:c8:cd:98:6e:ae:ad:83:48:
95:a4:1d:e6:45:66:82:bb:29:c3:88:39:84:e4:1c:
c8:ea:70:88:bb:64:91:98:fc:5a:b1:64:3a:7b:98:
ae:34:be:c9:1d:d8:fe:b9:4a:b2:42:4e:c5:c9:dc:
f6:f7:a5:57:da:af:83:0d:86:e3:97:d7:35:18:70:
e8:6a:15:e6:2e:31:1e:85:27:37:cf:ac:1b:6d:7f:
9c:6e:6c:dd:a2:25:bb:03:c1:36:6a:55:50:ea:25:
5d:89:9e:31:97:a4:6a:eb:8a:9b:b7:58:e7:ab:83:
ba:d9:e5:b2:1b:8e:92:c1:fd:71:02:f6:b3:a3:02:
8a:83:4d:cf:54:be:8c:d1:f2:0a:88:af:59:46:f9:
3d:34:06:cb:71:7c:2a:c2:33:6c:46:a6:2c:ae:cd:
cd:a8:03:d4:b9:5f:ec:60:7f:22:b9:7b:20:8f:c5:
2e:77:57:14:46:26:da:44:5e:c9:3b:e4:71:a2:ff:
c8:bc:b3:be:b6:d7:09:f2:e0:b8:b0:d1:40:fd:30:
71:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9B:7C:4A:1C:B8:D0:A6:00:30:D7:F7:74:80:1E:E9:57:27:71:71
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/3Jt8Shy40KYAMNf3dIAe6VcncXE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.48.0/24
Signature Algorithm: sha256WithRSAEncryption
50:54:1a:71:5b:aa:3b:2b:60:dc:76:4a:f1:19:06:e0:27:33:
43:f2:7d:f8:53:7c:c0:67:16:17:93:34:bc:41:19:8d:6e:f6:
e5:ea:c1:87:84:d1:4a:da:2c:ba:b3:83:d5:c8:e8:eb:3a:3e:
73:b9:e5:58:f9:75:44:0f:73:7d:eb:da:42:34:b5:50:3a:02:
11:78:0f:5f:3c:b4:bd:dc:84:52:df:11:2d:e4:55:9e:d7:dc:
0b:55:1a:f2:51:b8:af:a9:20:d5:55:2a:da:76:b3:12:af:b8:
1b:12:87:e1:54:f8:00:b6:23:a1:e1:eb:1a:44:47:40:d6:0a:
11:b0:ae:62:be:f5:0f:14:b7:00:28:d7:91:fc:97:f5:ac:cf:
22:8f:a5:db:12:c9:f2:9a:b1:c6:3e:3b:d2:a1:5f:fc:ab:27:
58:d5:f6:11:1c:a6:d4:50:7c:a7:03:f2:63:ea:c4:87:a6:28:
40:ae:a7:89:bd:e0:9e:75:59:8c:da:85:2c:c1:82:04:0e:e5:
1b:6c:a6:3a:c2:e8:65:aa:2f:c9:ba:cc:74:8c:f9:78:1d:5e:
39:8c:45:66:eb:cb:59:d8:c5:fa:f7:39:c3:d0:9e:bb:04:8e:
81:50:34:8e:83:e1:6c:6d:80:cc:73:24:bc:3d:db:ec:ae:3d:
87:8d:8d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:17:22 2025 by rpki-client