Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/9bUQPLQzQ2sAigLkOe8mmFfpa04.roa
File: 9bUQPLQzQ2sAigLkOe8mmFfpa04.roa (raw, json)
Hash identifier: bk2aE/1oSoW2i/keQVVb8JLkCWxO+fr6c/bYKM3o/lg=
Subject key identifier: F5:B5:10:3C:B4:33:43:6B:00:8A:02:E4:39:EF:26:98:57:E9:6B:4E
Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial: 19DF
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/9bUQPLQzQ2sAigLkOe8mmFfpa04.roa
Signing time: Fri 28 Feb 2025 17:00:49 +0000
ROA not before: Fri 28 Feb 2025 17:00:49 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 17621
IP address blocks: 103.5.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6623 (0x19df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Validity
Not Before: Feb 28 17:00:49 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=F5B5103CB433436B008A02E439EF269857E96B4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:79:15:61:1a:1d:32:d1:3e:0f:52:5c:ae:89:
9b:0a:5b:6b:2e:9a:77:66:63:c8:97:1a:de:62:6a:
bc:7b:05:4b:de:fb:77:07:72:99:0b:38:08:eb:0e:
dd:db:cb:b2:44:d2:96:5a:ca:9e:2a:ea:5e:ce:b7:
8b:9e:ac:dc:e3:65:93:c7:bf:f4:4c:35:49:07:3b:
4b:5f:82:16:b0:df:bb:6b:0c:a2:62:30:bc:33:bd:
c5:06:28:81:99:b3:45:2a:80:a0:e4:a9:ee:7d:80:
b8:c1:94:96:e2:a0:4b:9a:7c:f3:8e:be:3b:ba:e5:
78:72:7f:9d:09:00:14:38:fa:8a:5d:0c:8a:09:96:
1d:f0:02:24:04:db:c6:c7:db:d2:0d:10:56:75:a1:
1f:d1:7d:b1:c0:1e:6b:2c:64:64:ab:15:36:e0:69:
a5:a3:bf:02:a2:c5:3d:36:d4:65:1b:27:24:93:53:
31:87:a6:18:be:2b:70:7d:f0:b7:96:9d:3b:4b:0c:
28:08:68:8b:aa:a5:9c:a8:43:6a:81:2b:89:ca:d7:
47:73:a4:d7:cb:e6:f4:b4:86:61:d7:ca:ce:dd:c6:
9d:29:5d:3f:64:97:2e:a6:23:8b:a9:d8:66:c2:f9:
6b:39:9f:10:be:6b:5f:5e:9f:b4:c1:23:62:38:a7:
8f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B5:10:3C:B4:33:43:6B:00:8A:02:E4:39:EF:26:98:57:E9:6B:4E
X509v3 Authority Key Identifier:
keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/9bUQPLQzQ2sAigLkOe8mmFfpa04.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.5.194.0/24
Signature Algorithm: sha256WithRSAEncryption
be:fa:ab:27:3e:16:7a:ee:bc:28:e4:f5:f6:21:67:c0:62:b7:
fa:d1:db:8d:02:57:3a:9c:32:c6:a8:4b:fa:88:33:6d:5c:7d:
0b:9e:ff:26:06:0d:c5:77:c1:62:f4:4e:e1:a5:6d:1c:6a:ba:
2c:c3:a3:87:aa:fe:06:b9:10:8d:55:18:ee:07:92:bd:da:f1:
77:bc:e5:f9:4e:ef:1a:4f:77:86:69:5f:42:12:aa:75:99:e2:
7b:1b:05:21:28:72:84:74:ea:b1:8a:1c:54:0c:72:cd:34:34:
2e:0b:4f:7f:4e:c0:c2:64:7c:da:90:43:30:8f:56:92:06:a6:
ab:d2:1e:3f:44:55:e3:94:18:f7:54:04:bc:d5:02:09:e9:48:
d4:e6:a4:05:d4:1b:f2:08:f3:5f:39:b8:e8:95:46:cb:76:c4:
78:50:8e:f7:7f:23:21:ae:5c:4d:40:ab:a9:9d:01:85:a0:0d:
ef:e4:70:bd:49:f3:17:27:d1:95:98:e0:21:25:35:dd:9e:81:
eb:f9:b5:5b:1a:cc:3a:08:be:d4:02:cd:20:b3:0f:55:18:55:
09:c9:3a:3c:00:69:f6:aa:74:26:f0:72:1c:bb:7a:c0:c3:cf:
fd:24:78:57:ca:9c:e8:05:79:ff:49:d7:83:b6:f6:9a:b6:16:
f8:a0:60:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:29:47 2025 by rpki-client