Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/3i_fqOyCixDOFRGuJU8aWVuIYz0.roa
File: 3i_fqOyCixDOFRGuJU8aWVuIYz0.roa (raw, json)
Hash identifier: E3dM1DYELSLPRvNEh4DQg3wlF+uD26l3SHZ4DTZ8aAU=
Subject key identifier: DE:2F:DF:A8:EC:82:8B:10:CE:15:11:AE:25:4F:1A:59:5B:88:63:3D
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 1904
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/3i_fqOyCixDOFRGuJU8aWVuIYz0.roa
Signing time: Fri 17 Jan 2025 01:25:56 +0000
ROA not before: Fri 17 Jan 2025 01:25:56 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139259
IP address blocks: 103.221.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6404 (0x1904)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:25:56 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=DE2FDFA8EC828B10CE1511AE254F1A595B88633D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:12:2f:59:25:6c:f2:ce:3b:76:5a:fb:26:18:
53:29:be:03:47:63:f5:e0:0c:5c:aa:ce:bd:c7:24:
c5:d4:3f:f9:a4:f0:d7:e9:42:b7:20:bb:4b:ef:8a:
1b:c7:02:19:50:eb:d0:b5:e4:8b:1e:4e:90:c1:09:
cf:49:92:78:28:d0:2c:3e:fd:91:7c:54:c0:ad:5d:
46:6a:06:eb:43:98:2d:7c:c0:06:54:64:a7:84:f7:
36:c7:a6:21:51:7a:38:24:c4:a9:41:1e:e8:0c:11:
61:64:cb:d9:1c:5d:71:c3:37:ae:7d:54:78:82:9a:
bc:0e:30:d1:e5:80:f2:ee:e6:31:0a:1f:9a:90:94:
7b:e5:58:a1:db:29:bb:0f:2b:fb:55:75:9f:95:ad:
0e:a1:0c:f0:94:ad:a3:46:13:be:0d:ee:93:7f:74:
82:31:1c:6e:46:ec:b7:ea:af:97:c0:45:aa:f4:f2:
b3:b1:cb:01:2d:8e:63:27:f7:5b:1d:7d:49:89:a7:
28:c9:4f:c0:fb:4b:a5:3b:e0:24:9f:59:71:aa:fd:
fc:6a:7f:7f:af:5d:ec:96:37:fc:e3:26:b6:2a:d9:
39:5c:91:80:0d:1a:e2:1d:ca:51:f1:7d:60:19:0c:
8f:62:8f:61:28:22:fb:7d:70:bf:58:ec:8d:43:68:
5e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:2F:DF:A8:EC:82:8B:10:CE:15:11:AE:25:4F:1A:59:5B:88:63:3D
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/3i_fqOyCixDOFRGuJU8aWVuIYz0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.4.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:3e:d3:d4:cb:b0:0a:df:3e:3c:6f:57:92:12:c9:05:2b:e7:
10:6a:cd:a3:5a:8b:07:ca:a5:56:0f:4a:c8:fe:d4:46:9b:7e:
40:d7:73:6e:00:a1:5f:23:cb:17:3c:d8:31:4d:87:17:4e:19:
3b:c3:9c:95:f1:92:91:ba:c0:2e:9a:28:cb:4f:b7:c4:31:67:
b6:68:9b:fc:4f:1c:2c:fe:9b:5a:67:c6:d6:de:0e:3b:b1:a0:
24:b9:4b:8a:a0:f6:fa:48:29:01:d0:f1:c4:c9:dd:f0:b1:77:
8e:4b:26:0c:38:02:b2:2c:d8:2b:60:ba:c7:c1:16:a7:56:a4:
00:3d:05:91:c8:f6:16:f1:97:18:13:c7:42:5f:f1:b9:57:6c:
da:60:9f:23:2d:6f:3d:6d:cb:85:45:74:82:b8:6c:27:bb:f4:
6e:e7:a4:87:a8:de:bd:39:ae:c9:98:2d:87:16:7f:dd:92:21:
52:2f:56:b4:e8:55:13:2c:1b:87:39:07:eb:87:f2:9d:c6:14:
4e:5e:9e:5d:7b:f6:12:5a:43:1d:5d:81:ba:6f:0b:f8:f8:3a:
60:d0:6f:f7:68:bb:06:a8:d7:7a:01:c0:22:b2:9c:2b:d2:5b:
c1:41:05:e0:35:ea:15:0b:48:07:31:9d:50:ce:ea:9d:28:a9:
bc:b5:76:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:38:47 2025 by rpki-client