Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/529N81Yw86_TotvxSLL1HkfVorI.roa
File: 529N81Yw86_TotvxSLL1HkfVorI.roa (raw, json)
Hash identifier: Z/J4NAUbbLFm7Nacet23vx6yixEctwSw58G4eOz2Taw=
Subject key identifier: E7:6F:4D:F3:56:30:F3:AF:D3:A2:DB:F1:48:B2:F5:1E:47:D5:A2:B2
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 181D
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/529N81Yw86_TotvxSLL1HkfVorI.roa
Signing time: Fri 17 Jan 2025 01:24:36 +0000
ROA not before: Fri 17 Jan 2025 01:24:36 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 24373
IP address blocks: 103.221.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6173 (0x181d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Jan 17 01:24:36 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=E76F4DF35630F3AFD3A2DBF148B2F51E47D5A2B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:01:4f:bf:b5:34:c6:78:80:ef:56:eb:49:aa:
44:c7:67:23:4a:73:b6:92:6c:7c:da:f4:ed:f5:5a:
c1:1e:fc:8d:93:f2:95:df:46:d2:01:c2:93:62:ac:
c9:62:77:46:45:ae:ca:5c:ec:87:9a:2c:dd:69:17:
b4:43:f6:c6:84:55:ef:55:0d:9a:70:fa:53:04:6e:
a0:a5:de:6c:2a:37:93:89:41:d6:16:64:be:d0:a7:
7c:24:8b:b5:3e:35:01:2e:2f:0c:0a:fc:80:7b:cf:
1b:0f:a0:09:54:54:4b:c1:67:cf:b2:e7:03:4e:d8:
41:27:70:81:70:72:fe:d1:1f:e8:2e:07:e5:fa:4d:
dc:76:b2:b7:88:20:4b:c3:77:7d:36:e5:66:49:27:
08:85:e3:65:0b:78:0b:5f:64:15:35:23:bc:fc:3a:
8f:38:d6:22:a1:ac:fe:7e:0d:1c:2b:6e:a6:12:b0:
b2:cc:4b:bb:b2:f4:8e:fb:f0:6c:bc:24:06:95:77:
d0:e5:ad:f7:ac:2f:96:26:e7:7b:e8:e6:3b:66:a2:
3e:ba:28:5f:67:48:31:cb:b9:19:4d:b7:f4:b3:e0:
3c:ce:6d:07:52:d7:13:5e:68:c1:91:0d:fb:9b:21:
cf:60:24:00:05:f0:4b:b7:dc:ef:bb:0a:14:8e:96:
18:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:6F:4D:F3:56:30:F3:AF:D3:A2:DB:F1:48:B2:F5:1E:47:D5:A2:B2
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/529N81Yw86_TotvxSLL1HkfVorI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.48.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:2c:c9:c4:42:15:4f:e8:2a:8f:b3:ee:99:12:53:56:95:af:
ae:ea:21:28:ae:bb:01:de:eb:d0:4a:7d:43:49:9e:82:d8:f0:
eb:05:7e:36:33:a6:7e:82:9c:ef:35:aa:6a:b4:a1:d1:d2:43:
9a:db:4f:87:fa:29:4f:86:86:e5:e4:f8:c7:fd:13:09:19:54:
65:9e:7e:09:28:ff:83:e1:98:35:d2:03:08:4b:a9:66:2c:f6:
8e:48:b4:b7:79:85:25:49:f1:ee:c7:8d:01:78:c8:92:eb:91:
70:3b:fd:c9:25:7b:29:34:74:9d:f5:09:87:ee:71:ad:a0:4a:
56:de:22:e9:60:a1:da:82:32:cb:dc:02:95:7a:0a:6a:68:cb:
26:45:89:3a:2b:7a:99:16:c6:b4:77:05:a3:ac:81:bb:c2:7a:
1d:bb:7d:9c:3a:a6:b0:22:ae:8d:ce:6d:84:4e:67:cf:4a:19:
c3:1d:35:48:cb:26:ac:da:07:ba:66:a2:46:8c:76:1d:0f:19:
89:ce:de:b3:96:81:d7:2e:83:6d:45:e1:a9:a0:54:4a:c4:ac:
26:f4:7f:07:91:92:45:2f:59:bd:52:50:e6:6e:1b:1c:6e:e0:
81:3a:50:f2:ae:b8:08:b9:a5:75:ea:b3:e2:25:da:37:58:2e:
be:db:04:90
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICGB0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC
NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTAxMTcw
MTI0MzZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEU3NkY0REYzNTYzMEYz
QUZEM0EyREJGMTQ4QjJGNTFFNDdENUEyQjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCfAU+/tTTGeIDvVutJqkTHZyNKc7aSbHza9O31WsEe/I2T8pXf
RtIBwpNirMlid0ZFrspc7IeaLN1pF7RD9saEVe9VDZpw+lMEbqCl3mwqN5OJQdYW
ZL7Qp3wki7U+NQEuLwwK/IB7zxsPoAlUVEvBZ8+y5wNO2EEncIFwcv7RH+guB+X6
Tdx2sreIIEvDd3025WZJJwiF42ULeAtfZBU1I7z8Oo841iKhrP5+DRwrbqYSsLLM
S7uy9I778Gy8JAaVd9DlrfesL5Ym53vo5jtmoj66KF9nSDHLuRlNt/Sz4DzObQdS
1xNeaMGRDfubIc9gJAAF8Eu33O+7ChSOlhi9AgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU529N81Yw86/TotvxSLL1HkfVorIwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c
9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3
L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3LzUyOU44MVl3ODZfVG90
dnhTTEwxSGtmVm9ySS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAJn3TAwDQYJKoZIhvcNAQELBQADggEBACosycRCFU/oKo+z7pkSU1aVr67qISiu
uwHe69BKfUNJnoLY8OsFfjYzpn6CnO81qmq0odHSQ5rbT4f6KU+GhuXk+Mf9EwkZ
VGWefgko/4PhmDXSAwhLqWYs9o5ItLd5hSVJ8e7HjQF4yJLrkXA7/ckleyk0dJ31
CYfuca2gSlbeIulgodqCMsvcApV6CmpoyyZFiTorepkWxrR3BaOsgbvCeh27fZw6
prAiro3ObYROZ89KGcMdNUjLJqzaB7pmokaMdh0PGYnO3rOWgdcug21F4amgVErE
rCb0fweRkkUvWb1SUOZuGxxu4IE6UPKuuAi5pXXqs+Il2jdYLr7bBJA=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:44:45 2025 by rpki-client